| CVE-2024-7528 |
Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free
|
9.8
Critique
|
6 août 2024 |
| CVE-2024-7522 |
Editor code failed to check an attribute value
|
9.1
Critique
|
6 août 2024 |
| CVE-2024-7521 |
Incomplete WebAssembly exception handing could have led to a use-after-free
|
9.8
Critique
|
6 août 2024 |
| CVE-2024-6611 |
A nested iframe, triggering a cross-site navigation, could send SameSite=Strict or Lax cookies
|
9.8
Critique
|
9 juil. 2024 |
| CVE-2024-6602 |
A mismatch between allocator and deallocator could have led to memory corruption
|
9.8
Critique
|
9 juil. 2024 |
| CVE-2024-5701 |
Memory safety bugs present in Firefox 126
|
9.8
Critique
|
11 juin 2024 |
| CVE-2024-5699 |
In violation of spec, cookie prefixes such as `__Secure` were being ignored if they were not correctly capitalized -…
|
9.8
Critique
|
11 juin 2024 |
| CVE-2024-5695 |
If an out-of-memory condition occurs at a specific point using allocations in the probabilistic heap checker, an…
|
9.8
Critique
|
11 juin 2024 |
| CVE-2024-4778 |
Memory safety bugs present in Firefox 125
|
9.8
Critique
|
14 mai 2024 |
| CVE-2024-4764 |
Multiple WebRTC threads could have claimed a newly connected audio input leading to use-after-free
|
9.8
Critique
|
14 mai 2024 |
| CVE-2024-3863 |
The executable file warning was not presented when downloading .xrm-ms files
|
9.8
Critique
|
16 avr. 2024 |
| CVE-2024-29943 |
An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds…
|
9.8
Critique
|
22 mars 2024 |
| CVE-2024-2615 |
Memory safety bugs present in Firefox 123
|
9.8
Critique
|
19 mars 2024 |
| CVE-2024-1554 |
The `fetch()` API and navigation incorrectly shared the same cache, as the cache key did not include the optional…
|
9.8
Critique
|
20 févr. 2024 |
| CVE-2023-5175 |
During process shutdown, it was possible that an `ImageBitmap` was created that would later be used after being freed…
|
9.8
Critique
|
27 sept. 2023 |
| CVE-2023-5172 |
A hashtable in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential…
|
9.8
Critique
|
27 sept. 2023 |
| CVE-2023-5176 |
Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2
|
9.8
Critique
|
27 sept. 2023 |
| CVE-2023-5174 |
If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer…
|
9.8
Critique
|
27 sept. 2023 |
| CVE-2023-5168 |
A compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds…
|
9.8
Critique
|
27 sept. 2023 |
| CVE-2019-25136 |
A compromised child process could have injected XBL Bindings into privileged CSS rules, resulting in arbitrary code…
|
10.0
Critique
|
19 juin 2023 |
| CVE-2023-34417 |
Memory safety bugs present in Firefox 113
|
9.8
Critique
|
19 juin 2023 |
| CVE-2023-25736 |
An invalid downcast from `nsHTMLDocument` to `nsIContent` could have lead to undefined behavior
|
9.8
Critique
|
19 juin 2023 |
| CVE-2023-29542 |
A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious…
|
9.8
Critique
|
19 juin 2023 |
| CVE-2023-29531 |
An attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory corruption and a…
|
9.8
Critique
|
19 juin 2023 |
| CVE-2022-46882 |
A use-after-free in WebGL extensions could have led to a potentially exploitable crash
|
9.8
Critique
|
22 déc. 2022 |