Skip to content

Vulnerabilities of Mozilla Firefox

Is your version affected?

CVE Summary Score Published
CVE-2017-5469 Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex Not rated Jun 11, 2018
CVE-2017-5411 A use-after-free can occur during buffer storage operations within the ANGLE graphics library, used for WebGL content Not rated Jun 11, 2018
CVE-2017-5451 A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event Not rated Jun 11, 2018
CVE-2017-5468 An issue with incorrect ownership model of "privateBrowsing" information exposed through developer tools Not rated Jun 11, 2018
CVE-2017-5422 If a malicious site uses the "view-source:" protocol in a series within a single hyperlink, it can trigger a… Not rated Jun 11, 2018
CVE-2017-5442 A use-after-free vulnerability during changes in style when manipulating DOM elements Not rated Jun 11, 2018
CVE-2017-5450 A mechanism to spoof the Firefox for Android addressbar using a "javascript:" URI Not rated Jun 11, 2018
CVE-2017-5433 A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are… Not rated Jun 11, 2018
CVE-2017-5382 Feed preview for RSS feeds can be used to capture errors and exceptions generated by privileged content, allowing for… Not rated Jun 11, 2018
CVE-2017-5410 Memory corruption resulting in a potentially exploitable crash during garbage collection of JavaScript due errors in how… Not rated Jun 11, 2018
CVE-2017-5402 A use-after-free can occur when events are fired for a "FontFace" object after the object has been already been… Not rated Jun 11, 2018
CVE-2017-5460 A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses… Not rated Jun 11, 2018
CVE-2017-5421 A malicious site could spoof the contents of the print preview window if popup windows are enabled, resulting in user… Not rated Jun 11, 2018
CVE-2017-5467 A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping… Not rated Jun 11, 2018
CVE-2017-5449 A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with… Not rated Jun 11, 2018
CVE-2017-5441 A use-after-free vulnerability when holding a selection during scroll events Not rated Jun 11, 2018
CVE-2017-5381 The "export" function in the Certificate Viewer can force local filesystem navigation when the "common name" in a… Not rated Jun 11, 2018
CVE-2017-5432 A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash Not rated Jun 11, 2018
CVE-2017-5420 A "javascript:" url loaded by a malicious page can obfuscate its location by blanking the URL displayed in the… Not rated Jun 11, 2018
CVE-2017-5392 Weak proxy objects have weak references on multiple threads when they should only have them on one, resulting in… Not rated Jun 11, 2018
CVE-2017-5459 A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash Not rated Jun 11, 2018
CVE-2017-5409 The Mozilla Windows updater can be called by a non-privileged user to delete an arbitrary local file by passing a… Not rated Jun 11, 2018
CVE-2017-5401 A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error Not rated Jun 11, 2018
CVE-2017-5448 An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media content Not rated Jun 11, 2018
CVE-2017-5458 When a "javascript:" URL is drag and dropped by a user into the addressbar, the URL will be processed and executed Not rated Jun 11, 2018

Other Mozilla products