| CVE-2023-32211 |
A type checking bug would have led to invalid code being compiled
|
Non notée
|
2 juin 2023 |
| CVE-2023-32207 |
A missing delay in popup notifications could have made it possible for an attacker to trick a user into granting…
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-29547 |
When a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain could have been created,…
|
6.5
Moyenne
|
2 juin 2023 |
| CVE-2023-29537 |
Multiple race conditions in the font initialization could have led to memory corruption and execution of…
|
Non notée
|
2 juin 2023 |
| CVE-2023-29544 |
If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could have caused…
|
6.5
Moyenne
|
2 juin 2023 |
| CVE-2023-29536 |
An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory,…
|
Non notée
|
2 juin 2023 |
| CVE-2023-29543 |
An attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global…
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-29535 |
Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced
|
Non notée
|
2 juin 2023 |
| CVE-2023-29551 |
Memory safety bugs present in Firefox 111
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-29541 |
Firefox did not properly handle downloads of files ending in .desktop, which can be interpreted to run…
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-29550 |
Memory safety bugs present in Firefox 111 and Firefox ESR 102.9
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-29533 |
A website could have obscured the fullscreen notification by using a combination of window.open, fullscreen requests,…
|
Non notée
|
2 juin 2023 |
| CVE-2023-29540 |
Using a redirect embedded into sourceMappingUrls could allow for navigation to external protocol links in sandboxed…
|
Non notée
|
2 juin 2023 |
| CVE-2023-29549 |
Under certain circumstances, a call to the <code>bind</code> function may have resulted in the incorrect realm
|
6.5
Moyenne
|
2 juin 2023 |
| CVE-2023-29539 |
When handling the filename directive in the Content-Disposition header, the filename would be truncated if the…
|
Non notée
|
2 juin 2023 |
| CVE-2023-29548 |
A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result
|
6.5
Moyenne
|
2 juin 2023 |
| CVE-2023-29538 |
Under specific circumstances a WebExtension may have received a jar:file:/// URI instead of a moz-extension:/// URI…
|
Non notée
|
2 juin 2023 |
| CVE-2023-28177 |
Memory safety bugs present in Firefox 110
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-28176 |
Memory safety bugs present in Firefox 110 and Firefox ESR 102.8
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-28164 |
Dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and…
|
6.5
Moyenne
|
2 juin 2023 |
| CVE-2023-28163 |
When downloading files through the Save As dialog on Windows with suggested filenames containing environment variable…
|
6.5
Moyenne
|
2 juin 2023 |
| CVE-2023-28162 |
While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-28161 |
If temporary "one-time" permissions, such as the ability to use the Camera, were granted to a document loaded using a…
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-28160 |
When following a redirect to a publicly accessible web extension file, the URL may have been translated to the actual…
|
6.5
Moyenne
|
2 juin 2023 |
| CVE-2023-28159 |
The fullscreen notification could have been hidden on Firefox for Android by using download popups, resulting in…
|
4.3
Moyenne
|
2 juin 2023 |