Vulnerabilities > Mozilla > Firefox > 37.0.1

DATE CVE VULNERABILITY TITLE RISK
2020-08-10 CVE-2020-15655 A redirected HTTP request which is observed or modified through a web extension could bypass existing CORS checks, leading to potential disclosure of cross-origin information. 4.3
2020-08-10 CVE-2020-15654 Infinite Loop vulnerability in multiple products
When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting with the user interface, when they are not.
network
low complexity
mozilla canonical CWE-835
6.5
2020-08-10 CVE-2020-15653 An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links.
network
low complexity
mozilla canonical
6.5
2020-08-10 CVE-2020-15652 Origin Validation Error vulnerability in multiple products
By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect.
network
low complexity
mozilla canonical CWE-346
6.5
2020-08-10 CVE-2020-15648 Improper Restriction of Rendered UI Layers or Frames vulnerability in Mozilla Firefox
Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header.
network
mozilla CWE-1021
4.3
2020-08-10 CVE-2020-15647 Information Exposure vulnerability in Mozilla Firefox
A Content Provider in Firefox for Android allowed local files accessible by the browser to be read by a remote webpage, leading to sensitive data disclosure, including cookies for other origins.
network
low complexity
mozilla CWE-200
5.0
2020-07-09 CVE-2020-12426 Out-of-bounds Write vulnerability in multiple products
Mozilla developers and community members reported memory safety bugs present in Firefox 77.
network
mozilla opensuse CWE-787
critical
9.3
2020-07-09 CVE-2020-12425 Out-of-bounds Read vulnerability in Mozilla Firefox
Due to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read could have occurred, leading to potential information disclosure.
network
low complexity
mozilla CWE-125
6.5
2020-07-09 CVE-2020-12423 Uncontrolled Search Path Element vulnerability in Mozilla Firefox
When the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one was placed in a folder in the user's %PATH%, Firefox may have loaded the DLL, leading to arbitrary code execution.
local
low complexity
mozilla CWE-427
7.8
2020-07-09 CVE-2020-12422 Out-of-bounds Write vulnerability in multiple products
In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, resulting in an out of bounds write, memory corruption, and a potentially exploitable crash.
network
low complexity
mozilla opensuse CWE-787
8.8