Vulnerabilities in mozilla
2,453 resultsCVE-2018-5188—Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these bugs showed evidence of memory corruption and EPSS 3.9%CVE-2018-12393—A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an internal UTF-16 represEPSS 3.9%CVE-2026-6770MEDIUMOther issue in the Storage: IndexedDB componentEPSS 3.9%CVE-2017-5390—The JSON viewer in the Developer Tools uses insecure methods to create a communication channel for copying and viewing JSON or HTTP headers EPSS 3.8%CVE-2018-12362—An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3) scaler, resulting in aEPSS 3.8%CVE-2018-5156—A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurring. This can result iEPSS 3.8%CVE-2017-5398—Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we presume that with enougEPSS 3.7%CVE-2018-5177—A vulnerability exists in XSLT during number formatting where a negative buffer size may be allocated in some instances, leading to a bufferEPSS 3.7%CVE-2017-5397—The cache directory on the local file system is set to be world writable. Firefox defaults to extracting libraries from this cache. This allEPSS 3.6%CVE-2017-5400—JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruptionEPSS 3.6%CVE-2019-17006—In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application cEPSS 3.6%CVE-2016-5297—An error in argument length checking in JavaScript, leading to potential integer overflows or other bounds checking issues. This vulnerabiliEPSS 3.5%CVE-2020-12388—The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note: this issue only afEPSS 3.5%CVE-2017-7824—A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content. This is due to an incEPSS 3.5%CVE-2017-5439—A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially exploitableEPSS 3.5%CVE-2017-5438—A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. This results EPSS 3.5%CVE-2017-5434—A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash. This vulnerability aEPSS 3.5%CVE-2017-5433—A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are dropped from the animaEPSS 3.5%CVE-2017-5429—Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of EPSS 3.4%CVE-2016-9898—Use-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the Editor. This vulnerability affects Firefox <EPSS 3.4%