Vulnerabilidades em mozilla
2.453 resultadosAnálise Vexday
A Mozilla apresenta um perfil de risco baixo com apenas 3 vulnerabilidades catalogadas, nenhuma sob exploração ativa ou crítica. A fraqueza dominante identificada é CWE-400 (Uncontrolled Resource Consumption), que tipicamente afeta disponibilidade; a ausência de publicações recentes sugere que o risco atual não é imediato.
CVE-2023-29546MEDIUMWhen recording the screen while in Private Browsing on Firefox for Android the address bar and keyboard were not hidden, potentially leakingEPSS 0.5%CVE-2024-9399HIGHA website configured to initiate a specially crafted WebTransport session could crash the Firefox process leading to a denial of service conEPSS 0.5%CVE-2024-11706MEDIUMA null pointer dereference may have inadvertently occurred in `pk12util`, and specifically in the `SEC_ASN1DecodeItem_Util` function, when hEPSS 0.5%CVE-2023-6211—If an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS-only mode, the attacker could have tricked EPSS 0.5%CVE-2026-12292HIGHIncorrect boundary conditions in the Web Audio componentEPSS 0.5%CVE-2023-6871—Under certain conditions, Firefox did not display a warning when a user attempted to navigate to a new protocol handler. This vulnerability EPSS 0.5%CVE-2026-16411CRITICALMemory safety bugs fixed in Thunderbird 153EPSS 0.5%CVE-2023-6868—In some instances, the user-agent would allow push requests which lacked a valid VAPID even though the push manager subscription defined oneEPSS 0.5%CVE-2023-23600—Notification permissions persisted between Normal and Private Browsing on AndroidEPSS 0.5%CVE-2020-15671—When typing in a password under certain conditions, a race may have occured where the InputContext was not being correctly set for the inputEPSS 0.5%CVE-2024-4767MEDIUMIf the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not properly deleted when the window was closed. ThisEPSS 0.5%CVE-2026-117980CRITICALUse-after-free in the Graphics componentEPSS 0.5%CVE-2025-4093HIGHMemory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.10EPSS 0.5%CVE-2024-11692MEDIUMAn attacker could cause a select dropdown to be shown over another tab; this could have led to user confusion and possible spoofing attacks.EPSS 0.5%CVE-2025-9187CRITICALMemory safety bugs fixed in Firefox 142 and Thunderbird 142EPSS 0.5%CVE-2023-0616MEDIUMIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, EPSS 0.5%CVE-2026-15718MEDIUMInvalid pointer in the JavaScript: WebAssembly componentEPSS 0.5%CVE-2026-6757MEDIUMInvalid pointer in the JavaScript: WebAssembly componentEPSS 0.5%CVE-2024-8389CRITICALMemory safety bugs present in Firefox 129. Some of these bugs showed evidence of memory corruption and we presume that with enough effort soEPSS 0.5%CVE-2024-7524MEDIUMFirefox adds web-compatibility shims in place of some tracking scripts blocked by Enhanced Tracking Protection. On a site protected by ContEPSS 0.5%