TI-2024-04450 CVE-2024-4777 · GHSA-qchj-32cr-96w5
Use after free in Mozilla Firefox
Priority MEDIUM 41
Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10.
Vulnerabilities
6 records
TI-2024-04443 CVE-2024-4770 · GHSA-7ggp-cp85-r5cg
Use after free in Mozilla Firefox
Priority MEDIUM 41
When saving a page to PDF, certain font styles could have led to a potential use-after-free crash.
TI-2024-04442 CVE-2024-4769 · GHSA-vgc7-vqc6-2858
When importing resources using Web Workers, error messages would distinguish the…
Priority LOW 27
When importing resources using Web Workers, error messages would distinguish the difference between `application/javascript` responses and non-script responses.
TI-2024-04441 CVE-2024-4768 · GHSA-2fg8-6ggf-j2jg
A bug in popup notifications' interaction with WebAuthn made it easier for an attacker to…
Priority LOW 28
A bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a user into granting permissions.
TI-2024-04440 CVE-2024-4767 · GHSA-fffc-4hjp-2r9v
If the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were…
Priority LOW 21
If the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not properly deleted when the window was closed.
TI-2024-04069 CVE-2024-4367 · GHSA-wgrm-67xf-hhpq
Improper check for unusual conditions in Mozilla Firefox
Priority HIGH 78
A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context.