Vulnerabilidades em mozilla
2.105 resultadosAnálise Vexday
A Mozilla apresenta um perfil de risco baixo com apenas 3 vulnerabilidades catalogadas, nenhuma sob exploração ativa ou crítica. A fraqueza dominante identificada é CWE-400 (Uncontrolled Resource Consumption), que tipicamente afeta disponibilidade; a ausência de publicações recentes sugere que o risco atual não é imediato.
CVE-2026-0890MEDIUMSpoofing issue in the DOM: Copy & Paste and Drag & Drop componentEPSS 0.3%CVE-2024-10474CRITICALFocus was incorrectly allowing internal links to utilize the app scheme used for deeplinking, which could result in links potentially circumEPSS 0.3%CVE-2026-16410CRITICALJIT miscompilation in the JavaScript Engine: JIT componentEPSS 0.3%CVE-2025-5271MEDIUMDevtools' preview ignored CSP headersEPSS 0.3%CVE-2024-0953MEDIUMWhen a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before being navigated to the page specified in the cEPSS 0.3%CVE-2025-4092MEDIUMMemory safety bugs fixed in Firefox 138 and Thunderbird 138EPSS 0.3%CVE-2025-10529MEDIUMSame-origin policy bypass in the Layout componentEPSS 0.3%CVE-2026-12293CRITICALUse-after-free in the Graphics: WebGPU componentEPSS 0.3%CVE-2024-53976MEDIUMUnder certain circumstances, navigating to a webpage would result in the address missing from the location URL bar, making it unclear what tEPSS 0.3%CVE-2026-10701HIGHIncorrect boundary conditions in the Graphics: Text componentEPSS 0.3%CVE-2023-37455—The permission request prompt from the site in the background tab was overlaid on top of the site in the foreground tab. This vulnerability EPSS 0.3%CVE-2026-92021HIGHUse-after-free in the JavaScript Engine: JIT componentEPSS 0.3%CVE-2025-4085HIGHPotential information leakage and privilege escalation in UITour actorEPSS 0.3%CVE-2026-16393CRITICALIncorrect boundary conditions in the Graphics: WebGPU componentEPSS 0.3%CVE-2025-8039HIGHSearch terms persisted in URL barEPSS 0.3%CVE-2025-6433CRITICALWebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificateEPSS 0.3%CVE-2026-16371HIGHPrivilege escalation in the DOM: Navigation componentEPSS 0.3%CVE-2026-16372HIGHPrivilege escalation in the DOM: Content Processes componentEPSS 0.3%CVE-2026-86853MEDIUMRepeated external URL scheme launches could potentially cause a denial of service in Firefox for iOSEPSS 0.3%CVE-2022-3266MEDIUMAn out-of-bounds read can occur when decoding H264 video. This results in a potentially exploitable crash. This vulnerability affects FirefoEPSS 0.3%