Skip to content

Vulnerabilities of Mozilla Focus for Android

Is your version affected?

CVE Summary Score Published
CVE-2023-29546 When recording the screen while in Private Browsing on Firefox for Android the address bar and keyboard were not hidden,… 6.5 Medium Jun 19, 2023
CVE-2023-29534 Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android 9.1 Critical Jun 19, 2023
CVE-2023-29547 When a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain could have been created,… 6.5 Medium Jun 2, 2023
CVE-2023-29537 Multiple race conditions in the font initialization could have led to memory corruption and execution of… Not rated Jun 2, 2023
CVE-2023-29544 If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could have caused… 6.5 Medium Jun 2, 2023
CVE-2023-29536 An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory,… Not rated Jun 2, 2023
CVE-2023-29543 An attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global… 8.8 High Jun 2, 2023
CVE-2023-29535 Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced Not rated Jun 2, 2023
CVE-2023-29551 Memory safety bugs present in Firefox 111 8.8 High Jun 2, 2023
CVE-2023-29541 Firefox did not properly handle downloads of files ending in .desktop, which can be interpreted to run… 8.8 High Jun 2, 2023
CVE-2023-29550 Memory safety bugs present in Firefox 111 and Firefox ESR 102.9 8.8 High Jun 2, 2023
CVE-2023-29533 A website could have obscured the fullscreen notification by using a combination of window.open, fullscreen requests,… Not rated Jun 2, 2023
CVE-2023-29540 Using a redirect embedded into sourceMappingUrls could allow for navigation to external protocol links in sandboxed… Not rated Jun 2, 2023
CVE-2023-29549 Under certain circumstances, a call to the <code>bind</code> function may have resulted in the incorrect realm 6.5 Medium Jun 2, 2023
CVE-2023-29539 When handling the filename directive in the Content-Disposition header, the filename would be truncated if the… Not rated Jun 2, 2023
CVE-2023-29548 A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result 6.5 Medium Jun 2, 2023
CVE-2023-29538 Under specific circumstances a WebExtension may have received a jar:file:/// URI instead of a moz-extension:/// URI… Not rated Jun 2, 2023

Other Mozilla products