| CVE-2024-11699 |
Memory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4
|
8.8
Élevée
|
26 nov. 2024 |
| CVE-2024-11698 |
A flaw in handling fullscreen transitions may have inadvertently caused the application to become stuck in fullscreen…
|
9.8
Critique
|
26 nov. 2024 |
| CVE-2024-11696 |
The application failed to account for exceptions thrown by the `loadManifestFromFile` method during add-on signature…
|
5.4
Moyenne
|
26 nov. 2024 |
| CVE-2024-11697 |
When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?"…
|
8.8
Élevée
|
26 nov. 2024 |
| CVE-2024-11693 |
The executable file warning was not presented when downloading .library-ms files
|
9.8
Critique
|
26 nov. 2024 |
| CVE-2024-11692 |
An attacker could cause a select dropdown to be shown over another tab; this could have led to user confusion and…
|
4.3
Moyenne
|
26 nov. 2024 |
| CVE-2024-11691 |
Certain WebGL operations on Apple silicon M series devices could have lead to an out-of-bounds write and memory…
|
8.8
Élevée
|
26 nov. 2024 |
| CVE-2024-10467 |
Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3
|
9.8
Critique
|
29 oct. 2024 |
| CVE-2024-10466 |
By sending a specially crafted push message, a remote server could have hung the parent process, causing the browser…
|
7.5
Élevée
|
29 oct. 2024 |
| CVE-2024-10465 |
A clipboard "paste" button could persist across tabs which allowed a spoofing attack
|
7.5
Élevée
|
29 oct. 2024 |
| CVE-2024-10464 |
Repeated writes to history interface attributes could have been used to cause a Denial of Service condition in the…
|
7.5
Élevée
|
29 oct. 2024 |
| CVE-2024-10463 |
Video frames could have been leaked between origins in some situations
|
7.5
Élevée
|
29 oct. 2024 |
| CVE-2024-10462 |
Truncation of a long URL could have allowed origin spoofing in a permission prompt
|
7.5
Élevée
|
29 oct. 2024 |
| CVE-2024-9680 |
Exploitée
Mozilla Firefox Use-After-Free Vulnerability
|
9.8
Critique
|
9 oct. 2024 |
| CVE-2024-9402 |
Memory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2
|
9.8
Critique
|
1 oct. 2024 |
| CVE-2024-9401 |
Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2
|
9.8
Critique
|
1 oct. 2024 |
| CVE-2024-9400 |
A potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an OOM at a…
|
8.8
Élevée
|
1 oct. 2024 |
| CVE-2024-9396 |
It is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain…
|
8.8
Élevée
|
1 oct. 2024 |
| CVE-2024-9392 |
A compromised content process could have allowed for the arbitrary loading of cross-origin pages
|
9.8
Critique
|
1 oct. 2024 |
| CVE-2024-7652 |
An error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially…
|
7.5
Élevée
|
6 sept. 2024 |
| CVE-2024-8387 |
Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1
|
9.8
Critique
|
3 sept. 2024 |
| CVE-2024-8384 |
The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the…
|
9.8
Critique
|
3 sept. 2024 |
| CVE-2024-8383 |
Firefox normally asks for confirmation before asking the operating system to find an application to handle a scheme that…
|
7.5
Élevée
|
3 sept. 2024 |
| CVE-2024-8382 |
Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for…
|
8.8
Élevée
|
3 sept. 2024 |
| CVE-2024-8385 |
A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type…
|
9.8
Critique
|
3 sept. 2024 |