Vulnerabilidades en mozilla
2453 resultadosCVE-2023-6861—The `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in headless mode. This vulnerability affects EPSS 1.4%CVE-2017-5426—On Linux, if the secure computing mode BPF (seccomp-bpf) filter is running when the Gecko Media Plugin sandbox is started, the sandbox failsEPSS 1.4%CVE-2021-4140CRITICALIt was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox. This vulnerability affects Firefox ESR < 9EPSS 1.4%CVE-2019-17007—In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in a denial of serviceEPSS 1.4%CVE-2021-29980—Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption and a potentially exploitable craEPSS 1.4%CVE-2020-15653—An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links. This could have led to security issues forEPSS 1.4%CVE-2017-5458—When a "javascript:" URL is drag and dropped by a user into the addressbar, the URL will be processed and executed. This allows for users toEPSS 1.4%CVE-2019-11721—The unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar. This allows for domain spoofing attacks aEPSS 1.4%CVE-2020-15664—By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTriggerEPSS 1.4%CVE-2020-15658—The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file endEPSS 1.4%CVE-2023-5176CRITICALMemory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs showed evidence of memory corruptionEPSS 1.4%CVE-2021-29984—Instruction reordering resulted in a sequence of instructions that would cause an object to be incorrectly considered during garbage collectEPSS 1.4%CVE-2021-29988—Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds read or memory corruption, and a pEPSS 1.4%CVE-2017-7799—JavaScript in the "about:webrtc" page is not sanitized properly being assigned to "innerHTML". Data on this page is supplied by WebRTC usageEPSS 1.4%CVE-2018-18503—When JavaScript is used to create and manipulate an audio buffer, a potentially exploitable crash may occur because of a compartment mismatcEPSS 1.4%CVE-2022-22744HIGHThe constructed curl command from the "Copy as curl" feature in DevTools was not properly escaped for PowerShell. This could have lead to coEPSS 1.4%CVE-2021-23999—If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional priEPSS 1.4%CVE-2019-11700—A hyperlink using the res: protocol can be used to open local files at a known location in Internet Explorer if a user approves execution whEPSS 1.4%CVE-2020-6796—A content process could have modified shared memory relating to crash reporting information, crash itself, and cause an out-of-bound write. EPSS 1.4%CVE-2025-1015MEDIUMUnsanitized address book fieldsEPSS 1.4%