Vulnerabilidades em mozilla
2.453 resultadosAnálise Vexday
A Mozilla apresenta um perfil de risco baixo com apenas 3 vulnerabilidades catalogadas, nenhuma sob exploração ativa ou crítica. A fraqueza dominante identificada é CWE-400 (Uncontrolled Resource Consumption), que tipicamente afeta disponibilidade; a ausência de publicações recentes sugere que o risco atual não é imediato.
CVE-2024-1557HIGHMemory safety bugs present in Firefox 122. Some of these bugs showed evidence of memory corruption and we presume that with enough effort soEPSS 0.6%CVE-2023-25731HIGHDue to URL previews in the network panel of developer tools improperly storing URLs, query parameters could potentially be used to overwriteEPSS 0.6%CVE-2022-0511HIGHMozilla developers and community members Gabriele Svelto, Sebastian Hengst, Randell Jesup, Luan Herrera, Lars T Hansen, and the Mozilla FuzzEPSS 0.6%CVE-2022-28288HIGHMozilla developers and community members Randell Jesup, Sebastian Hengst, and the Mozilla Fuzzing Team reported memory safety bugs present iEPSS 0.6%CVE-2023-29537—Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnEPSS 0.6%CVE-2022-22752HIGHMozilla developers Christian Holler and Jason Kratzer reported memory safety bugs present in Firefox 95. Some of these bugs showed evidence EPSS 0.6%CVE-2026-16382CRITICALMitigation bypass in the DOM: Service Workers componentEPSS 0.6%CVE-2026-74986CRITICALSite isolation issue in the CSS Parsing and Computation componentEPSS 0.6%CVE-2020-26957—OneCRL was non-functional in the new Firefox for Android due to a missing service initialization. This could result in a failure to enforce EPSS 0.6%CVE-2026-4688CRITICALSandbox escape due to use-after-free in the Disability Access APIs componentEPSS 0.6%CVE-2026-92066CRITICALSandbox escape in the Profile Backup componentEPSS 0.6%CVE-2026-92037CRITICALIncorrect boundary conditions in the DOM: Animation componentEPSS 0.6%CVE-2026-16410CRITICALJIT miscompilation in the JavaScript Engine: JIT componentEPSS 0.6%CVE-2026-16388CRITICALSandbox escape in the DOM: Networking componentEPSS 0.6%CVE-2026-4727HIGHDenial-of-service in the Libraries component in NSSEPSS 0.6%CVE-2026-92061CRITICALIncorrect boundary conditions in the Security: Process Sandboxing componentEPSS 0.6%CVE-2026-92036CRITICALIncorrect boundary conditions in the Networking: HTTP componentEPSS 0.6%CVE-2026-4726HIGHDenial-of-service in the XML componentEPSS 0.6%CVE-2019-11737—If a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any port or path restriction of the directive wilEPSS 0.5%CVE-2021-43532—The 'Copy Image Link' context menu action would copy the final image URL after redirects. By embedding an image that triggered authenticatioEPSS 0.5%