Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: Mozilla Firefox, Firefox ESR — DSA-4603 Clear all filters
TI-2019-12707 CVE-2019-17024 · GHSA-r596-hj6g-g56c

Out-of-bounds write in Mozilla Firefox ESR

Priority MEDIUM 43

Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02455 Published 2020-01-08 Partial fix · 68.4, 72 CWE-787
TI-2019-12705 CVE-2019-17022 · GHSA-wgfq-5c99-wv2w

Cross-site scripting in Mozilla Firefox ESR

Priority LOW 31

When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape < and > characters.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01988 Published 2020-01-08 Partial fix · 68.4, 72 CWE-79
TI-2019-12700 CVE-2019-17017 · GHSA-6m7f-wqg6-qgm2

Type confusion in Mozilla Firefox ESR

Priority MEDIUM 43

Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02489 Published 2020-01-08 Partial fix · 68.4, 72 CWE-843
TI-2019-12699 CVE-2019-17016 · GHSA-w7r7-7cjm-rq4q

Cross-site scripting in Mozilla Firefox ESR

Priority LOW 31

When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01988 Published 2020-01-08 Partial fix · 68.4, 72 CWE-79