Vulnerabilidades en mozilla
2453 resultadosCVE-2020-6800—Mozilla developers and community members reported memory safety bugs present in Firefox 72 and Firefox ESR 68.4. Some of these bugs showed eEPSS 2.3%CVE-2017-7788—When an "iframe" has a "sandbox" attribute and its content is specified using "srcdoc", that content does not inherit the containing page's EPSS 2.3%CVE-2016-9080—Memory safety bugs were reported in Firefox 50.0.2. Some of these bugs showed evidence of memory corruption and we presume that with enough EPSS 2.3%CVE-2018-5131—Under certain circumstances the "fetch()" API can return transient local copies of resources that were sent with a "no-store" or "no-cache" EPSS 2.2%CVE-2019-9788—Mozilla developers and community members reported memory safety bugs present in Firefox 65, Firefox ESR 60.5, and Thunderbird 60.5. Some of EPSS 2.2%CVE-2018-5180—A use-after-free vulnerability can occur during WebGL operations. While this results in a potentially exploitable crash, the vulnerability iEPSS 2.2%CVE-2017-5419—If a malicious site repeatedly triggers a modal authentication prompt, eventually the browser UI will become non-responsive, requiring shutdEPSS 2.2%CVE-2017-5386—WebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions using this protocol, leading to potential dEPSS 2.2%CVE-2018-5186—Memory safety bugs present in Firefox 60. Some of these bugs showed evidence of memory corruption and we presume that with enough effort thaEPSS 2.2%CVE-2018-18506—When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is loaded locally, this EPSS 2.2%CVE-2020-6825—Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 74 and Firefox ESR EPSS 2.2%CVE-2022-28282MEDIUMBy using a link with <code>rel="localization"</code> a use-after-free could have been triggered by destroying an object during JavaScript exEPSS 2.2%CVE-2019-11752—It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. This results in a use-after-free and aEPSS 2.2%CVE-2021-43537—An incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt memory leading to a potentially exploitablEPSS 2.2%CVE-2024-0741MEDIUMAn out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentially exploitable crash. This vulnerabilEPSS 2.2%CVE-2018-18502—Mozilla developers and community members reported memory safety bugs present in Firefox 64. Some of these bugs showed evidence of memory corEPSS 2.2%CVE-2019-11713—A use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while still in use, resulting in a potentially explEPSS 2.1%CVE-2019-11717—A vulnerability exists where the caret ("^") character is improperly escaped constructing some URIs due to it being used as a separator, allEPSS 2.1%CVE-2018-12391—During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of security policies. BecausEPSS 2.1%CVE-2016-9075—An issue where WebExtensions can use the mozAddonManager API to elevate privilege due to privileged pages being allowed in the permissions lEPSS 2.1%