Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen oder einen nicht spezifizierten Angriff durchzuführen.
Product
Firefox ist ein Open Source Web Browser.
ESR ist die Variante mit verlängertem Support.
Thunderbird ist ein Open Source E-Mail Client.
Vulnerabilities 12
-
Critical 9.8
The `fetch()` API and navigation incorrectly shared the same cache, as the cache key did not include the optional heade…
-
High 8.3
When opening a website using the `firefox://` protocol handler, SameSite cookies were not properly respected. This vuln…
-
High 8.1
Memory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of these bugs showed evidence…
-
High 8.1
Memory safety bugs present in Firefox 122. Some of these bugs showed evidence of memory corruption and we presume that …
-
High 7.5
When storing and re-accessing data on a networking channel, the length of buffers may have been confused, resulting in …
-
High 7.5
Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.*Note:* Thi…
-
Medium 6.5
Through a series of API calls and redirects, an attacker-controlled alert dialog could have been displayed on another w…
-
Medium 6.5
The incorrect object was checked for NULL in the built-in profiler, potentially leading to invalid memory access and un…
-
Medium 6.1
If a website set a large custom cursor, portions of the cursor could have overlapped with the permission dialog, potent…
-
Medium 6.1
A malicious website could have used a combination of exiting fullscreen mode and `requestPointerLock` to cause the user…
-
Medium 6.1
Set-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an attacker could control th…
-
Medium 4.3
A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led…
Revision history
-
#14
Neue Updates von openSUSE aufgenommen
-
#13
Neue Updates von Gentoo aufgenommen
-
#12
Neue Updates von Gentoo aufgenommen
-
#11
Neue Updates von IGEL aufgenommen
-
#10
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
-
#9
Neue Updates von Amazon und Ubuntu aufgenommen
-
#8
Neue Updates von CentOS und Amazon aufgenommen
-
#7
Neue Updates von Ubuntu und Debian aufgenommen
-
#6
Neue Updates von Oracle Linux aufgenommen
-
#5
Neue Updates von Oracle Linux aufgenommen
-
#4
Neue Updates von Red Hat, Oracle Linux, Debian und SUSE aufgenommen
-
#3
Neue Updates von Fedora und Red Hat aufgenommen
-
#2
Neue Updates von Debian, SUSE und Ubuntu aufgenommen
-
#1
Initiale Fassung
References
-
Mozilla Foundation Security Advisory vom 2024-02-20
https://www.mozilla.org/en-US/security/advisories/mfsa2024-05
-
Mozilla Foundation Security Advisory vom 2024-02-20
https://www.mozilla.org/en-US/security/advisories/mfsa2024-06
-
Mozilla Foundation Security Advisory vom 2024-02-20
https://www.mozilla.org/en-US/security/advisories/mfsa2024-07
-
Debian Security Advisory DSA-5627 vom 2024-02-21
https://lists.debian.org/debian-security-announce/2024/msg00034.html
-
SUSE Security Update SUSE-SU-2024:0580-1 vom 2024-02-21
https://lists.suse.com/pipermail/sle-security-updates/2024-February/017979.html
-
Ubuntu Security Notice USN-6649-1 vom 2024-02-22
https://ubuntu.com/security/notices/USN-6649-1
-
Fedora Security Advisory FEDORA-2024-81863A1613 vom 2024-02-22
https://bodhi.fedoraproject.org/updates/FEDORA-2024-81863a1613
-
Fedora Security Advisory FEDORA-2024-5361211B10 vom 2024-02-22
https://bodhi.fedoraproject.org/updates/FEDORA-2024-5361211b10
-
Red Hat Security Advisory RHSA-2024:0952 vom 2024-02-22
https://access.redhat.com/errata/RHSA-2024:0952
-
Red Hat Security Advisory RHSA-2024:0970 vom 2024-02-26
https://access.redhat.com/errata/RHSA-2024:0970
-
Oracle Linux Security Advisory ELSA-2024-0952 vom 2024-02-24
https://linux.oracle.com/errata/ELSA-2024-0952.html
-
Red Hat Security Advisory RHSA-2024:0972 vom 2024-02-26
https://access.redhat.com/errata/RHSA-2024:0972
-
Red Hat Security Advisory RHSA-2024:0955 vom 2024-02-26
https://access.redhat.com/errata/RHSA-2024:0955
-
Debian Security Advisory DSA-5630 vom 2024-02-23
https://lists.debian.org/debian-security-announce/2024/msg00037.html
