| CVE-2025-1010 |
An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash
|
9.8
Critical
|
Feb 4, 2025 |
| CVE-2025-1009 |
An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash
|
9.8
Critical
|
Feb 4, 2025 |
| CVE-2025-0247 |
Memory safety bugs present in Firefox 133 and Thunderbird 133
|
9.8
Critical
|
Jan 7, 2025 |
| CVE-2024-11705 |
`NSC_DeriveKey` inadvertently assumed that the `phKey` parameter is always non-NULL
|
9.1
Critical
|
Nov 26, 2024 |
| CVE-2024-11698 |
A flaw in handling fullscreen transitions may have inadvertently caused the application to become stuck in fullscreen…
|
9.8
Critical
|
Nov 26, 2024 |
| CVE-2024-11704 |
A double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an error path
|
9.8
Critical
|
Nov 26, 2024 |
| CVE-2024-11693 |
The executable file warning was not presented when downloading .library-ms files
|
9.8
Critical
|
Nov 26, 2024 |
| CVE-2024-10468 |
Potential race conditions in IndexedDB could have caused memory corruption, leading to a potentially exploitable crash
|
9.8
Critical
|
Oct 29, 2024 |
| CVE-2024-10467 |
Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3
|
9.8
Critical
|
Oct 29, 2024 |
| CVE-2024-9680 |
Exploited
Mozilla Firefox Use-After-Free Vulnerability
|
9.8
Critical
|
Oct 9, 2024 |
| CVE-2024-9402 |
Memory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2
|
9.8
Critical
|
Oct 1, 2024 |
| CVE-2024-9401 |
Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2
|
9.8
Critical
|
Oct 1, 2024 |
| CVE-2024-9392 |
A compromised content process could have allowed for the arbitrary loading of cross-origin pages
|
9.8
Critical
|
Oct 1, 2024 |
| CVE-2024-8387 |
Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1
|
9.8
Critical
|
Sep 3, 2024 |
| CVE-2024-8384 |
The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the…
|
9.8
Critical
|
Sep 3, 2024 |
| CVE-2024-8385 |
A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type…
|
9.8
Critical
|
Sep 3, 2024 |
| CVE-2024-8381 |
A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as…
|
9.8
Critical
|
Sep 3, 2024 |
| CVE-2024-7525 |
It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read…
|
9.1
Critical
|
Aug 6, 2024 |
| CVE-2024-7528 |
Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free
|
9.8
Critical
|
Aug 6, 2024 |
| CVE-2024-7522 |
Editor code failed to check an attribute value
|
9.1
Critical
|
Aug 6, 2024 |
| CVE-2024-7521 |
Incomplete WebAssembly exception handing could have led to a use-after-free
|
9.8
Critical
|
Aug 6, 2024 |
| CVE-2024-6611 |
A nested iframe, triggering a cross-site navigation, could send SameSite=Strict or Lax cookies
|
9.8
Critical
|
Jul 9, 2024 |
| CVE-2024-6602 |
A mismatch between allocator and deallocator could have led to memory corruption
|
9.8
Critical
|
Jul 9, 2024 |
| CVE-2024-3863 |
The executable file warning was not presented when downloading .xrm-ms files
|
9.8
Critical
|
Apr 16, 2024 |
| CVE-2023-5176 |
Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2
|
9.8
Critical
|
Sep 27, 2023 |