Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

TI-2024-00695 CVE-2024-0755 · GHSA-g89w-hcgw-6g9p

Code injection in Mozilla Firefox

Priority MEDIUM 41

Memory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00751 Published 2024-01-23 Partial fix · 122, 115.7 CWE-94
Priority MEDIUM 41

A malicious devtools extension could have been used to escalate privileges.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00633 Published 2024-01-23 Partial fix · 122, 115.7 CWE-269
Priority LOW 30

When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security Policy could have overridden the child Content Security Policy.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.006 Published 2024-01-23 Partial fix · 122, 115.7 CWE-693
TI-2024-00686 CVE-2024-0746 · GHSA-vw65-ccrc-xmfw

Use after free in Mozilla Firefox

Priority LOW 30

A Linux user opening the print preview dialog could have caused the browser to crash.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00738 Published 2024-01-23 Partial fix · 122, 115.7 CWE-416
TI-2024-00681 CVE-2024-0741 · GHSA-h59p-5475-hhmr

Out-of-bounds write in Mozilla Firefox

Priority LOW 33

An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentially exploitable crash.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.02155 Published 2024-01-23 Partial fix · 122, 115.7 CWE-787