Vulnerabilities > Mozilla > Firefox > 60.2.1

DATE CVE VULNERABILITY TITLE RISK
2018-10-18 CVE-2018-12361 Integer Overflow or Wraparound vulnerability in multiple products
An integer overflow can occur in the SwizzleData code while calculating buffer sizes.
network
low complexity
mozilla debian canonical CWE-190
8.8
2018-10-18 CVE-2018-12360 Use After Free vulnerability in multiple products
A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by focusing that element.
network
low complexity
redhat debian canonical mozilla CWE-416
8.8
2018-10-18 CVE-2018-12359 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dynamically, causing data to be written outside of the currently computed boundaries.
network
low complexity
redhat debian canonical mozilla CWE-119
8.8
2018-10-18 CVE-2018-12358 Information Exposure vulnerability in multiple products
Service workers can use redirection to avoid the tainting of cross-origin resources in some instances, allowing a malicious site to read responses which are supposed to be opaque.
network
low complexity
mozilla canonical CWE-200
4.3