Vulnerabilities

TI-2024-00695 CVE-2024-0755 · GHSA-g89w-hcgw-6g9p

Code injection in Mozilla Firefox

MEDIUM 41

Memory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00751 Published 2024-01-23 Partial fix · 122, 115.7 CWE-94

TI-2024-00693 CVE-2024-0753 · GHSA-7jq7-8r3x-pjjq

In specific HSTS configurations an attacker could have bypassed HSTS on a subdomain.

LOW 30

In specific HSTS configurations an attacker could have bypassed HSTS on a subdomain.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00717 Published 2024-01-23 Partial fix · 122, 115.7

TI-2024-00691 CVE-2024-0751 · GHSA-mvvq-wfcg-vq6m

Improper privilege management in Mozilla Firefox

MEDIUM 41

A malicious devtools extension could have been used to escalate privileges.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00633 Published 2024-01-23 Partial fix · 122, 115.7 CWE-269

TI-2024-00690 CVE-2024-0750 · GHSA-pw8j-6xcp-c453

A bug in popup notifications delay calculation could have made it possible for an…

MEDIUM 42

A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00837 Published 2024-01-23 Partial fix · 122, 115.7 CWE-451

TI-2024-00689 CVE-2024-0749 · GHSA-3568-h36m-7jmf

Origin validation error in Mozilla Firefox

LOW 20

A phishing site could have repurposed an `about:` dialog to show phishing content with an incorrect origin in the address bar.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00336 Published 2024-01-23 Partial fix · 122, 115.7 CWE-346

TI-2024-00687 CVE-2024-0747 · GHSA-jx5w-px6r-88w4

Protection mechanism failure in Mozilla Firefox

LOW 30

When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security Policy could have overridden the child Content Security Policy.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.006 Published 2024-01-23 Partial fix · 122, 115.7 CWE-693

TI-2024-00686 CVE-2024-0746 · GHSA-vw65-ccrc-xmfw

Use after free in Mozilla Firefox

LOW 30

A Linux user opening the print preview dialog could have caused the browser to crash.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00738 Published 2024-01-23 Partial fix · 122, 115.7 CWE-416

TI-2024-00682 CVE-2024-0742 · GHSA-gpvq-2fxv-3pgq

It was possible for certain browser prompts and dialogs to be activated or dismissed…

LOW 21

It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an incorrect timestamp used to prevent input after page load.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00596 Published 2024-01-23 Partial fix · 122, 115.7

TI-2024-00681 CVE-2024-0741 · GHSA-h59p-5475-hhmr

Out-of-bounds write in Mozilla Firefox

LOW 33

An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentially exploitable crash.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.02155 Published 2024-01-23 Partial fix · 122, 115.7 CWE-787

Vulnerabilities

Filters