Vulnerabilidades em mozilla
2.453 resultadosAnálise Vexday
A Mozilla apresenta um perfil de risco baixo com apenas 3 vulnerabilidades catalogadas, nenhuma sob exploração ativa ou crítica. A fraqueza dominante identificada é CWE-400 (Uncontrolled Resource Consumption), que tipicamente afeta disponibilidade; a ausência de publicações recentes sugere que o risco atual não é imediato.
CVE-2021-43538—By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that had received full screEPSS 1.2%CVE-2023-6864—Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of these bugs showed evidence of memory corruptionEPSS 1.2%CVE-2017-7814—File downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks though the Phishing and Malware ProtectionEPSS 1.2%CVE-2019-11747—The "Forget about this site" feature in the History pane is intended to remove all saved user data that indicates a user has visited a site.EPSS 1.2%CVE-2017-5452—Malicious sites can display a spoofed addressbar on a page when the existing location bar on the new page is scrolled out of view if an HTMLEPSS 1.2%CVE-2018-5142—If Media Capture and Streams API permission is requested from documents with "data:" or "blob:" URLs, the permission notifications do not prEPSS 1.2%CVE-2021-23954—Using the new logical assignment operators in a JavaScript switch statement could have caused a type confusion, leading to a memory corruptiEPSS 1.2%CVE-2017-7771—Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.EPSS 1.2%CVE-2021-23995—When Responsive Design Mode was enabled, it used references to objects that were previously freed. We presume that with enough effort this cEPSS 1.2%CVE-2018-18496—When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted content for a clickjackingEPSS 1.2%CVE-2019-11735—Mozilla developers and community members reported memory safety bugs present in Firefox 68 and Firefox ESR 68. Some of these bugs showed eviEPSS 1.2%CVE-2020-12409—When using certain blank characters in a URL, they where incorrectly rendered as spaces instead of an encoded URL. This vulnerability affectEPSS 1.2%CVE-2022-40958MEDIUMBy injecting a cookie with certain special characters, an attacker on a shared subdomain which is not a secure context could set and thus ovEPSS 1.2%CVE-2020-12411—Mozilla developers reported memory safety bugs present in Firefox 76. Some of these bugs showed evidence of memory corruption and we presumeEPSS 1.2%CVE-2020-26961—When DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the responses as these do not make sense coming fEPSS 1.2%CVE-2017-7820—The "instanceof" operator can bypass the Xray wrapper mechanism. When called on web content from the browser itself or an extension the web EPSS 1.2%CVE-2020-26952—Incorrect bookkeeping of functions inlined during JIT compilation could have led to memory corruption and a potentially exploitable crash whEPSS 1.2%CVE-2021-38492—When delegating navigations to the operating system, Firefox would accept the `mk` scheme which might allow attackers to launch pages and exEPSS 1.2%CVE-2019-11763—Failure to correctly handle null bytes when processing HTML entities resulted in Firefox incorrectly parsing these entities. This could haveEPSS 1.1%CVE-2019-11725—When a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are displayed and navigation is interrupted but resEPSS 1.1%