Vulnerabilities > Mozilla > Firefox > 3.0.7

DATE CVE VULNERABILITY TITLE RISK
2021-02-26 CVE-2021-23958 Exposure of Resource to Wrong Sphere vulnerability in Mozilla Firefox
The browser could have been confused into transferring a screen sharing state into another tab, which would leak unintended information.
network
mozilla CWE-668
4.3
2021-02-26 CVE-2021-23956 Unspecified vulnerability in Mozilla Firefox
An ambiguous file picker design could have confused users who intended to select and upload a single file into uploading a whole directory.
network
mozilla
4.3
2021-02-26 CVE-2021-23955 Improper Restriction of Rendered UI Layers or Frames vulnerability in Mozilla Firefox
The browser could have been confused into transferring a pointer lock state into another tab, which could have lead to clickjacking attacks.
network
mozilla CWE-1021
4.3
2021-02-26 CVE-2021-23954 Type Confusion vulnerability in Mozilla Firefox
Using the new logical assignment operators in a JavaScript switch statement could have caused a type confusion, leading to a memory corruption and a potentially exploitable crash.
network
mozilla CWE-843
6.8
2021-02-26 CVE-2021-23953 Unspecified vulnerability in Mozilla Firefox
If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin information, when said information is served as chunked data.
network
mozilla
4.3
2021-02-26 CVE-2021-23975 Missing Authorization vulnerability in Mozilla Firefox
The developer page about:memory has a Measure function for exploring what object types the browser has allocated and their sizes.
network
mozilla CWE-862
4.3
2021-02-26 CVE-2021-23974 Unspecified vulnerability in Mozilla Firefox
The DOMParser API did not properly process '<noscript>' elements for escaping.
network
mozilla
4.3
2021-02-26 CVE-2021-23973 Information Exposure Through an Error Message vulnerability in multiple products
When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource.
4.3
2021-02-26 CVE-2021-23972 Unspecified vulnerability in Mozilla Firefox
One phishing tactic on the web is to provide a link with HTTP Auth.
network
mozilla
6.8
2021-02-26 CVE-2021-23971 Unspecified vulnerability in Mozilla Firefox
When processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the redirect's Referrer-Policy.
network
mozilla
4.3