Vulnerabilities > Mozilla > Firefox > 78.8.0
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-06-02 | CVE-2023-25744 | Out-of-bounds Write vulnerability in Mozilla Firefox ESR Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7. | 8.8 |
| 2023-06-02 | CVE-2023-25745 | Out-of-bounds Write vulnerability in Mozilla Firefox Memory safety bugs present in Firefox 109. | 8.8 |
| 2023-06-02 | CVE-2023-25750 | Exposure of Resource to Wrong Sphere vulnerability in Mozilla Firefox Under certain circumstances, a ServiceWorker's offline cache may have leaked to the file system when using private browsing mode. | 4.3 |
| 2023-06-02 | CVE-2023-25751 | Unspecified vulnerability in Mozilla Firefox Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. | 6.5 |
| 2023-06-02 | CVE-2023-25752 | Unspecified vulnerability in Mozilla Firefox When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds. | 6.5 |
| 2023-06-02 | CVE-2023-28159 | Unspecified vulnerability in Mozilla Firefox The fullscreen notification could have been hidden on Firefox for Android by using download popups, resulting in potential user confusion or spoofing attacks. | 4.3 |
| 2023-06-02 | CVE-2023-28160 | Unspecified vulnerability in Mozilla Firefox When following a redirect to a publicly accessible web extension file, the URL may have been translated to the actual local path, leaking potentially sensitive information. | 6.5 |
| 2023-06-02 | CVE-2023-28161 | Improper Preservation of Permissions vulnerability in Mozilla Firefox If temporary "one-time" permissions, such as the ability to use the Camera, were granted to a document loaded using a file: URL, that permission persisted in that tab for all other documents loaded from a file: URL. | 8.8 |
| 2023-06-02 | CVE-2023-28162 | Incorrect Type Conversion or Cast vulnerability in Mozilla Firefox While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type. | 8.8 |
| 2023-06-02 | CVE-2023-28163 | Unspecified vulnerability in Mozilla Firefox When downloading files through the Save As dialog on Windows with suggested filenames containing environment variable names, Windows would have resolved those in the context of the current user. | 6.5 |