Vulnerabilities > Mozilla > Firefox > 110.1
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-06-02 | CVE-2023-28162 | Incorrect Type Conversion or Cast vulnerability in Mozilla Firefox While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type. | 8.8 |
| 2023-06-02 | CVE-2023-28163 | Unspecified vulnerability in Mozilla Firefox When downloading files through the Save As dialog on Windows with suggested filenames containing environment variable names, Windows would have resolved those in the context of the current user. | 6.5 |
| 2023-06-02 | CVE-2023-28164 | Unspecified vulnerability in Mozilla Firefox Dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and website spoofing attacks. | 6.5 |
| 2023-06-02 | CVE-2023-28176 | Out-of-bounds Write vulnerability in Mozilla Firefox Memory safety bugs present in Firefox 110 and Firefox ESR 102.8. | 8.8 |
| 2023-06-02 | CVE-2023-28177 | Out-of-bounds Write vulnerability in Mozilla Firefox Memory safety bugs present in Firefox 110. | 8.8 |
| 2023-06-02 | CVE-2023-29533 | Unspecified vulnerability in Mozilla products A website could have obscured the fullscreen notification by using a combination of <code>window.open</code>, fullscreen requests, <code>window.name</code> assignments, and <code>setInterval</code> calls. | 4.3 |
| 2023-06-02 | CVE-2023-29535 | Unspecified vulnerability in Mozilla products Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced. | 6.5 |
| 2023-06-02 | CVE-2023-29536 | Use After Free vulnerability in Mozilla products An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially exploitable crash. | 8.8 |
| 2023-06-02 | CVE-2023-29537 | Race Condition vulnerability in Mozilla Firefox and Focus Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. | 7.5 |
| 2023-06-02 | CVE-2023-29538 | Exposure of Resource to Wrong Sphere vulnerability in Mozilla Firefox and Focus Under specific circumstances a WebExtension may have received a <code>jar:file:///</code> URI instead of a <code>moz-extension:///</code> URI during a load request. | 4.3 |