Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Advisory: Mozilla Firefox — USN-3761-1 Clear all filters
TI-2018-08883 CVE-2018-12383 · GHSA-cvcq-m8cv-7r6g

Insufficiently protected credentials in Mozilla Firefox

Priority LOW 25

If a user saved passwords before Firefox 58 and then later set a master password, an unencrypted copy of these passwords is still accessible.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0046 Published 2018-10-18 Partial fix · 62, 60.2.1 CWE-522
TI-2018-08879 CVE-2018-12378 · GHSA-393c-hwwh-9gm2

Use after free in Mozilla Firefox

Priority MEDIUM 48

A use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by JavaScript code that is providing payload values to be stored.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03357 Published 2018-10-18 Fixed in 62, 60.2 +1 CWE-416
TI-2018-08878 CVE-2018-12377 · GHSA-q5f8-grf8-9ff4

Use after free in Mozilla Firefox

Priority MEDIUM 48

A use-after-free vulnerability can occur when refresh driver timers are refreshed in some circumstances during shutdown when the timer is deleted while still in use.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03357 Published 2018-10-18 Fixed in 62, 60.2 +1 CWE-416
TI-2018-08877 CVE-2018-12376 · GHSA-qv7h-qvhv-jxmh

Memory corruption in Mozilla Firefox

Priority MEDIUM 48

Memory safety bugs present in Firefox 61 and Firefox ESR 60.1.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03146 Published 2018-10-18 Fixed in 62, 60.2 +1 CWE-119
TI-2018-08876 CVE-2018-12375 · GHSA-673x-h77f-ggvc

Memory corruption in Mozilla Firefox

Priority MEDIUM 42

Memory safety bugs present in Firefox 61.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0185 Published 2018-10-18 Fixed in 62 CWE-119