Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

TI-2024-06976 CVE-2024-7527 · GHSA-69x6-6jqx-q847

Use after free in Mozilla Firefox

Priority MEDIUM 41

Unexpected marking work at the start of sweeping could have led to a use-after-free.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00607 Published 2024-08-06 Partial fix · 129, 115.14 +1 CWE-416
Priority MEDIUM 40

ANGLE failed to initialize parameters which lead to reading from uninitialized memory.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0058 Published 2024-08-06 Partial fix · 129, 115.14 +1 CWE-908
TI-2024-06974 CVE-2024-7525 · GHSA-7369-x5q2-rh2m

Improper access control in Mozilla Firefox

Priority MEDIUM 46

It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read and modify the response body of requests on any site.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00598 Published 2024-08-06 Partial fix · 129, 115.14 +1 CWE-284
TI-2024-06971 CVE-2024-7522 · GHSA-7jrj-xq8x-h553

Out-of-bounds read in Mozilla Firefox

Priority MEDIUM 46

Editor code failed to check an attribute value.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00634 Published 2024-08-06 Partial fix · 129, 115.14 +1 CWE-125
TI-2024-06968 CVE-2024-7519 · GHSA-9wvx-3hw8-4ghf

Out-of-bounds write in Mozilla Firefox

Priority MEDIUM 44

Insufficient checks when processing graphics shared memory could have led to memory corruption.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00629 Published 2024-08-06 Partial fix · 129, 115.14 +1 CWE-787