| CVE-2023-5174 |
If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer…
|
9.8
Critical
|
Sep 27, 2023 |
| CVE-2023-5168 |
A compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds…
|
9.8
Critical
|
Sep 27, 2023 |
| CVE-2023-29542 |
A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious…
|
9.8
Critical
|
Jun 19, 2023 |
| CVE-2023-29531 |
An attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory corruption and a…
|
9.8
Critical
|
Jun 19, 2023 |
| CVE-2021-43529 |
Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing…
|
9.8
Critical
|
Feb 16, 2023 |
| CVE-2022-46882 |
A use-after-free in WebGL extensions could have led to a potentially exploitable crash
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-45406 |
If an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may be deleted while…
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-34470 |
Session history navigations may have led to a use-after-free and potentially exploitable crash
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-31747 |
Mozilla developers Andrew McCreight, Nicolas B
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-31737 |
A malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory corruption and a potentially…
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-31736 |
A malicious website could have learned the size of a cross-origin resource that supported Range requests
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-29917 |
Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety…
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-26486 |
Exploited
Mozilla Firefox Use-After-Free Vulnerability
|
9.6
Critical
|
Dec 22, 2022 |
| CVE-2022-26384 |
If an attacker could control the contents of an iframe sandboxed with allow-popups but not allow-scripts, they were able…
|
9.6
Critical
|
Dec 22, 2022 |
| CVE-2022-22759 |
If a document created a sandboxed iframe without allow-scripts, and subsequently appended an element to the iframe's…
|
9.6
Critical
|
Dec 22, 2022 |
| CVE-2021-4127 |
An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2021-4140 |
It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2021-4129 |
Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler,…
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2019-11708 |
Exploited
Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability
|
10.0
Critical
|
Jul 23, 2019 |