| CVE-2023-5168 |
A compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds…
|
9.8
Critical
|
Sep 27, 2023 |
| CVE-2023-4585 |
Memory safety bugs present in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1
|
8.8
High
|
Sep 11, 2023 |
| CVE-2023-4584 |
Memory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird…
|
Not rated
|
Sep 11, 2023 |
| CVE-2023-4583 |
When checking if the Browsing Context had been discarded in `HttpBaseChannel`, if the load group was not available…
|
7.5
High
|
Sep 11, 2023 |
| CVE-2023-4582 |
Due to large allocation checks in Angle for glsl shaders being too lenient a buffer overflow could have occurred when…
|
8.8
High
|
Sep 11, 2023 |
| CVE-2023-4581 |
Excel `.xll` add-in files did not have a blocklist entry in Firefox's executable blocklist which allowed them to be…
|
Not rated
|
Sep 11, 2023 |
| CVE-2023-4580 |
Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of…
|
Not rated
|
Sep 11, 2023 |
| CVE-2023-4578 |
When calling `JS::CheckRegExpSyntax` a Syntax Error could have been set which would end in calling…
|
Not rated
|
Sep 11, 2023 |
| CVE-2023-4577 |
When `UpdateRegExpStatics` attempted to access `initialStringHeap` it could already have been garbage collected prior to…
|
Not rated
|
Sep 11, 2023 |
| CVE-2023-4576 |
On Windows, an integer overflow could occur in `RecordedSourceSurfaceCreation` which resulted in a heap buffer…
|
Not rated
|
Sep 11, 2023 |
| CVE-2023-4575 |
When creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been…
|
Not rated
|
Sep 11, 2023 |
| CVE-2023-4574 |
When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been…
|
Not rated
|
Sep 11, 2023 |
| CVE-2023-4573 |
When receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a…
|
Not rated
|
Sep 11, 2023 |
| CVE-2023-4057 |
Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0
|
Not rated
|
Aug 1, 2023 |
| CVE-2023-4054 |
When opening appref-ms files, Firefox did not warn the user that these files may contain malicious code
|
Not rated
|
Aug 1, 2023 |
| CVE-2023-4053 |
A website could have obscured the full screen notification by using a URL with a scheme handled by an external…
|
Not rated
|
Aug 1, 2023 |
| CVE-2023-4052 |
The Firefox updater created a directory writable by non-privileged users
|
Not rated
|
Aug 1, 2023 |
| CVE-2023-4051 |
A website could have obscured the full screen notification by using the file open dialog
|
Not rated
|
Aug 1, 2023 |
| CVE-2023-3417 |
Thunderbird allowed the Text Direction Override Unicode Character in filenames
|
Not rated
|
Jul 24, 2023 |
| CVE-2023-3600 |
During the worker lifecycle, a use-after-free condition could have occurred, which could have led to a potentially…
|
Not rated
|
Jul 12, 2023 |
| CVE-2023-37211 |
Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12
|
Not rated
|
Jul 5, 2023 |
| CVE-2023-37208 |
When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code
|
Not rated
|
Jul 5, 2023 |
| CVE-2023-37207 |
A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program,…
|
Not rated
|
Jul 5, 2023 |
| CVE-2023-37202 |
Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in…
|
Not rated
|
Jul 5, 2023 |
| CVE-2023-37201 |
An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS
|
Not rated
|
Jul 5, 2023 |