Vulnerabilities > Mozilla > Firefox > 16.2

DATE CVE VULNERABILITY TITLE RISK
2021-03-31 CVE-2021-23984 Authentication Bypass by Spoofing vulnerability in Mozilla Firefox
A malicious extension could have opened a popup window lacking an address bar.
network
mozilla CWE-290
4.3
2021-03-31 CVE-2021-23983 Out-of-bounds Write vulnerability in Mozilla Firefox
By causing a transition on a parent node by removing a CSS rule, an invalid property for a marker could have been applied, resulting in memory corruption and a potentially exploitable crash.
network
mozilla CWE-787
4.3
2021-03-31 CVE-2021-23982 Inadequate Encryption Strength vulnerability in Mozilla Firefox
Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on the user's local machine utilizing WebRTC connections.
network
mozilla CWE-326
4.3
2021-03-31 CVE-2021-23981 Out-of-bounds Write vulnerability in Mozilla Firefox
A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash.
network
mozilla CWE-787
5.8
2021-02-26 CVE-2021-23979 Out-of-bounds Write vulnerability in Mozilla Firefox
Mozilla developers reported memory safety bugs present in Firefox 85.
network
mozilla CWE-787
6.8
2021-02-26 CVE-2021-23978 Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7.
network
mozilla debian
6.8
2021-02-26 CVE-2021-23965 Out-of-bounds Write vulnerability in Mozilla Firefox
Mozilla developers reported memory safety bugs present in Firefox 84.
network
mozilla CWE-787
6.8
2021-02-26 CVE-2021-23964 Out-of-bounds Write vulnerability in Mozilla Firefox
Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6.
network
mozilla CWE-787
6.8
2021-02-26 CVE-2021-23963 Improper Preservation of Permissions vulnerability in Mozilla Firefox
When sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC sharing state in the user interface, leading to loss of control over the currently granted permission.
network
mozilla CWE-281
4.3
2021-02-26 CVE-2021-23962 Unspecified vulnerability in Mozilla Firefox
Incorrect use of the '<RowCountChanged>' method could have led to a user-after-poison and a potentially exploitable crash.
network
mozilla
6.8