firefox

15 results · Clear filters · Feed

• High 8.8
  CVE-2023-5217 Exploited Public exploit EPSS 49%

  Electron affected by libvpx's heap buffer overflow in vp8 encoding

  Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  Google Chrome libvpx chromium Browsers Debian Ubuntu Alpine npm
  Sep 28, 2023

  KEV Oct 2, 2023
• High 8.8
  CVE-2023-4863 Exploited Public exploit EPSS 100%

  libwebp: OOB write in BuildHuffmanTable

  Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

  Google Chrome libwebp chromium Browsers Debian Ubuntu Alpine npm PyPI Go crates.io NuGet
  Sep 12, 2023

  KEV Sep 13, 2023
• High 8.8
  CVE-2022-28281 Public exploit

  If a compromised content process sent an unexpected number of WebAuthN Extensions in a Register command to the parent p…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• High 8.8
  CVE-2022-1802 Public exploit EPSS 28%

  If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could hav…

  Mozilla Firefox Thunderbird Firefox ESR Android Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• High 8.8
  CVE-2022-26485 Exploited Public exploit EPSS 14%

  Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of a…

  Mozilla Firefox Thunderbird Firefox ESR Android Browsers Debian Ubuntu Alpine
  Dec 22, 2022

  KEV Mar 7, 2022
• High 7.5
  CVE-2022-24713 Public exploit EPSS 14%

  Regular expression denial of service in Rust's regex crate

  regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of service attacks caused by untrusted regexes, or untrusted input matched by trusted regexes. Those (tunable) mitigations…

  rust-lang regex thunderbird firefox Debian Ubuntu Alpine crates.io
  Mar 8, 2022
• High 7.5
  CVE-2022-25314 Public exploit

  In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Alpine
  Feb 18, 2022
• High 7.5
  CVE-2022-23990 Public exploit

  Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.

  thunderbird firefox expat matanza Debian Ubuntu Alpine
  Jan 26, 2022
• High 8.1
  CVE-2021-46143 Public exploit

  In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.

  firefox insighttoolkit4 qtwebengine-opensource-src expat Debian Ubuntu Alpine
  Jan 6, 2022
• High 8.8
  CVE-2021-45960 Public exploit

  In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can l…

  firefox insighttoolkit4 expat swish-e Debian Ubuntu Alpine
  Jan 1, 2022
• High 8.8
  CVE-2019-17026 Exploited Public exploit EPSS 46%

  Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Mar 2, 2020

  KEV Nov 3, 2021
• High 8.8
  CVE-2019-11707 Exploited Public exploit EPSS 38%

  A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allo…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 23, 2019

  KEV May 23, 2022
• High 8.8
  CVE-2018-5158 Public exploit EPSS 10%

  Malicious PDF can inject JavaScript into PDF Viewer

  The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious JavaScript to be injected through a crafted PDF file. This JavaScript can then be run with the permissions of the PDF viewer by its worker. This vulnerability af…

  Mozilla Firefox Firefox ESR firefox Browsers Debian Ubuntu npm
  Jun 11, 2018
• High 7.5
  CVE-2016-9079 Exploited Public exploit EPSS 87%

  A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been di…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu
  Jun 11, 2018

  KEV Jun 22, 2023
• High 8.8
  CVE-2015-4495 Exploited Public exploit EPSS 69%

  The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remot…

  firefox pdf.js Debian Ubuntu
  Aug 8, 2015

  KEV May 25, 2022