TI-2024-06970 CVE-2024-7521 · GHSA-563c-g7mm-g4xp
Improper handling of exceptional conditions in Mozilla Firefox
Priority MEDIUM 50
Incomplete WebAssembly exception handing could have led to a use-after-free.
RHSA-2024:5328
firefox security update
Released 2024-08-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.9.2) firefox-115.14.0-2.el9_2, firefox-x11-115.14.0-2.el9_2
Fixes 11 records
TI-2024-06977 CVE-2024-7528 · GHSA-gx25-vx95-m52w
Use after free in Mozilla Firefox
Priority MEDIUM 49
Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free.
TI-2024-06974 CVE-2024-7525 · GHSA-7369-x5q2-rh2m
Improper access control in Mozilla Firefox
Priority MEDIUM 46
It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read and modify the response body of requests on any site.
TI-2024-06971 CVE-2024-7522 · GHSA-7jrj-xq8x-h553
Out-of-bounds read in Mozilla Firefox
Priority MEDIUM 46
Editor code failed to check an attribute value.
TI-2024-06968 CVE-2024-7519 · GHSA-9wvx-3hw8-4ghf
Out-of-bounds write in Mozilla Firefox
Priority MEDIUM 44
Insufficient checks when processing graphics shared memory could have led to memory corruption.
TI-2024-06976 CVE-2024-7527 · GHSA-69x6-6jqx-q847
Use after free in Mozilla Firefox
Priority MEDIUM 41
Unexpected marking work at the start of sweeping could have led to a use-after-free.
TI-2024-06969 CVE-2024-7520 · GHSA-7j5g-jfh2-w58c
Code injection in Mozilla Firefox
Priority MEDIUM 41
A type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code execution.
TI-2024-06975 CVE-2024-7526 · GHSA-hf5v-h65q-2g27
Use of uninitialized resource in Mozilla Firefox
Priority MEDIUM 40
ANGLE failed to initialize parameters which lead to reading from uninitialized memory.
TI-2024-06978 CVE-2024-7529 · GHSA-cr94-c6j4-q6g5
The date picker could partially obscure security prompts.
Priority LOW 38
The date picker could partially obscure security prompts.
TI-2024-06967 CVE-2024-7518 · GHSA-mcjx-2c4v-mvg9
Clickjacking in Mozilla Firefox
Priority LOW 29
Select options could obscure the fullscreen notification dialog.
TI-2024-06973 CVE-2024-7524 · GHSA-7m9h-4qg6-4hmh
Cross-site scripting in Mozilla Firefox
Priority LOW 28
Firefox adds web-compatibility shims in place of some tracking scripts blocked by Enhanced Tracking Protection.