Aller au contenu

Vulnérabilités connues pour Mozilla Firefox

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2019-17026 Exploitée Mozilla Firefox And Thunderbird Type Confusion Vulnerability 8.8 Élevée 2 mars 2020
CVE-2013-5594 Mozilla Firefox before 25 allows modification of anonymous content of pluginProblem.xml binding Non notée 18 févr. 2020
CVE-2011-2669 Mozilla Firefox prior to 3.6 has a DoS vulnerability due to an issue in the validation of certificates Non notée 21 janv. 2020
CVE-2011-2668 Mozilla Firefox through 1.5.0.3 has a vulnerability in processing the content-length header Non notée 21 janv. 2020
CVE-2011-2670 Mozilla Firefox before 3.6 is vulnerable to XSS via the rendering of Cascading Style Sheets Non notée 13 janv. 2020
CVE-2019-17001 A Content-Security-Policy that blocks in-line scripts could be bypassed using an object tag to execute JavaScript in the… Non notée 8 janv. 2020
CVE-2019-9812 Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox… Non notée 8 janv. 2020
CVE-2019-17025 Mozilla developers reported memory safety bugs present in Firefox 71 Non notée 8 janv. 2020
CVE-2019-17024 Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3 Non notée 8 janv. 2020
CVE-2019-17023 After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting in an invalid… Non notée 8 janv. 2020
CVE-2019-17022 When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape <… Non notée 8 janv. 2020
CVE-2019-17021 During the initialization of a new content process, a race condition occurs that can allow a content process to disclose… Non notée 8 janv. 2020
CVE-2019-17020 If an XML file is served with a Content Security Policy and the XML file includes an XSL stylesheet, the Content… Non notée 8 janv. 2020
CVE-2019-17019 When Python was installed on Windows, a python file being served with the MIME type of text/plain could be executed by… Non notée 8 janv. 2020
CVE-2019-17018 When in Private Browsing Mode on Windows 10, the Windows keyboard may retain word suggestions to improve the accuracy of… Non notée 8 janv. 2020
CVE-2019-17017 Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash Non notée 8 janv. 2020
CVE-2019-17016 When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a… Non notée 8 janv. 2020
CVE-2019-17015 During the initialization of a new content process, a pointer offset can be manipulated leading to memory corruption and… Non notée 8 janv. 2020
CVE-2019-17014 If an image had not loaded correctly (such as when it is not actually an image), it could be dragged and dropped… Non notée 8 janv. 2020
CVE-2019-17013 Mozilla developers reported memory safety bugs present in Firefox 70 Non notée 8 janv. 2020
CVE-2019-17012 Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2 Non notée 8 janv. 2020
CVE-2019-17011 Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race condition could… Non notée 8 janv. 2020
CVE-2019-17010 Under certain conditions, when checking the Resist Fingerprinting preference during device orientation checks, a race… Non notée 8 janv. 2020
CVE-2019-17009 When running, the updater service wrote status and log files to an unrestricted location; potentially allowing an… Non notée 8 janv. 2020
CVE-2019-17008 When using nested workers, a use-after-free could occur during worker destruction Non notée 8 janv. 2020

Autres produits Mozilla