Vulnerabilities > Mozilla > Firefox > 129

DATE CVE VULNERABILITY TITLE RISK
2024-09-03 CVE-2024-8388 Unspecified vulnerability in Mozilla Firefox
Multiple prompts and panels from both Firefox and the Android OS could be used to obscure the notification announcing the transition to fullscreen mode after the fix for CVE-2023-6870 in Firefox 121.
network
low complexity
mozilla
5.3
2024-08-06 CVE-2024-7520 Type Confusion vulnerability in Mozilla Firefox
A type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code execution.
network
low complexity
mozilla CWE-843
8.8
2024-08-06 CVE-2024-7524 Cross-site Scripting vulnerability in Mozilla Firefox
Firefox adds web-compatibility shims in place of some tracking scripts blocked by Enhanced Tracking Protection.
network
low complexity
mozilla CWE-79
6.1
2024-08-06 CVE-2024-7527 Use After Free vulnerability in Mozilla Firefox
Unexpected marking work at the start of sweeping could have led to a use-after-free.
network
low complexity
mozilla CWE-416
8.8
2024-08-06 CVE-2024-7531 Unspecified vulnerability in Mozilla Firefox
Calling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can result in plaintext on an Intel Sandy Bridge processor.
network
low complexity
mozilla
6.5