Aller au contenu

Vulnérabilités de Mozilla firefox_esr

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2024-11698 A flaw in handling fullscreen transitions may have inadvertently caused the application to become stuck in fullscreen… 9.8 Critique 26 nov. 2024
CVE-2024-11693 The executable file warning was not presented when downloading .library-ms files 9.8 Critique 26 nov. 2024
CVE-2024-10467 Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3 9.8 Critique 29 oct. 2024
CVE-2024-9680 Exploitée Mozilla Firefox Use-After-Free Vulnerability 9.8 Critique 9 oct. 2024
CVE-2024-9402 Memory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2 9.8 Critique 1 oct. 2024
CVE-2024-9401 Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2 9.8 Critique 1 oct. 2024
CVE-2024-9392 A compromised content process could have allowed for the arbitrary loading of cross-origin pages 9.8 Critique 1 oct. 2024
CVE-2024-8387 Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1 9.8 Critique 3 sept. 2024
CVE-2024-8384 The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the… 9.8 Critique 3 sept. 2024
CVE-2024-8385 A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type… 9.8 Critique 3 sept. 2024
CVE-2024-8381 A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as… 9.8 Critique 3 sept. 2024
CVE-2024-7525 It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read… 9.1 Critique 6 août 2024
CVE-2024-7528 Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free 9.8 Critique 6 août 2024
CVE-2024-7522 Editor code failed to check an attribute value 9.1 Critique 6 août 2024
CVE-2024-7521 Incomplete WebAssembly exception handing could have led to a use-after-free 9.8 Critique 6 août 2024
CVE-2024-6602 A mismatch between allocator and deallocator could have led to memory corruption 9.8 Critique 9 juil. 2024

Autres produits Mozilla