10.0

DATE	CVE	VULNERABILITY TITLE	RISK
2024-01-23	CVE-2024-0746	A Linux user opening the print preview dialog could have caused the browser to crash. network low complexity mozilla debian	6.5
2024-01-23	CVE-2024-0747	When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security Policy could have overridden the child Content Security Policy. network low complexity mozilla debian	6.5
2024-01-23	CVE-2024-0749	Origin Validation Error vulnerability in multiple products A phishing site could have repurposed an `about:` dialog to show phishing content with an incorrect origin in the address bar. network low complexity mozilla debian CWE-346	4.3
2024-01-23	CVE-2024-0750	A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions. network low complexity mozilla debian	8.8
2024-01-23	CVE-2024-0751	Improper Privilege Management vulnerability in multiple products A malicious devtools extension could have been used to escalate privileges. network low complexity mozilla debian CWE-269	8.8
2024-01-23	CVE-2024-0753	In specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. network low complexity mozilla debian	6.5
2024-01-23	CVE-2024-0755	Memory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. network low complexity mozilla debian	8.8
2024-01-19	CVE-2023-50447	Code Injection vulnerability in multiple products Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than CVE-2022-22817 (which was about the expression parameter). network high complexity python debian CWE-94	8.1
2024-01-18	CVE-2023-6816	Out-of-bounds Write vulnerability in multiple products A flaw was found in X.Org server. network low complexity x-org fedoraproject redhat debian CWE-787 critical	9.8
2024-01-16	CVE-2024-20952	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). network high complexity oracle netapp debian	7.4