Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Mozilla Firefox ESR 115.16 Clear all filters
TI-2024-08723 CVE-2024-9401 · GHSA-fc27-6qvc-xq94

Memory corruption in Mozilla Firefox

Priority MEDIUM 50

Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00739 Published 2024-10-01 Partial fix · 131, 128.3 +1 CWE-119
TI-2024-08716 CVE-2024-9394 · GHSA-qph8-rvxf-5936

Cross-site scripting in Mozilla Firefox

Priority LOW 33

An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://devtools` origin.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00521 Published 2024-10-01 Partial fix · 131, 128.3 +1 CWE-79
TI-2024-08715 CVE-2024-9393 · GHSA-rggh-rm3v-8xqj

Origin validation error in Mozilla Firefox

Priority LOW 39

An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://pdf.js` origin.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00397 Published 2024-10-01 Partial fix · 131, 128.3 +1 CWE-346
TI-2024-08714 CVE-2024-9392 · GHSA-hc6r-wpfc-q7m8

Origin validation error in Mozilla Firefox

Priority MEDIUM 50

A compromised content process could have allowed for the arbitrary loading of cross-origin pages.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00535 Published 2024-10-01 Partial fix · 131, 128.3 +1 CWE-346