| CVE-2024-9399 |
A website configured to initiate a specially crafted WebTransport session could crash the Firefox process leading to a…
|
7.5
Élevée
|
1 oct. 2024 |
| CVE-2024-9398 |
By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if…
|
5.3
Moyenne
|
1 oct. 2024 |
| CVE-2024-9397 |
A missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting…
|
6.1
Moyenne
|
1 oct. 2024 |
| CVE-2024-9396 |
It is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain…
|
8.8
Élevée
|
1 oct. 2024 |
| CVE-2024-9394 |
An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the…
|
6.1
Moyenne
|
1 oct. 2024 |
| CVE-2024-9393 |
An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the…
|
7.5
Élevée
|
1 oct. 2024 |
| CVE-2024-9392 |
A compromised content process could have allowed for the arbitrary loading of cross-origin pages
|
9.8
Critique
|
1 oct. 2024 |
| CVE-2024-8900 |
An attacker could write data to the user's clipboard, bypassing the user prompt, during a certain sequence of…
|
7.5
Élevée
|
17 sept. 2024 |
| CVE-2024-7652 |
An error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially…
|
7.5
Élevée
|
6 sept. 2024 |
| CVE-2024-8389 |
Memory safety bugs present in Firefox 129
|
9.8
Critique
|
3 sept. 2024 |
| CVE-2024-8388 |
Multiple prompts and panels from both Firefox and the Android OS could be used to obscure the notification announcing…
|
4.3
Moyenne
|
3 sept. 2024 |
| CVE-2024-8387 |
Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1
|
9.8
Critique
|
3 sept. 2024 |
| CVE-2024-8386 |
If a site had been granted the permission to open popup windows, it could cause Select elements to appear on top of…
|
6.1
Moyenne
|
3 sept. 2024 |
| CVE-2024-8384 |
The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the…
|
9.8
Critique
|
3 sept. 2024 |
| CVE-2024-8383 |
Firefox normally asks for confirmation before asking the operating system to find an application to handle a scheme that…
|
7.5
Élevée
|
3 sept. 2024 |
| CVE-2024-8382 |
Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for…
|
8.8
Élevée
|
3 sept. 2024 |
| CVE-2024-8385 |
A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type…
|
9.8
Critique
|
3 sept. 2024 |
| CVE-2024-8381 |
A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as…
|
9.8
Critique
|
3 sept. 2024 |
| CVE-2024-7530 |
Incorrect garbage collection interaction could have led to a use-after-free
|
9.8
Critique
|
6 août 2024 |
| CVE-2024-7523 |
A select option could partially obscure security prompts
|
6.3
Moyenne
|
6 août 2024 |
| CVE-2024-7531 |
Calling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can result in plaintext on…
|
6.3
Moyenne
|
6 août 2024 |
| CVE-2024-7529 |
The date picker could partially obscure security prompts
|
8.1
Élevée
|
6 août 2024 |
| CVE-2024-7526 |
ANGLE failed to initialize parameters which lead to reading from uninitialized memory
|
7.5
Élevée
|
6 août 2024 |
| CVE-2024-7525 |
It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read…
|
9.1
Critique
|
6 août 2024 |
| CVE-2024-7528 |
Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free
|
9.8
Critique
|
6 août 2024 |