| CVE-2023-5726 |
A website could have obscured the full screen notification by using the file open dialog
|
Non notée
|
24 oct. 2023 |
| CVE-2023-5725 |
A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to…
|
Non notée
|
24 oct. 2023 |
| CVE-2023-5724 |
Drivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash
|
7.5
Élevée
|
24 oct. 2023 |
| CVE-2023-5721 |
It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due…
|
Non notée
|
24 oct. 2023 |
| CVE-2023-5176 |
Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2
|
9.8
Critique
|
27 sept. 2023 |
| CVE-2023-5174 |
If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer…
|
9.8
Critique
|
27 sept. 2023 |
| CVE-2023-5171 |
During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker…
|
Non notée
|
27 sept. 2023 |
| CVE-2023-5169 |
A compromised content process could have provided malicious data in a `PathRecording` resulting in an out-of-bounds…
|
Non notée
|
27 sept. 2023 |
| CVE-2023-5168 |
A compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds…
|
9.8
Critique
|
27 sept. 2023 |
| CVE-2023-4585 |
Memory safety bugs present in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1
|
8.8
Élevée
|
11 sept. 2023 |
| CVE-2023-4584 |
Memory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird…
|
Non notée
|
11 sept. 2023 |
| CVE-2023-4583 |
When checking if the Browsing Context had been discarded in `HttpBaseChannel`, if the load group was not available…
|
7.5
Élevée
|
11 sept. 2023 |
| CVE-2023-4582 |
Due to large allocation checks in Angle for glsl shaders being too lenient a buffer overflow could have occurred when…
|
8.8
Élevée
|
11 sept. 2023 |
| CVE-2023-4581 |
Excel `.xll` add-in files did not have a blocklist entry in Firefox's executable blocklist which allowed them to be…
|
Non notée
|
11 sept. 2023 |
| CVE-2023-4580 |
Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of…
|
Non notée
|
11 sept. 2023 |
| CVE-2023-4578 |
When calling `JS::CheckRegExpSyntax` a Syntax Error could have been set which would end in calling…
|
Non notée
|
11 sept. 2023 |
| CVE-2023-4577 |
When `UpdateRegExpStatics` attempted to access `initialStringHeap` it could already have been garbage collected prior to…
|
Non notée
|
11 sept. 2023 |
| CVE-2023-4576 |
On Windows, an integer overflow could occur in `RecordedSourceSurfaceCreation` which resulted in a heap buffer…
|
Non notée
|
11 sept. 2023 |
| CVE-2023-4575 |
When creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been…
|
Non notée
|
11 sept. 2023 |
| CVE-2023-4574 |
When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been…
|
Non notée
|
11 sept. 2023 |
| CVE-2023-4573 |
When receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a…
|
Non notée
|
11 sept. 2023 |
| CVE-2023-4057 |
Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0
|
Non notée
|
1 août 2023 |
| CVE-2023-4056 |
Memory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115.0, and Thunderbird…
|
Non notée
|
1 août 2023 |
| CVE-2023-4055 |
When the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar sent to the host was no…
|
Non notée
|
1 août 2023 |
| CVE-2023-4054 |
When opening appref-ms files, Firefox did not warn the user that these files may contain malicious code
|
Non notée
|
1 août 2023 |