firefox

170 results · Clear filters · Feed

• High 8.1
  CVE-2021-46143 Public exploit

  In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.

  firefox insighttoolkit4 qtwebengine-opensource-src expat Debian Ubuntu Azure Linux Alpine
  Jan 6, 2022
• High 8.8
  CVE-2021-45960 Public exploit

  In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can l…

  firefox insighttoolkit4 expat swish-e Debian Ubuntu Azure Linux Alpine
  Jan 1, 2022
• High 8.1
  CVE-2020-15254

  Undefined Behavior in bounded Crossbeam channel

  Crossbeam is a set of tools for concurrent programming. In crossbeam-channel before version 0.4.4, the bounded channel incorrectly assumes that `Vec::from_iter` has allocated capacity that same as the number of iterator elements. `Vec::from_iter` does not act…

  crossbeam-rs crossbeam mozjs38 mozjs52 Ubuntu Alpine crates.io
  Oct 16, 2020
• High 8.1
  CVE-2020-6819 Exploited

  Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are a…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Apr 24, 2020

  KEV Nov 3, 2021
• High 8.1
  CVE-2020-6820 Exploited

  Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Apr 24, 2020

  KEV Nov 3, 2021
• High 8.8
  CVE-2019-17026 Exploited Public exploit EPSS 46%

  Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Mar 2, 2020

  KEV Nov 3, 2021
• High 8.8
  CVE-2019-11707 Exploited Public exploit EPSS 38%

  A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allo…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 23, 2019

  KEV May 23, 2022
• High 8.8
  CVE-2018-5158 Public exploit EPSS 10%

  Malicious PDF can inject JavaScript into PDF Viewer

  The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious JavaScript to be injected through a crafted PDF file. This JavaScript can then be run with the permissions of the PDF viewer by its worker. This vulnerability af…

  Mozilla Firefox Firefox ESR firefox Browsers Debian Ubuntu npm
  Jun 11, 2018
• High 7.5
  CVE-2016-9079 Exploited Public exploit EPSS 87%

  A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been di…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu
  Jun 11, 2018

  KEV Jun 22, 2023
• High 8.8
  CVE-2015-4495 Exploited Public exploit EPSS 69%

  The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remot…

  firefox pdf.js Debian Ubuntu
  Aug 8, 2015

  KEV May 25, 2022