Vulnerabilities > Mozilla > Firefox > 72.0.1

DATE CVE VULNERABILITY TITLE RISK
2020-03-02 CVE-2020-6798 Cross-site Scripting vulnerability in Mozilla Thunderbird
If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution when it should not be allowed.
network
low complexity
mozilla CWE-79
6.1
2020-03-02 CVE-2020-6797 Improper Input Validation vulnerability in Mozilla Firefox
By downloading a file with the .fileloc extension, a semi-privileged extension could launch an arbitrary application on the user's computer.
network
low complexity
mozilla CWE-20
4.3
2020-03-02 CVE-2020-6796 Out-of-bounds Write vulnerability in Mozilla Firefox
A content process could have modified shared memory relating to crash reporting information, crash itself, and cause an out-of-bound write.
network
low complexity
mozilla CWE-787
8.8