Mozilla

Firefox

2867 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2018-18510

  • EPSS 0.25%
  • Published 26.04.2019 17:29:00
  • Last modified 21.11.2024 03:56:04

The about:crashcontent and about:crashparent pages can be triggered by web content. These pages are used to crash the loaded page or the browser for test purposes. This issue allows for a non-persistent denial of service (DOS) attack by a malicious s...

4.3

CVE-2018-18511

  • EPSS 0.83%
  • Published 26.04.2019 17:29:00
  • Last modified 21.11.2024 03:56:04

Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox < 65.0....

6.1

CVE-2018-5124

  • EPSS 0.56%
  • Published 26.04.2019 17:29:00
  • Last modified 21.11.2024 04:08:09

Unsanitized output in the browser UI leaves HTML tags in place and can result in arbitrary code execution in Firefox before version 58.0.1.

7.5

CVE-2018-5179

  • EPSS 0.35%
  • Published 26.04.2019 14:29:00
  • Last modified 21.11.2024 04:08:16

A service worker can send the activate event on itself periodically which allows it to run perpetually, allowing it to monitor activity by users. Affects all versions prior to Firefox 60.

8.1

CVE-2017-7771

Exploit
  • EPSS 0.44%
  • Published 15.04.2019 12:31:08
  • Last modified 21.11.2024 03:32:37

Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.

8.8

CVE-2017-7773

Exploit
  • EPSS 0.48%
  • Published 15.04.2019 12:31:08
  • Last modified 21.11.2024 03:32:37

Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor.

9.1

CVE-2017-7774

Exploit
  • EPSS 0.58%
  • Published 15.04.2019 12:31:08
  • Last modified 21.11.2024 03:32:38

Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.

8.1

CVE-2017-7776

Exploit
  • EPSS 0.48%
  • Published 15.04.2019 12:31:08
  • Last modified 21.11.2024 03:32:38

Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph.

8.8

CVE-2017-7777

Exploit
  • EPSS 0.52%
  • Published 15.04.2019 12:31:08
  • Last modified 21.11.2024 03:32:38

Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph function.

8.8

CVE-2017-7772

Exploit
  • EPSS 0.48%
  • Published 12.04.2019 18:29:00
  • Last modified 21.11.2024 03:32:37

Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.