Vulnerabilidades en mozilla

2105 resultados
Análisis Vexday

A Mozilla apresenta um perfil de risco baixo com apenas 3 vulnerabilidades catalogadas, nenhuma sob exploração ativa ou crítica. A fraqueza dominante identificada é CWE-400 (Uncontrolled Resource Consumption), que tipicamente afeta disponibilidade; a ausência de publicações recentes sugere que o risco atual não é imediato.

CVE-2025-14325HIGHJIT miscompilation in the JavaScript Engine: JIT componentEPSS 0.3%CVE-2026-16354HIGHInformation disclosure in the Graphics: ImageLib componentEPSS 0.3%CVE-2026-92022HIGHUse-after-free in the DOM: HTML Parser componentEPSS 0.3%CVE-2026-92023HIGHUse-after-free in the XML componentEPSS 0.3%CVE-2023-23597—Logic bug in process allocation allowed to read arbitrary filesEPSS 0.3%CVE-2026-57962MEDIUMDenial-of-service via malicious LDAP address-book serverEPSS 0.3%CVE-2026-92029HIGHUse-after-free in the SVG componentEPSS 0.3%CVE-2026-92024HIGHUse-after-free in the SVG componentEPSS 0.3%CVE-2026-92025HIGHUse-after-free in the DOM: Navigation componentEPSS 0.3%CVE-2026-92028HIGHUse-after-free in the DOM: Core & HTML componentEPSS 0.3%CVE-2026-92027HIGHUse-after-free in the DOM: Streams componentEPSS 0.3%CVE-2026-15719MEDIUMSite isolation issue in the DOM: Navigation componentEPSS 0.3%CVE-2025-14322HIGHSandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL componentEPSS 0.3%CVE-2017-7794—On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even though the sandbox expliciEPSS 0.3%CVE-2025-55029HIGHMalicious scripts could spam popups for denial of service attacksEPSS 0.3%CVE-2025-1938MEDIUMMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8EPSS 0.3%CVE-2020-12402—During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly iEPSS 0.3%CVE-2026-84139CRITICALClickjacking issue in the DOM: Events componentEPSS 0.3%CVE-2026-16395CRITICALInteger overflow in the Audio/Video componentEPSS 0.3%CVE-2016-5293—When the Mozilla Updater is run, if the Updater's log file in the working directory points to a hardlink, data can be appended to an arbitraEPSS 0.3%