Vulnerabilidades en mozilla
1863 resultadosCVE-2023-37456—The session restore helper crashed whenever there was no parameter sent to the message handler. This vulnerability affects Firefox for iOS <EPSS 0.4%CVE-2024-11701MEDIUMThe incorrect domain may have been displayed in the address bar during an interrupted navigation attempt. This could have led to user confusEPSS 0.4%CVE-2026-6747HIGHUse-after-free in the WebRTC componentEPSS 0.4%CVE-2016-9062—Private browsing mode leaves metadata information, such as URLs, for sites visited in "browser.db" and "browser.db-wal" files within the FirEPSS 0.4%CVE-2024-6606HIGHOut-of-bounds read in clipboard componentEPSS 0.4%CVE-2024-10468CRITICALPotential race conditions in IndexedDB could have caused memory corruption, leading to a potentially exploitable crash. This vulnerability aEPSS 0.4%CVE-2026-6748CRITICALUninitialized memory in the Audio/Video: Web Codecs componentEPSS 0.4%CVE-2025-5268HIGHMemory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.11EPSS 0.4%CVE-2026-12292HIGHIncorrect boundary conditions in the Web Audio componentEPSS 0.4%CVE-2024-5689MEDIUMIn addition to detecting when a user was taking a screenshot (XXX), a website was able to overlay the 'My Shots' button that appeared, and dEPSS 0.4%CVE-2026-4711CRITICALUse-after-free in the Widget: Cocoa componentEPSS 0.4%CVE-2024-3855MEDIUMIn certain cases the JIT incorrectly optimized MSubstr operations, which led to out-of-bounds reads. This vulnerability affects Firefox < 12EPSS 0.4%CVE-2026-12290HIGHMemory safety bug fixed in Firefox 152EPSS 0.4%CVE-2023-29538—Under specific circumstances a WebExtension may have received a <code>jar:file:///</code> URI instead of a <code>moz-extension:///</code> UREPSS 0.4%CVE-2019-9808—If WebRTC permission is requested from documents with data: or blob: URLs, the permission notifications do not properly display the originatEPSS 0.4%CVE-2024-6600MEDIUMMemory corruption in WebGL APIEPSS 0.4%CVE-2026-12289HIGHPrivilege escalation in the Graphics: WebRender componentEPSS 0.4%CVE-2022-34475MEDIUMSVG <code><use></code> tags that referenced a same-origin document could have resulted in script execution if attacker input was sanitEPSS 0.4%CVE-2026-2759CRITICALIncorrect boundary conditions in the Graphics: ImageLib componentEPSS 0.4%CVE-2026-2760CRITICALSandbox escape due to incorrect boundary conditions in the Graphics: WebRender componentEPSS 0.4%