Mozilla

Firefox

2867 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2015-7327

Exploit
  • EPSS 0.4%
  • Published 24.09.2015 04:59:29
  • Last modified 12.04.2025 10:46:40

Mozilla Firefox before 41.0 does not properly restrict the availability of High Resolution Time API times, which allows remote attackers to track last-level cache access, and consequently obtain sensitive information, via crafted JavaScript code that...

7.5

CVE-2015-7180

  • EPSS 1.54%
  • Published 24.09.2015 04:59:28
  • Last modified 12.04.2025 10:46:40

The ReadbackResultWriterD3D11::Run function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 misinterprets the return value of a function call, which might allow remote attackers to cause a denial of service (memory corruption and appl...

7.5

CVE-2015-7179

  • EPSS 2.19%
  • Published 24.09.2015 04:59:26
  • Last modified 12.04.2025 10:46:40

The VertexBufferInterface::reserveVertexSpace function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, incorrectly allocates memory for shader attribute arrays, which allows remote attackers to...

7.5

CVE-2015-7178

  • EPSS 2.22%
  • Published 24.09.2015 04:59:25
  • Last modified 12.04.2025 10:46:40

The ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, mishandles shader access, which allows remote attackers to execute arbitrary code or cause a denial of...

7.5

CVE-2015-7176

  • EPSS 2.57%
  • Published 24.09.2015 04:59:24
  • Last modified 12.04.2025 10:46:40

The AnimationThread function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 uses an incorrect argument to the sscanf function, which might allow remote attackers to cause a denial of service (stack-based buffer overflow and applicati...

7.5

CVE-2015-7177

  • EPSS 1.54%
  • Published 24.09.2015 04:59:24
  • Last modified 12.04.2025 10:46:40

The InitTextures function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vector...

7.5

CVE-2015-7175

  • EPSS 1.54%
  • Published 24.09.2015 04:59:23
  • Last modified 12.04.2025 10:46:40

The XULContentSinkImpl::AddText function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via...

7.5

CVE-2015-7174

  • EPSS 1.54%
  • Published 24.09.2015 04:59:22
  • Last modified 12.04.2025 10:46:40

The nsAttrAndChildArray::GrowBy function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via...

7.5

CVE-2015-4522

  • EPSS 1.54%
  • Published 24.09.2015 04:59:21
  • Last modified 12.04.2025 10:46:40

The nsUnicodeToUTF8::GetMaxLength function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact v...

7.5

CVE-2015-4521

  • EPSS 1.54%
  • Published 24.09.2015 04:59:20
  • Last modified 12.04.2025 10:46:40

The ConvertDialogOptions function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknow...