Vulnerabilidades em mozilla
2.453 resultadosAnálise Vexday
A Mozilla apresenta um perfil de risco baixo com apenas 3 vulnerabilidades catalogadas, nenhuma sob exploração ativa ou crítica. A fraqueza dominante identificada é CWE-400 (Uncontrolled Resource Consumption), que tipicamente afeta disponibilidade; a ausência de publicações recentes sugere que o risco atual não é imediato.
CVE-2020-26967—When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox Screenshots into interacting with elemeEPSS 0.9%CVE-2022-22742MEDIUMWhen inserting text while in edit mode, some characters might have lead to out-of-bounds memory access causing a potentially exploitable craEPSS 0.8%CVE-2021-4138—Improved Host header checks to reject requests not sent to a well-known local hostname or IP, or the server-specified hostname.EPSS 0.8%CVE-2019-9821—A use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with shared workers. This results in a potentially exEPSS 0.8%CVE-2019-11697—If the ALT and "a" keys are pressed when users receive an extension installation prompt, the extension will be installed without the installEPSS 0.8%CVE-2020-26963—Repeated calls to the history and location interfaces could have been used to hang the browser. This was addressed by introducing rate-limitEPSS 0.8%CVE-2019-11765—A compromised content process could send a message to the parent process that would cause the 'Click to Play' permission prompt to be shown.EPSS 0.8%CVE-2019-11699—A malicious page can briefly cause the wrong name to be highlighted as the domain name in the addressbar during page navigations. This couldEPSS 0.8%CVE-2023-6204—On some systems—depending on the graphics settings and drivers—it was possible to force an out-of-bounds read and leak memory data into the EPSS 0.8%CVE-2022-45412HIGHWhen resolving a symlink such as <code>file:///proc/self/fd/1</code>, an error message may be produced where the symlink was resolved to a sEPSS 0.8%CVE-2021-29974—When network partitioning was enabled, e.g. as a result of Enhanced Tracking Protection settings, a TLS error page would allow the user to oEPSS 0.8%CVE-2019-11696—Files with the .JNLP extension used for "Java web start" applications are not treated as executable content for download prompts even thoughEPSS 0.8%CVE-2021-29959—When a user has already allowed a website to access microphone and camera, disabling camera sharing would not fully prevent the website fromEPSS 0.8%CVE-2024-0750HIGHA bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions. This vEPSS 0.8%CVE-2026-2775CRITICALMitigation bypass in the DOM: HTML Parser componentEPSS 0.8%CVE-2020-26955—When a user downloaded a file in Firefox for Android, if a cookie is set, it would have been re-sent during a subsequent file download operaEPSS 0.8%CVE-2021-38507—The Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently upgraded to TLS while retaining the visual EPSS 0.8%CVE-2013-1689—Mozilla Firefox 20.0a1 and earlier allows remote attackers to cause a denial of service (crash), related to event handling with frames.EPSS 0.8%CVE-2021-29960—Firefox used to cache the last filename used for printing a file. When generating a filename for printing, Firefox usually suggests the web EPSS 0.8%CVE-2023-5727—The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on aEPSS 0.8%