Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: Mozilla Firefox 93 Clear all filters
TI-2021-16096 CVE-2021-38496 · GHSA-3rfx-pjp7-cvfp

Use after free in Mozilla Thunderbird

Priority MEDIUM 41

During operations on MessageTasks, a task may have been removed while it was still scheduled, resulting in memory corruption and a potentially exploitable crash.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01659 Published 2021-11-03 Partial fix · 78.15, 91.2 +1 CWE-416
TI-2021-16097 CVE-2021-38497 · GHSA-qmc5-2jh2-rpcw

Origin validation error in Mozilla Firefox

Priority LOW 30

Through use of reportValidity() and window.open(), a plain-text validation message could have been overlaid on another origin, leading to possible user confusion and spoofing attacks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00591 Published 2021-11-03 Partial fix · 93, 91.2 CWE-346
TI-2021-16098 CVE-2021-38498 · GHSA-f7wc-pcqv-5mwm

Use after free in Mozilla Firefox

Priority LOW 36

During process shutdown, a document could have caused a use-after-free of a languages service object, leading to memory corruption and a potentially exploitable crash.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01467 Published 2021-11-03 Partial fix · 93, 91.2 CWE-416
TI-2021-16099 CVE-2021-38499 · GHSA-27c4-r36m-7cjh

Out-of-bounds write in Mozilla Firefox

Priority MEDIUM 40

Mozilla developers reported memory safety bugs present in Firefox 92.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00824 Published 2021-11-03 Fixed in 93 CWE-787