| CVE-2023-23601 |
Navigations were being allowed when dragging a URL from a cross-origin iframe into the same tab which could lead to…
|
Non notée
|
2 juin 2023 |
| CVE-2023-23600 |
Per origin notification permissions were being stored in a way that didn't take into account what browsing context the…
|
Non notée
|
2 juin 2023 |
| CVE-2023-23599 |
When copying a network request from the developer tools panel as a curl command the output was not being properly…
|
Non notée
|
2 juin 2023 |
| CVE-2023-23606 |
Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-23598 |
Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs containing…
|
Non notée
|
2 juin 2023 |
| CVE-2023-23597 |
A compromised web child process could disable web security opening restrictions, leading to a new child process being…
|
Non notée
|
2 juin 2023 |
| CVE-2023-0767 |
An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12…
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2020-12413 |
The Raccoon attack is a timing attack on DHE ciphersuites inherit in the TLS specification
|
5.9
Moyenne
|
16 févr. 2023 |
| CVE-2022-46883 |
Mozilla developers Gabriele Svelto, Yulia Startsev, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety…
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-46882 |
A use-after-free in WebGL extensions could have led to a potentially exploitable crash
|
9.8
Critique
|
22 déc. 2022 |
| CVE-2022-46881 |
An optimization in WebGL was incorrect in some cases, and could have led to memory corruption and a potentially…
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-46880 |
A missing check related to tex units could have led to a use-after-free and potentially exploitable crash.*Note*: This…
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-46879 |
Mozilla developers and community members Lukas Bernhard, Gabriele Svelto, Randell Jesup, and the Mozilla Fuzzing Team…
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-46873 |
Because Firefox did not implement the unsafe-hashes CSP directive, an attacker who was able to inject markup into a page…
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-46872 |
An attacker who compromised a content process could have partially escaped the sandbox to read arbitrary files via…
|
8.6
Élevée
|
22 déc. 2022 |
| CVE-2022-46878 |
Mozilla developers Randell Jesup, Valentin Gosu, Olli Pettay, and the Mozilla Fuzzing Team reported memory safety bugs…
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-46871 |
An out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-46877 |
By confusing the browser, the fullscreen notification could have been delayed or suppressed, resulting in potential user…
|
4.3
Moyenne
|
22 déc. 2022 |
| CVE-2022-46875 |
The executable file warning was not presented when downloading .atloc and .ftploc files, which can run commands on a…
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-46885 |
Mozilla developers Timothy Nikkel, Ashley Hale, and the Mozilla Fuzzing Team reported memory safety bugs present in…
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-46874 |
A file with a long filename could have had its filename truncated to remove the valid extension, leaving a malicious…
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-45412 |
When resolving a symlink such as file:///proc/self/fd/1, an error message may be produced where the symlink was resolved…
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-45411 |
Cross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing an XSS attack to…
|
6.1
Moyenne
|
22 déc. 2022 |
| CVE-2022-45421 |
Mozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in Thunderbird 102.4
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-45410 |
When a ServiceWorker intercepted a request with FetchEvent, the origin of the request was lost after the ServiceWorker…
|
6.5
Moyenne
|
22 déc. 2022 |