| CVE-2023-25734 |
After downloading a Windows .url shortcut from the local filesystem, an attacker could supply a remote path that would…
|
8.1
High
|
Jun 2, 2023 |
| CVE-2023-25742 |
When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash
|
Not rated
|
Jun 2, 2023 |
| CVE-2023-25752 |
When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within…
|
Not rated
|
Jun 2, 2023 |
| CVE-2023-25732 |
When encoding data from an inputStream in xpcom the size of the input being encoded was not correctly calculated…
|
8.8
High
|
Jun 2, 2023 |
| CVE-2023-25739 |
Module load requests that failed were not being checked as to whether or not they were cancelled causing a…
|
8.8
High
|
Jun 2, 2023 |
| CVE-2023-25751 |
Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten…
|
Not rated
|
Jun 2, 2023 |
| CVE-2023-25730 |
A background script invoking requestFullscreen and then blocking the main thread could force the browser into fullscreen…
|
5.4
Medium
|
Jun 2, 2023 |
| CVE-2023-25738 |
Members of the DEVMODEW struct set by the printer device driver weren't being validated and could have resulted in…
|
6.5
Medium
|
Jun 2, 2023 |
| CVE-2023-25729 |
Permission prompts for opening external schemes were only shown for ContentPrincipals resulting in extensions being able…
|
8.8
High
|
Jun 2, 2023 |
| CVE-2023-25737 |
An invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to undefined behavior
|
8.8
High
|
Jun 2, 2023 |
| CVE-2023-25728 |
The Content-Security-Policy-Report-Only header could allow an attacker to leak a child iframe's unredacted URI when…
|
6.5
Medium
|
Jun 2, 2023 |
| CVE-2023-25746 |
Memory safety bugs present in Firefox ESR 102.7
|
8.8
High
|
Jun 2, 2023 |
| CVE-2023-25735 |
Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in…
|
8.8
High
|
Jun 2, 2023 |
| CVE-2023-23605 |
Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108 and Firefox ESR 102.6
|
8.8
High
|
Jun 2, 2023 |
| CVE-2023-23603 |
Regular expressions used to filter out forbidden properties and values from style directives in calls to `console.log`…
|
6.5
Medium
|
Jun 2, 2023 |
| CVE-2023-23602 |
A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src…
|
6.5
Medium
|
Jun 2, 2023 |
| CVE-2023-23601 |
Navigations were being allowed when dragging a URL from a cross-origin iframe into the same tab which could lead to…
|
Not rated
|
Jun 2, 2023 |
| CVE-2023-23599 |
When copying a network request from the developer tools panel as a curl command the output was not being properly…
|
Not rated
|
Jun 2, 2023 |
| CVE-2023-23598 |
Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs containing…
|
Not rated
|
Jun 2, 2023 |
| CVE-2023-1945 |
Unexpected data returned from the Safe Browsing API could have led to memory corruption and a potentially exploitable…
|
6.5
Medium
|
Jun 2, 2023 |
| CVE-2023-0767 |
An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12…
|
8.8
High
|
Jun 2, 2023 |
| CVE-2023-0616 |
If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and…
|
6.5
Medium
|
Jun 2, 2023 |
| CVE-2023-0547 |
OCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted email, and revoked…
|
6.5
Medium
|
Jun 2, 2023 |
| CVE-2023-0430 |
Certificate OCSP revocation status was not checked when verifying S/Mime signatures
|
6.5
Medium
|
Jun 2, 2023 |
| CVE-2021-43529 |
Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing…
|
9.8
Critical
|
Feb 16, 2023 |