-
SUSE Security Update SUSE-SU-2024:0608-1 vom 2024-02-23
https://lists.suse.com/pipermail/sle-security-updates/2024-February/018005.html
-
SUSE Security Update SUSE-SU-2024:0607-1 vom 2024-02-23
https://lists.suse.com/pipermail/sle-security-updates/2024-February/018006.html
-
Red Hat Security Advisory RHSA-2024:0957 vom 2024-02-26
https://access.redhat.com/errata/RHSA-2024:0957
-
Red Hat Security Advisory RHSA-2024:0958 vom 2024-02-26
https://access.redhat.com/errata/RHSA-2024:0958
-
Red Hat Security Advisory RHSA-2024:0959 vom 2024-02-26
https://access.redhat.com/errata/RHSA-2024:0959
-
Red Hat Security Advisory RHSA-2024:0960 vom 2024-02-26
https://access.redhat.com/errata/RHSA-2024:0960
-
Red Hat Security Advisory RHSA-2024:0961 vom 2024-02-26
https://access.redhat.com/errata/RHSA-2024:0961
-
Red Hat Security Advisory RHSA-2024:0962 vom 2024-02-26
https://access.redhat.com/errata/RHSA-2024:0962
-
Red Hat Security Advisory RHSA-2024:0963 vom 2024-02-26
https://access.redhat.com/errata/RHSA-2024:0963
-
Red Hat Security Advisory RHSA-2024:0964 vom 2024-02-26
https://access.redhat.com/errata/RHSA-2024:0964
-
Red Hat Security Advisory RHSA-2024:0976 vom 2024-02-26
https://access.redhat.com/errata/RHSA-2024:0976
-
Red Hat Security Advisory RHSA-2024:0971 vom 2024-02-26
https://access.redhat.com/errata/RHSA-2024:0971
-
Red Hat Security Advisory RHSA-2024:0969 vom 2024-02-26
https://access.redhat.com/errata/RHSA-2024:0969
-
Red Hat Security Advisory RHSA-2024:0968 vom 2024-02-26
https://access.redhat.com/errata/RHSA-2024:0968
-
Red Hat Security Advisory RHSA-2024:0984 vom 2024-02-26
https://access.redhat.com/errata/RHSA-2024:0984
-
Red Hat Security Advisory RHSA-2024:0983 vom 2024-02-26
https://access.redhat.com/errata/RHSA-2024:0983
-
Oracle Linux Security Advisory ELSA-2024-0976 vom 2024-02-27
https://linux.oracle.com/errata/ELSA-2024-0976.html
-
Oracle Linux Security Advisory ELSA-2024-0955 vom 2024-02-27
https://linux.oracle.com/errata/ELSA-2024-0955.html
-
Oracle Linux Security Advisory ELSA-2024-0957 vom 2024-02-27
https://linux.oracle.com/errata/ELSA-2024-0957.html
-
Oracle Linux Security Advisory ELSA-2024-0963 vom 2024-02-27
https://linux.oracle.com/errata/ELSA-2024-0963.html
-
Oracle Linux Security Advisory ELSA-2024-0964 vom 2024-02-27
https://linux.oracle.com/errata/ELSA-2024-0964.html
-
Ubuntu Security Notice USN-6669-1 vom 2024-03-04
https://ubuntu.com/security/notices/USN-6669-1
-
Debian Security Advisory DLA-3748 vom 2024-03-04
https://lists.debian.org/debian-lts-announce/2024/03/msg00001.html
-
Debian Security Advisory DLA-3747 vom 2024-03-04
https://lists.debian.org/debian-lts-announce/2024/03/msg00000.html
-
CentOS Security Advisory CESA-2024:0957 vom 2024-02-29
https://lists.centos.org/pipermail/centos-announce/2024-February/099231.html
-
CentOS Security Advisory CESA-2024:0976 vom 2024-02-29
https://lists.centos.org/pipermail/centos-announce/2024-February/099230.html
-
Amazon Linux Security Advisory ALAS-2024-2477 vom 2024-03-05
https://alas.aws.amazon.com/AL2/ALAS-2024-2477.html
-
Amazon Linux Security Advisory ALASFIREFOX-2024-022 vom 2024-03-06
https://alas.aws.amazon.com/AL2/ALASFIREFOX-2024-022.html
-
Ubuntu Security Notice USN-6649-2 vom 2024-03-06
https://ubuntu.com/security/notices/USN-6649-2
-
Rocky Linux Security Advisory RLSA-2024:0955 vom 2024-03-12
https://errata.build.resf.org/RLSA-2024:0955
-
IGEL Security Notice ISN-2024-08 vom 2024-03-26
https://kb.igel.com/securitysafety/en/isn-2024-08-firefox-esr-vulnerabilities-119870266.html
-
SUSE Security Update SUSE-SU-2024:1002-1 vom 2024-03-27
https://lists.suse.com/pipermail/sle-security-updates/2024-March/018221.html
-
Gentoo Linux Security Advisory GLSA-202405-15 vom 2024-05-05
https://security.gentoo.org/glsa/202405-15
-
Gentoo Linux Security Advisory GLSA-202405-32 vom 2024-05-12
https://security.gentoo.org/glsa/202405-32
-
openSUSE Security Update OPENSUSE-SU-2024:14572-1 vom 2024-12-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HI2RC7AJAHY74Q6MK7GNGWU6TITB22V/