Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: Mozilla Firefox 75 Clear all filters
TI-2020-05530 CVE-2020-6821 · GHSA-jj5p-vxx9-rvj7

Use of uninitialized resource in Mozilla Thunderbird

Priority LOW 36

When reading from areas partially or fully outside the source resource with WebGL's <code>copyTexSubImage</code> method, the specification requires the returned values be zero.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01505 Published 2020-04-24 Partial fix · 68.7.0, 68.7 +1 CWE-908
TI-2020-05531 CVE-2020-6822 · GHSA-v2mh-4gcf-6ghr

Out-of-bounds write in Mozilla Thunderbird

Priority MEDIUM 41

On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in <code>GMPDecodeData</code>.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01325 Published 2020-04-24 Partial fix · 68.7.0, 68.7 +1 CWE-787
TI-2020-05532 CVE-2020-6823 · GHSA-cm6f-xjjv-f446

Missing authorization in Mozilla Firefox

Priority MEDIUM 45

A malicious extension could have called <code>browser.identity.launchWebAuthFlow</code>, controlling the redirect_uri, and through the Promise returned, obtain the Auth code and gain access to the user's account at the s…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01608 Published 2020-04-24 Partial fix · 75 CWE-862
TI-2020-05533 CVE-2020-6824 · GHSA-887x-j4cf-3pqh

Session fixation in Mozilla Firefox

Priority LOW 14

Initially, a user opens a Private Browsing Window and generates a password for a site, then closes the Private Browsing Window but leaves Firefox open.

CVSS 3.1LOW 2.8 Local Low privileges User interaction EPSS 0.00273 Published 2020-04-24 Partial fix · 75 CWE-384
TI-2020-05535 CVE-2020-6826 · GHSA-qp6r-j328-v2w7

Out-of-bounds write in Mozilla Firefox

Priority MEDIUM 45

Mozilla developers Tyson Smith, Bob Clary, and Alexandru Michis reported memory safety bugs present in Firefox 74.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01427 Published 2020-04-24 Fixed in 75 CWE-787
TI-2020-05534 CVE-2020-6825 · GHSA-pj8r-w3xr-j4w5

Out-of-bounds write in Mozilla Thunderbird

Priority MEDIUM 46

Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 74 and Firefox ESR 68.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02188 Published 2020-04-24 Partial fix · 68.7.0, 68.7 +1 CWE-787