Mozilla

Firefox

3462 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2024-7528

  • EPSS 0.52%
  • Veröffentlicht 06.08.2024 13:15:57
  • Zuletzt bearbeitet 12.08.2024 16:10:00

Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 128.1, and Thunderbird < 128.1.

6.5

CVE-2024-7529

  • EPSS 0.52%
  • Veröffentlicht 06.08.2024 13:15:57
  • Zuletzt bearbeitet 12.08.2024 16:09:09

The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and ...

8.8

CVE-2024-7530

  • EPSS 0.38%
  • Veröffentlicht 06.08.2024 13:15:57
  • Zuletzt bearbeitet 12.08.2024 16:09:56

Incorrect garbage collection interaction could have led to a use-after-free. This vulnerability affects Firefox < 129.

6.5

CVE-2024-7531

  • EPSS 0.43%
  • Veröffentlicht 06.08.2024 13:15:57
  • Zuletzt bearbeitet 19.03.2025 16:15:29

Calling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can result in plaintext on an Intel Sandy Bridge processor. In Firefox this only affects the QUIC header protection feature when the connection is using the C...

6.5

CVE-2024-7518

  • EPSS 0.51%
  • Veröffentlicht 06.08.2024 13:15:56
  • Zuletzt bearbeitet 29.10.2024 20:35:43

Select options could obscure the fullscreen notification dialog. This could be used by a malicious site to perform a spoofing attack. This vulnerability affects Firefox < 129, Firefox ESR < 128.1, and Thunderbird < 128.1.

9.8

CVE-2024-6611

  • EPSS 0.66%
  • Veröffentlicht 09.07.2024 15:15:13
  • Zuletzt bearbeitet 04.04.2025 14:42:22

A nested iframe, triggering a cross-site navigation, could send SameSite=Strict or Lax cookies. This vulnerability affects Firefox < 128 and Thunderbird < 128.

5.3

CVE-2024-6612

  • EPSS 0.5%
  • Veröffentlicht 09.07.2024 15:15:13
  • Zuletzt bearbeitet 04.04.2025 14:42:13

CSP violations generated links in the console tab of the developer tools, pointing to the violating resource. This caused a DNS prefetch which leaked that a CSP violation happened. This vulnerability affects Firefox < 128 and Thunderbird < 128.

5.5

CVE-2024-6613

  • EPSS 0.19%
  • Veröffentlicht 09.07.2024 15:15:13
  • Zuletzt bearbeitet 04.04.2025 14:42:07

The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox < 128 and Thunderbird < 128.

4.3

CVE-2024-6614

  • EPSS 0.37%
  • Veröffentlicht 09.07.2024 15:15:13
  • Zuletzt bearbeitet 04.04.2025 14:42:01

The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox < 128 and Thunderbird < 128.

8.8

CVE-2024-6615

  • EPSS 0.45%
  • Veröffentlicht 09.07.2024 15:15:13
  • Zuletzt bearbeitet 04.04.2025 14:41:55

Memory safety bugs present in Firefox 127 and Thunderbird 127. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Fi...