Mozilla

Firefox

2920 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2007-5341

  • EPSS 1.63%
  • Veröffentlicht 18.08.2017 20:29:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

Remote code execution in the Venkman script debugger in Mozilla Firefox before 2.0.0.8.

7.5

CVE-2016-10196

Exploit
  • EPSS 0.81%
  • Veröffentlicht 15.03.2017 15:59:00
  • Zuletzt bearbeitet 25.11.2025 17:50:16

Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in the ip_as_string ar...

8.8

CVE-2016-5283

  • EPSS 0.1%
  • Veröffentlicht 22.09.2016 22:59:18
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Mozilla Firefox before 49.0 allows remote attackers to bypass the Same Origin Policy via a crafted fragment identifier in the SRC attribute of an IFRAME element, leading to insufficient restrictions on link-color information after a document is resiz...

7.4

CVE-2016-5284

  • EPSS 0.46%
  • Veröffentlicht 22.09.2016 22:59:18
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 rely on unintended expiration dates for Preloaded Public Key Pinning, which allows man-in-the-middle attackers to spoof add-on updates by leveraging possession of an X....

6.5

CVE-2016-5282

  • EPSS 0.45%
  • Veröffentlicht 22.09.2016 22:59:16
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Mozilla Firefox before 49.0 does not properly restrict the scheme in favicon requests, which might allow remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by a jar: URL for a favicon resource.

9.8

CVE-2016-5281

  • EPSS 1.74%
  • Veröffentlicht 22.09.2016 22:59:15
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Use-after-free vulnerability in the DOMSVGLength class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to execute arbitrary code by leveraging improper interaction between JavaScript code a...

9.8

CVE-2016-5280

  • EPSS 1.7%
  • Veröffentlicht 22.09.2016 22:59:14
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Use-after-free vulnerability in the mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to execute arbitrary code via bidirec...

4.3

CVE-2016-5279

  • EPSS 0.4%
  • Veröffentlicht 22.09.2016 22:59:13
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Mozilla Firefox before 49.0 allows user-assisted remote attackers to obtain sensitive full-pathname information during a local-file drag-and-drop operation via crafted JavaScript code.

8.8

CVE-2016-5278

  • EPSS 1.36%
  • Veröffentlicht 22.09.2016 22:59:12
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Heap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to execute arbitrary code via a crafted image data that is mishandled ...

9.8

CVE-2016-5277

  • EPSS 1.35%
  • Veröffentlicht 22.09.2016 22:59:11
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Use-after-free vulnerability in the nsRefreshDriver::Tick function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corrup...