| CVE-2024-9402 |
Memory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2
|
9.8
Critique
|
1 oct. 2024 |
| CVE-2024-9401 |
Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2
|
9.8
Critique
|
1 oct. 2024 |
| CVE-2024-9400 |
A potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an OOM at a…
|
8.8
Élevée
|
1 oct. 2024 |
| CVE-2024-9399 |
A website configured to initiate a specially crafted WebTransport session could crash the Firefox process leading to a…
|
7.5
Élevée
|
1 oct. 2024 |
| CVE-2024-9398 |
By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if…
|
5.3
Moyenne
|
1 oct. 2024 |
| CVE-2024-9397 |
A missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting…
|
6.1
Moyenne
|
1 oct. 2024 |
| CVE-2024-9396 |
It is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain…
|
8.8
Élevée
|
1 oct. 2024 |
| CVE-2024-9394 |
An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the…
|
6.1
Moyenne
|
1 oct. 2024 |
| CVE-2024-9393 |
An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the…
|
7.5
Élevée
|
1 oct. 2024 |
| CVE-2024-9392 |
A compromised content process could have allowed for the arbitrary loading of cross-origin pages
|
9.8
Critique
|
1 oct. 2024 |
| CVE-2024-8900 |
An attacker could write data to the user's clipboard, bypassing the user prompt, during a certain sequence of…
|
7.5
Élevée
|
17 sept. 2024 |
| CVE-2024-7652 |
An error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially…
|
7.5
Élevée
|
6 sept. 2024 |
| CVE-2024-8394 |
When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a…
|
6.5
Moyenne
|
6 sept. 2024 |
| CVE-2024-8387 |
Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1
|
9.8
Critique
|
3 sept. 2024 |
| CVE-2024-8386 |
If a site had been granted the permission to open popup windows, it could cause Select elements to appear on top of…
|
6.1
Moyenne
|
3 sept. 2024 |
| CVE-2024-8384 |
The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the…
|
9.8
Critique
|
3 sept. 2024 |
| CVE-2024-8382 |
Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for…
|
8.8
Élevée
|
3 sept. 2024 |
| CVE-2024-8385 |
A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type…
|
9.8
Critique
|
3 sept. 2024 |
| CVE-2024-8381 |
A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as…
|
9.8
Critique
|
3 sept. 2024 |
| CVE-2024-7529 |
The date picker could partially obscure security prompts
|
8.1
Élevée
|
6 août 2024 |
| CVE-2024-7526 |
ANGLE failed to initialize parameters which lead to reading from uninitialized memory
|
7.5
Élevée
|
6 août 2024 |
| CVE-2024-7525 |
It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read…
|
9.1
Critique
|
6 août 2024 |
| CVE-2024-7528 |
Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free
|
9.8
Critique
|
6 août 2024 |
| CVE-2024-7527 |
Unexpected marking work at the start of sweeping could have led to a use-after-free
|
8.8
Élevée
|
6 août 2024 |
| CVE-2024-7522 |
Editor code failed to check an attribute value
|
9.1
Critique
|
6 août 2024 |