Vulnerabilities > Mozilla > Firefox > 96.0
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-06-02 | CVE-2023-25738 | Out-of-bounds Read vulnerability in Mozilla Firefox Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.<br>*This bug only affects Firefox on Windows. | 6.5 |
| 2023-06-02 | CVE-2023-25739 | Use After Free vulnerability in Mozilla Firefox ESR Module load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in <code>ScriptLoadContext</code>. | 8.8 |
| 2023-06-02 | CVE-2023-25740 | Unspecified vulnerability in Mozilla Firefox After downloading a Windows <code>.scf</code> script from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system. | 8.8 |
| 2023-06-02 | CVE-2023-25741 | Unspecified vulnerability in Mozilla Firefox When dragging and dropping an image cross-origin, the image's size could potentially be leaked. | 6.5 |
| 2023-06-02 | CVE-2023-25742 | Unspecified vulnerability in Mozilla Firefox ESR When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash. | 6.5 |
| 2023-06-02 | CVE-2023-25744 | Out-of-bounds Write vulnerability in Mozilla Firefox ESR Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7. | 8.8 |
| 2023-06-02 | CVE-2023-25745 | Out-of-bounds Write vulnerability in Mozilla Firefox Memory safety bugs present in Firefox 109. | 8.8 |
| 2023-06-02 | CVE-2023-25750 | Exposure of Resource to Wrong Sphere vulnerability in Mozilla Firefox Under certain circumstances, a ServiceWorker's offline cache may have leaked to the file system when using private browsing mode. | 4.3 |
| 2023-06-02 | CVE-2023-25751 | Unspecified vulnerability in Mozilla Firefox Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. | 6.5 |
| 2023-06-02 | CVE-2023-25752 | Unspecified vulnerability in Mozilla Firefox When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds. | 6.5 |