Vulnerabilities > Mozilla > Firefox ESR > 60.6.0

DATE CVE VULNERABILITY TITLE RISK
2019-07-23 CVE-2019-11693 Out-of-bounds Write vulnerability in Mozilla Firefox
The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux.
network
low complexity
mozilla CWE-787
critical
9.8
2019-07-23 CVE-2019-11692 Use After Free vulnerability in Mozilla Firefox
A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash.
network
low complexity
mozilla CWE-416
critical
9.8
2019-07-23 CVE-2019-11691 Use After Free vulnerability in Mozilla Thunderbird
A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed.
network
low complexity
mozilla CWE-416
critical
9.8
2019-04-26 CVE-2019-9813 Type Confusion vulnerability in Mozilla Thunderbird
Incorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arbitrary memory read and write.
network
low complexity
mozilla CWE-843
8.8
2019-04-26 CVE-2019-9810 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow.
network
low complexity
mozilla redhat CWE-119
8.8