Vulnerabilidades em mozilla

2.453 resultados
Análise Vexday

A Mozilla apresenta um perfil de risco baixo com apenas 3 vulnerabilidades catalogadas, nenhuma sob exploração ativa ou crítica. A fraqueza dominante identificada é CWE-400 (Uncontrolled Resource Consumption), que tipicamente afeta disponibilidade; a ausência de publicações recentes sugere que o risco atual não é imediato.

CVE-2026-2761CRITICALSandbox escape in the Graphics: WebRender componentEPSS 0.5%CVE-2026-2760CRITICALSandbox escape due to incorrect boundary conditions in the Graphics: WebRender componentEPSS 0.5%CVE-2026-2759CRITICALIncorrect boundary conditions in the Graphics: ImageLib componentEPSS 0.5%CVE-2024-1556MEDIUMThe incorrect object was checked for NULL in the built-in profiler, potentially leading to invalid memory access and undefined behavior. *NoEPSS 0.5%CVE-2025-8042CRITICALSandboxed iframe could start downloadsEPSS 0.5%CVE-2023-29547MEDIUMWhen a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain could have been created, when it should have sEPSS 0.5%CVE-2026-0877HIGHMitigation bypass in the DOM: Security componentEPSS 0.5%CVE-2026-8975HIGHMemory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151EPSS 0.5%CVE-2024-5694HIGHAn attacker could have caused a use-after-free in the JavaScript engine to read memory in the JavaScript string section of the heap. This vuEPSS 0.5%CVE-2026-4706HIGHIncorrect boundary conditions in the Graphics: Canvas2D componentEPSS 0.5%CVE-2026-2804MEDIUMUse-after-free in the JavaScript: WebAssembly componentEPSS 0.5%CVE-2025-3909HIGHJavaScript Execution via Spoofed PDF Attachment and file:/// LinkEPSS 0.5%CVE-2026-8091CRITICALIncorrect boundary conditions in the Audio/Video: Playback componentEPSS 0.5%CVE-2026-0878HIGHSandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL componentEPSS 0.5%CVE-2026-14899HIGHOff-by-one out of bounds read in MIME header parser for forwardingEPSS 0.5%CVE-2021-43529CRITICALThunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. ThundeEPSS 0.5%CVE-2026-16360CRITICALMemory safety bugs fixed in Thunderbird ESR 140.13 and Thunderbird 153EPSS 0.5%CVE-2026-117981CRITICALPrivilege escalation in the Toolkit componentEPSS 0.5%CVE-2026-0882HIGHUse-after-free in the IPC componentEPSS 0.5%CVE-2025-1010CRITICALUse-after-free in Custom HighlightEPSS 0.5%