Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: Mozilla Firefox — USN-4278-2 Clear all filters
TI-2020-05511 CVE-2020-6801 · GHSA-gx87-4m2g-vcf2

Out-of-bounds write in Mozilla Firefox

Priority MEDIUM 41

Mozilla developers reported memory safety bugs present in Firefox 72.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01227 Published 2020-03-02 Partial fix · 73 CWE-787
TI-2020-05510 CVE-2020-6800 · GHSA-qjg6-3pj8-cqgj

Out-of-bounds write in Mozilla Thunderbird

Priority MEDIUM 42

Mozilla developers and community members reported memory safety bugs present in Firefox 72 and Firefox ESR 68.4.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02263 Published 2020-03-02 Partial fix · 68.5, 73 +1 CWE-787
TI-2020-05508 CVE-2020-6798 · GHSA-qwm2-p76q-cw3g

Cross-site scripting in Mozilla Thunderbird

Priority LOW 31

If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution when it should not be allowed.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02046 Published 2020-03-02 Partial fix · 68.5, 73 +1 CWE-79
TI-2020-05506 CVE-2020-6796 · GHSA-mx5h-crf7-xxv9

Out-of-bounds write in Mozilla Firefox

Priority MEDIUM 41

A content process could have modified shared memory relating to crash reporting information, crash itself, and cause an out-of-bound write.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01371 Published 2020-03-02 Partial fix · 73, ESR68.5 CWE-787