Mozilla

Firefox

3041 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2024-3862

  • EPSS 0.14%
  • Veröffentlicht 16.04.2024 16:15:08
  • Zuletzt bearbeitet 31.03.2025 16:45:53

The MarkStack assignment operator, part of the JavaScript engine, could access uninitialized memory if it were used in a self-assignment. This vulnerability affects Firefox < 125.

9.8

CVE-2024-3863

  • EPSS 0.34%
  • Veröffentlicht 16.04.2024 16:15:08
  • Zuletzt bearbeitet 28.03.2025 19:15:22

The executable file warning was not presented when downloading .xrm-ms files. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.* This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Th...

8.1

CVE-2024-3864

Exploit
  • EPSS 1.07%
  • Veröffentlicht 16.04.2024 16:15:08
  • Zuletzt bearbeitet 01.04.2025 17:39:30

Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects ...

8.1

CVE-2024-3865

  • EPSS 0.28%
  • Veröffentlicht 16.04.2024 16:15:08
  • Zuletzt bearbeitet 01.05.2025 15:40:32

Memory safety bugs present in Firefox 124. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 125.

7.5

CVE-2024-31392

  • EPSS 0.48%
  • Veröffentlicht 03.04.2024 16:15:07
  • Zuletzt bearbeitet 09.04.2025 14:12:48

If an insecure element was added to a page after a delay, Firefox would not replace the secure icon with a mixed content security status This vulnerability affects Firefox for iOS < 124.

4.3

CVE-2024-31393

  • EPSS 0.14%
  • Veröffentlicht 03.04.2024 16:15:07
  • Zuletzt bearbeitet 09.04.2025 14:13:19

Dragging Javascript URLs to the address bar could cause them to be loaded, bypassing restrictions and security protections This vulnerability affects Firefox for iOS < 124.

9.8

CVE-2024-29943

  • EPSS 51.07%
  • Veröffentlicht 22.03.2024 13:15:07
  • Zuletzt bearbeitet 01.04.2025 16:56:59

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination. This vulnerability affects Firefox < 124.0.1.

8.4

CVE-2024-29944

  • EPSS 1.41%
  • Veröffentlicht 22.03.2024 13:15:07
  • Zuletzt bearbeitet 01.04.2025 16:30:37

An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution in the parent process. Note: This vulnerability affects Desktop Firefox only, it does not affect mobile versions of Firefox. This...

5.5

CVE-2024-2611

Exploit
  • EPSS 0.24%
  • Veröffentlicht 19.03.2024 12:15:09
  • Zuletzt bearbeitet 01.04.2025 16:26:40

A missing delay on when pointer lock was used could have allowed a malicious page to trick a user into granting permissions. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.

8.1

CVE-2024-2612

  • EPSS 1.14%
  • Veröffentlicht 19.03.2024 12:15:09
  • Zuletzt bearbeitet 17.07.2025 13:35:05

If an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have triggered a crash or potentially be leveraged to achieve code execution. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird <...