Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Release: Mozilla Firefox ESR 115.14 Clear all filters
TI-2024-06980 CVE-2024-7531 · GHSA-3jj9-9269-99m2

Time-of-check time-of-use race condition in Mozilla Firefox

Priority LOW 29

Calling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can result in plaintext on an Intel Sandy Bridge processor.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00437 Published 2024-08-06 Partial fix · 129, 115.14 +1 CWE-367
TI-2024-06976 CVE-2024-7527 · GHSA-69x6-6jqx-q847

Use after free in Mozilla Firefox

Priority MEDIUM 41

Unexpected marking work at the start of sweeping could have led to a use-after-free.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00607 Published 2024-08-06 Partial fix · 129, 115.14 +1 CWE-416
TI-2024-06975 CVE-2024-7526 · GHSA-hf5v-h65q-2g27

Use of uninitialized resource in Mozilla Firefox

Priority MEDIUM 40

ANGLE failed to initialize parameters which lead to reading from uninitialized memory.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0058 Published 2024-08-06 Partial fix · 129, 115.14 +1 CWE-908
TI-2024-06974 CVE-2024-7525 · GHSA-7369-x5q2-rh2m

Improper access control in Mozilla Firefox

Priority MEDIUM 46

It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read and modify the response body of requests on any site.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00598 Published 2024-08-06 Partial fix · 129, 115.14 +1 CWE-284
TI-2024-06973 CVE-2024-7524 · GHSA-7m9h-4qg6-4hmh

Cross-site scripting in Mozilla Firefox

Priority LOW 28

Firefox adds web-compatibility shims in place of some tracking scripts blocked by Enhanced Tracking Protection.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00489 Published 2024-08-06 Partial fix · 129, 115.14 +1 CWE-79
TI-2024-06971 CVE-2024-7522 · GHSA-7jrj-xq8x-h553

Out-of-bounds read in Mozilla Firefox

Priority MEDIUM 46

Editor code failed to check an attribute value.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00634 Published 2024-08-06 Partial fix · 129, 115.14 +1 CWE-125
TI-2024-06968 CVE-2024-7519 · GHSA-9wvx-3hw8-4ghf

Out-of-bounds write in Mozilla Firefox

Priority MEDIUM 44

Insufficient checks when processing graphics shared memory could have led to memory corruption.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00629 Published 2024-08-06 Partial fix · 129, 115.14 +1 CWE-787