| CVE-2023-34416 |
Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12
|
Non notée
|
19 juin 2023 |
| CVE-2023-34414 |
The error page for sites with invalid TLS certificates was missing the activation-delay Firefox uses to protect…
|
Non notée
|
19 juin 2023 |
| CVE-2023-29545 |
Similar to CVE-2023-28163, this time when choosing 'Save Link As', suggested filenames containing environment variable…
|
6.5
Moyenne
|
19 juin 2023 |
| CVE-2023-29542 |
A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious…
|
9.8
Critique
|
19 juin 2023 |
| CVE-2023-29532 |
A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service…
|
5.5
Moyenne
|
19 juin 2023 |
| CVE-2023-29531 |
An attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory corruption and a…
|
9.8
Critique
|
19 juin 2023 |
| CVE-2023-32214 |
Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service
|
Non notée
|
19 juin 2023 |
| CVE-2023-32215 |
Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian Hengst, Andrew…
|
Non notée
|
2 juin 2023 |
| CVE-2023-32213 |
When reading a file, an uninitialized value could have been used as read limit
|
Non notée
|
2 juin 2023 |
| CVE-2023-32206 |
An out-of-bound read could have led to a crash in the RLBox Expat driver
|
Non notée
|
2 juin 2023 |
| CVE-2023-32212 |
An attacker could have positioned a `datalist` element to obscure the address bar
|
Non notée
|
2 juin 2023 |
| CVE-2023-32205 |
In multiple cases browser prompts could have been obscured by popups controlled by content
|
Non notée
|
2 juin 2023 |
| CVE-2023-32211 |
A type checking bug would have led to invalid code being compiled
|
Non notée
|
2 juin 2023 |
| CVE-2023-32207 |
A missing delay in popup notifications could have made it possible for an attacker to trick a user into granting…
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-29536 |
An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory,…
|
Non notée
|
2 juin 2023 |
| CVE-2023-29535 |
Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced
|
Non notée
|
2 juin 2023 |
| CVE-2023-29541 |
Firefox did not properly handle downloads of files ending in .desktop, which can be interpreted to run…
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-29550 |
Memory safety bugs present in Firefox 111 and Firefox ESR 102.9
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-29533 |
A website could have obscured the fullscreen notification by using a combination of window.open, fullscreen requests,…
|
Non notée
|
2 juin 2023 |
| CVE-2023-29539 |
When handling the filename directive in the Content-Disposition header, the filename would be truncated if the…
|
Non notée
|
2 juin 2023 |
| CVE-2023-29548 |
A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result
|
6.5
Moyenne
|
2 juin 2023 |
| CVE-2023-28176 |
Memory safety bugs present in Firefox 110 and Firefox ESR 102.8
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-28164 |
Dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and…
|
6.5
Moyenne
|
2 juin 2023 |
| CVE-2023-28163 |
When downloading files through the Save As dialog on Windows with suggested filenames containing environment variable…
|
6.5
Moyenne
|
2 juin 2023 |
| CVE-2023-28162 |
While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type
|
8.8
Élevée
|
2 juin 2023 |