| CVE-2024-5688 |
If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant
|
8.1
High
|
Jun 11, 2024 |
| CVE-2024-5702 |
Memory corruption in the networking stack could have led to a potentially exploitable crash
|
7.5
High
|
Jun 11, 2024 |
| CVE-2024-4770 |
When saving a page to PDF, certain font styles could have led to a potential use-after-free crash
|
8.8
High
|
May 14, 2024 |
| CVE-2024-4769 |
When importing resources using Web Workers, error messages would distinguish the difference between…
|
5.9
Medium
|
May 14, 2024 |
| CVE-2024-4768 |
A bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a user into granting…
|
6.1
Medium
|
May 14, 2024 |
| CVE-2024-4777 |
Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10
|
7.5
High
|
May 14, 2024 |
| CVE-2024-4767 |
If the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not properly deleted when the…
|
4.3
Medium
|
May 14, 2024 |
| CVE-2024-4367 |
A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js…
|
5.6
Medium
|
May 14, 2024 |
| CVE-2024-3302 |
There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed
|
3.7
Low
|
Apr 16, 2024 |
| CVE-2024-3864 |
Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9
|
8.1
High
|
Apr 16, 2024 |
| CVE-2024-3863 |
The executable file warning was not presented when downloading .xrm-ms files
|
9.8
Critical
|
Apr 16, 2024 |
| CVE-2024-3861 |
If an AlignedBuffer were assigned to itself, the subsequent self-move could result in an incorrect reference count and…
|
4.0
Medium
|
Apr 16, 2024 |
| CVE-2024-3859 |
On 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could be triggered by…
|
5.9
Medium
|
Apr 16, 2024 |
| CVE-2024-3857 |
The JIT created incorrect code for arguments in certain cases
|
7.8
High
|
Apr 16, 2024 |
| CVE-2024-3854 |
In some code patterns the JIT incorrectly optimized switch statements and generated code with out-of-bounds-reads
|
8.8
High
|
Apr 16, 2024 |
| CVE-2024-3852 |
GetBoundName could return the wrong version of an object when JIT optimizations were applied
|
7.5
High
|
Apr 16, 2024 |
| CVE-2024-2616 |
To harden ICU against exploitation, the behavior for out-of-memory conditions was changed to crash instead of attempt to…
|
2.7
Low
|
Mar 19, 2024 |
| CVE-2024-2614 |
Memory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8
|
8.8
High
|
Mar 19, 2024 |
| CVE-2024-2612 |
If an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have triggered a crash or…
|
8.1
High
|
Mar 19, 2024 |
| CVE-2024-2611 |
A missing delay on when pointer lock was used could have allowed a malicious page to trick a user into granting…
|
5.5
Medium
|
Mar 19, 2024 |
| CVE-2024-2610 |
Using a markup injection an attacker could have stolen nonce values
|
6.1
Medium
|
Mar 19, 2024 |
| CVE-2024-2609 |
The permission prompt input delay could expire while the window is not in focus
|
6.1
Medium
|
Mar 19, 2024 |
| CVE-2023-5388 |
NSS was susceptible to a timing side-channel attack when performing RSA decryption
|
6.5
Medium
|
Mar 19, 2024 |
| CVE-2024-2608 |
`AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()` could have…
|
8.4
High
|
Mar 19, 2024 |
| CVE-2024-2607 |
Return registers were overwritten which could have allowed an attacker to execute arbitrary code
|
8.1
High
|
Mar 19, 2024 |