| CVE-2025-1017 |
Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6
|
9.8
Critique
|
4 févr. 2025 |
| CVE-2025-1016 |
Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19,…
|
9.8
Critique
|
4 févr. 2025 |
| CVE-2025-1012 |
A race during concurrent delazification could have led to a use-after-free
|
9.8
Critique
|
4 févr. 2025 |
| CVE-2025-1011 |
A bug in WebAssembly code generation could have lead to a crash
|
9.8
Critique
|
4 févr. 2025 |
| CVE-2025-1010 |
An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash
|
9.8
Critique
|
4 févr. 2025 |
| CVE-2025-1009 |
An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash
|
9.8
Critique
|
4 févr. 2025 |
| CVE-2025-0247 |
Memory safety bugs present in Firefox 133 and Thunderbird 133
|
9.8
Critique
|
7 janv. 2025 |
| CVE-2024-11705 |
`NSC_DeriveKey` inadvertently assumed that the `phKey` parameter is always non-NULL
|
9.1
Critique
|
26 nov. 2024 |
| CVE-2024-11698 |
A flaw in handling fullscreen transitions may have inadvertently caused the application to become stuck in fullscreen…
|
9.8
Critique
|
26 nov. 2024 |
| CVE-2024-11704 |
A double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an error path
|
9.8
Critique
|
26 nov. 2024 |
| CVE-2024-11693 |
The executable file warning was not presented when downloading .library-ms files
|
9.8
Critique
|
26 nov. 2024 |
| CVE-2024-10468 |
Potential race conditions in IndexedDB could have caused memory corruption, leading to a potentially exploitable crash
|
9.8
Critique
|
29 oct. 2024 |
| CVE-2024-10467 |
Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3
|
9.8
Critique
|
29 oct. 2024 |
| CVE-2024-10004 |
Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in…
|
9.1
Critique
|
15 oct. 2024 |
| CVE-2024-9680 |
Exploitée
Mozilla Firefox Use-After-Free Vulnerability
|
9.8
Critique
|
9 oct. 2024 |
| CVE-2024-9402 |
Memory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2
|
9.8
Critique
|
1 oct. 2024 |
| CVE-2024-9401 |
Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2
|
9.8
Critique
|
1 oct. 2024 |
| CVE-2024-9392 |
A compromised content process could have allowed for the arbitrary loading of cross-origin pages
|
9.8
Critique
|
1 oct. 2024 |
| CVE-2024-8389 |
Memory safety bugs present in Firefox 129
|
9.8
Critique
|
3 sept. 2024 |
| CVE-2024-8387 |
Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1
|
9.8
Critique
|
3 sept. 2024 |
| CVE-2024-8384 |
The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the…
|
9.8
Critique
|
3 sept. 2024 |
| CVE-2024-8385 |
A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type…
|
9.8
Critique
|
3 sept. 2024 |
| CVE-2024-8381 |
A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as…
|
9.8
Critique
|
3 sept. 2024 |
| CVE-2024-7530 |
Incorrect garbage collection interaction could have led to a use-after-free
|
9.8
Critique
|
6 août 2024 |
| CVE-2024-7525 |
It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read…
|
9.1
Critique
|
6 août 2024 |