115.9.0

DATE	CVE	VULNERABILITY TITLE	RISK
2024-05-14	CVE-2024-4367	A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. network low complexity mozilla debian open-xchange	8.8
2024-05-14	CVE-2024-4777	Out-of-bounds Write vulnerability in multiple products Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. network low complexity mozilla debian CWE-787	8.8
2024-04-16	CVE-2024-3863	Unspecified vulnerability in Mozilla Thunderbird The executable file warning was not presented when downloading .xrm-ms files. network low complexity mozilla critical	9.8
2024-03-19	CVE-2024-2613	Improper Restriction of Rendered UI Layers or Frames vulnerability in Mozilla Firefox Data was not properly sanitized when decoding a QUIC ACK frame; this could have led to unrestricted memory consumption and a crash. network low complexity mozilla CWE-1021	7.5
2024-01-23	CVE-2024-0741	Out-of-bounds Write vulnerability in multiple products An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentially exploitable crash. network low complexity mozilla debian CWE-787	6.5
2024-01-23	CVE-2024-0742	It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an incorrect timestamp used to prevent input after page load. network low complexity mozilla debian	4.3
2024-01-23	CVE-2024-0743	Unchecked Return Value vulnerability in Mozilla Firefox An unchecked return value in TLS handshake code could have caused a potentially exploitable crash. network low complexity mozilla CWE-252	7.5
2024-01-23	CVE-2024-0744	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Mozilla Firefox In some circumstances, JIT compiled code could have dereferenced a wild pointer value. network low complexity mozilla CWE-119	7.5
2024-01-23	CVE-2024-0745	Out-of-bounds Write vulnerability in Mozilla Firefox The WebAudio `OscillatorNode` object was susceptible to a stack buffer overflow. network low complexity mozilla CWE-787	8.8
2024-01-23	CVE-2024-0746	A Linux user opening the print preview dialog could have caused the browser to crash. network low complexity mozilla debian	6.5