Vulnerabilidades em mozilla
2.105 resultadosAnálise Vexday
A Mozilla apresenta um perfil de risco baixo com apenas 3 vulnerabilidades catalogadas, nenhuma sob exploração ativa ou crítica. A fraqueza dominante identificada é CWE-400 (Uncontrolled Resource Consumption), que tipicamente afeta disponibilidade; a ausência de publicações recentes sugere que o risco atual não é imediato.
CVE-2025-3029HIGHURL Bar Spoofing via non-BMP Unicode charactersEPSS 0.3%CVE-2025-14325HIGHJIT miscompilation in the JavaScript Engine: JIT componentEPSS 0.3%CVE-2026-92032CRITICALSandbox escape due to invalid pointer in the Graphics componentEPSS 0.3%CVE-2024-6610MEDIUMForm validation popups could block exiting full-screen modeEPSS 0.3%CVE-2026-16354HIGHInformation disclosure in the Graphics: ImageLib componentEPSS 0.3%CVE-2026-92027HIGHUse-after-free in the DOM: Streams componentEPSS 0.3%CVE-2026-92028HIGHUse-after-free in the DOM: Core & HTML componentEPSS 0.3%CVE-2026-92025HIGHUse-after-free in the DOM: Navigation componentEPSS 0.3%CVE-2026-92023HIGHUse-after-free in the XML componentEPSS 0.3%CVE-2026-92024HIGHUse-after-free in the SVG componentEPSS 0.3%CVE-2026-92029HIGHUse-after-free in the SVG componentEPSS 0.3%CVE-2026-92022HIGHUse-after-free in the DOM: HTML Parser componentEPSS 0.3%CVE-2026-57962MEDIUMDenial-of-service via malicious LDAP address-book serverEPSS 0.3%CVE-2023-23597—Logic bug in process allocation allowed to read arbitrary filesEPSS 0.3%CVE-2026-15719MEDIUMSite isolation issue in the DOM: Navigation componentEPSS 0.3%CVE-2025-14322HIGHSandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL componentEPSS 0.3%CVE-2017-7794—On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even though the sandbox expliciEPSS 0.3%CVE-2026-92069MEDIUMSpoofing issue in the DOM: Navigation componentEPSS 0.3%CVE-2020-12402—During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly iEPSS 0.3%CVE-2026-84139CRITICALClickjacking issue in the DOM: Events componentEPSS 0.3%