| CVE-2024-11696 |
The application failed to account for exceptions thrown by the `loadManifestFromFile` method during add-on signature…
|
5.4
Medium
|
Nov 26, 2024 |
| CVE-2024-11704 |
A double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an error path
|
9.8
Critical
|
Nov 26, 2024 |
| CVE-2024-11697 |
When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?"…
|
8.8
High
|
Nov 26, 2024 |
| CVE-2024-11695 |
A crafted URL containing Arabic script and whitespace characters could have hidden the true origin of the page,…
|
5.4
Medium
|
Nov 26, 2024 |
| CVE-2024-11702 |
Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored…
|
7.5
High
|
Nov 26, 2024 |
| CVE-2024-11694 |
Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src` bypass and DOM-based XSS…
|
6.1
Medium
|
Nov 26, 2024 |
| CVE-2024-11693 |
The executable file warning was not presented when downloading .library-ms files
|
9.8
Critical
|
Nov 26, 2024 |
| CVE-2024-11701 |
The incorrect domain may have been displayed in the address bar during an interrupted navigation attempt
|
4.3
Medium
|
Nov 26, 2024 |
| CVE-2024-11700 |
Malicious websites may have been able to perform user intent confirmation through tapjacking
|
8.1
High
|
Nov 26, 2024 |
| CVE-2024-11692 |
An attacker could cause a select dropdown to be shown over another tab; this could have led to user confusion and…
|
4.3
Medium
|
Nov 26, 2024 |
| CVE-2024-11691 |
Certain WebGL operations on Apple silicon M series devices could have lead to an out-of-bounds write and memory…
|
8.8
High
|
Nov 26, 2024 |
| CVE-2024-11159 |
Using remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext
|
5.3
Medium
|
Nov 13, 2024 |
| CVE-2024-10468 |
Potential race conditions in IndexedDB could have caused memory corruption, leading to a potentially exploitable crash
|
9.8
Critical
|
Oct 29, 2024 |
| CVE-2024-10467 |
Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3
|
9.8
Critical
|
Oct 29, 2024 |
| CVE-2024-10466 |
By sending a specially crafted push message, a remote server could have hung the parent process, causing the browser…
|
7.5
High
|
Oct 29, 2024 |
| CVE-2024-10465 |
A clipboard "paste" button could persist across tabs which allowed a spoofing attack
|
7.5
High
|
Oct 29, 2024 |
| CVE-2024-10464 |
Repeated writes to history interface attributes could have been used to cause a Denial of Service condition in the…
|
7.5
High
|
Oct 29, 2024 |
| CVE-2024-10463 |
Video frames could have been leaked between origins in some situations
|
7.5
High
|
Oct 29, 2024 |
| CVE-2024-10462 |
Truncation of a long URL could have allowed origin spoofing in a permission prompt
|
7.5
High
|
Oct 29, 2024 |
| CVE-2024-10461 |
In multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header was not respected and…
|
6.1
Medium
|
Oct 29, 2024 |
| CVE-2024-10460 |
The origin of an external protocol handler prompt could have been obscured using a data: URL within an `iframe`
|
5.4
Medium
|
Oct 29, 2024 |
| CVE-2024-10459 |
An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable…
|
6.5
Medium
|
Oct 29, 2024 |
| CVE-2024-10458 |
A permission leak could have occurred from a trusted site to an untrusted site via `embed` or `object` elements
|
6.5
Medium
|
Oct 29, 2024 |
| CVE-2024-9680 |
Exploited
Mozilla Firefox Use-After-Free Vulnerability
|
9.8
Critical
|
Oct 9, 2024 |
| CVE-2024-9403 |
Memory safety bugs present in Firefox 130
|
7.3
High
|
Oct 1, 2024 |