firefox

12 results · Clear filters · Feed

• Critical 9.8
  CVE-2024-9680 Exploited · Ransomware Public exploit EPSS 23%

  An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timel…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Oct 9, 2024

  KEV Oct 15, 2024
• High 8.8
  CVE-2023-5217 Exploited Public exploit EPSS 49%

  Electron affected by libvpx's heap buffer overflow in vp8 encoding

  Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  Google Chrome libvpx chromium Browsers Debian Ubuntu Alpine npm
  Sep 28, 2023

  KEV Oct 2, 2023
• High 8.8
  CVE-2023-4863 Exploited Public exploit EPSS 100%

  libwebp: OOB write in BuildHuffmanTable

  Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

  Google Chrome libwebp chromium Browsers Debian Ubuntu Alpine npm PyPI Go crates.io NuGet
  Sep 12, 2023

  KEV Sep 13, 2023
• High 8.8
  CVE-2022-26485 Exploited Public exploit EPSS 14%

  Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of a…

  Mozilla Firefox Thunderbird Firefox ESR Android Browsers Debian Ubuntu Alpine
  Dec 22, 2022

  KEV Mar 7, 2022
• Critical 9.6
  CVE-2022-26486 Exploited

  An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We hav…

  Mozilla Firefox Thunderbird Firefox ESR Android Browsers Debian Ubuntu Alpine
  Dec 22, 2022

  KEV Mar 7, 2022
• High 8.1
  CVE-2020-6819 Exploited

  Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are a…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Apr 24, 2020

  KEV Nov 3, 2021
• High 8.1
  CVE-2020-6820 Exploited

  Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Apr 24, 2020

  KEV Nov 3, 2021
• High 8.8
  CVE-2019-17026 Exploited Public exploit EPSS 46%

  Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Mar 2, 2020

  KEV Nov 3, 2021
• High 8.8
  CVE-2019-11707 Exploited Public exploit EPSS 38%

  A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allo…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 23, 2019

  KEV May 23, 2022
• Critical 10.0
  CVE-2019-11708 Exploited Public exploit EPSS 56%

  Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can resul…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 23, 2019

  KEV May 23, 2022
• High 7.5
  CVE-2016-9079 Exploited Public exploit EPSS 87%

  A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been di…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu
  Jun 11, 2018

  KEV Jun 22, 2023
• High 8.8
  CVE-2015-4495 Exploited Public exploit EPSS 69%

  The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remot…

  firefox pdf.js Debian Ubuntu
  Aug 8, 2015

  KEV May 25, 2022