Vulnerabilidades em mozilla
2.453 resultadosAnálise Vexday
A Mozilla apresenta um perfil de risco baixo com apenas 3 vulnerabilidades catalogadas, nenhuma sob exploração ativa ou crítica. A fraqueza dominante identificada é CWE-400 (Uncontrolled Resource Consumption), que tipicamente afeta disponibilidade; a ausência de publicações recentes sugere que o risco atual não é imediato.
CVE-2026-8953CRITICALSandbox escape due to use-after-free in the Disability Access APIs componentEPSS 0.5%CVE-2026-92051CRITICALSpoofing issue due to invalid pointer in the Graphics componentEPSS 0.5%CVE-2026-16392CRITICALJIT miscompilation in the JavaScript Engine: JIT componentEPSS 0.5%CVE-2022-36318MEDIUMWhen visiting directory listings for `chrome://` URLs as source text, some parameters were reflected. This vulnerability affects Firefox ESREPSS 0.5%CVE-2026-2789HIGHUse-after-free in the Graphics: ImageLib componentEPSS 0.5%CVE-2024-1549MEDIUMIf a website set a large custom cursor, portions of the cursor could have overlapped with the permission dialog, potentially resulting in usEPSS 0.5%CVE-2026-117917CRITICALInvalid pointer in the Graphics: WebRender componentEPSS 0.5%CVE-2026-117862CRITICALPrivilege escalation due to incorrect boundary conditions in the Networking componentEPSS 0.5%CVE-2026-117946CRITICALIncorrect boundary conditions in the JavaScript Engine componentEPSS 0.5%CVE-2026-74985CRITICALPrivilege escalation in the Enterprise Policies componentEPSS 0.5%CVE-2024-7529HIGHThe date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. EPSS 0.5%CVE-2023-29543HIGHAn attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global object's debugger vectEPSS 0.5%CVE-2021-43544—When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caEPSS 0.5%CVE-2023-29551HIGHMemory safety bugs present in Firefox 111. Some of these bugs showed evidence of memory corruption and we presume that with enough effort soEPSS 0.5%CVE-2026-2797HIGHUse-after-free in the JavaScript: GC componentEPSS 0.5%CVE-2024-11702HIGHCopying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-baseEPSS 0.5%CVE-2023-32208—Service workers could reveal script base URL due to dynamic `import()`. This vulnerability affects Firefox < 113.EPSS 0.5%CVE-2023-25740HIGHAfter downloading a Windows <code>.scf</code> script from the local filesystem, an attacker could supply a remote path that would lead to unEPSS 0.5%CVE-2026-74987CRITICALInternally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154EPSS 0.5%CVE-2024-4771HIGHA memory allocation check was missing which would lead to a use-after-free if the allocation failed. This could have triggered a crash or poEPSS 0.5%