Vulnerabilities > Mozilla > Firefox > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-06-02 | CVE-2023-25749 | Unspecified vulnerability in Mozilla Firefox Android applications with unpatched vulnerabilities can be launched from a browser using Intents, exposing users to these vulnerabilities. | 4.3 |
| 2023-06-02 | CVE-2023-25750 | Exposure of Resource to Wrong Sphere vulnerability in Mozilla Firefox Under certain circumstances, a ServiceWorker's offline cache may have leaked to the file system when using private browsing mode. | 4.3 |
| 2023-06-02 | CVE-2023-25751 | Unspecified vulnerability in Mozilla Firefox Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. | 6.5 |
| 2023-06-02 | CVE-2023-25752 | Unspecified vulnerability in Mozilla Firefox When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds. | 6.5 |
| 2023-06-02 | CVE-2023-28159 | Unspecified vulnerability in Mozilla Firefox The fullscreen notification could have been hidden on Firefox for Android by using download popups, resulting in potential user confusion or spoofing attacks. | 4.3 |
| 2023-06-02 | CVE-2023-28160 | Unspecified vulnerability in Mozilla Firefox When following a redirect to a publicly accessible web extension file, the URL may have been translated to the actual local path, leaking potentially sensitive information. | 6.5 |
| 2023-06-02 | CVE-2023-28163 | Unspecified vulnerability in Mozilla Firefox When downloading files through the Save As dialog on Windows with suggested filenames containing environment variable names, Windows would have resolved those in the context of the current user. | 6.5 |
| 2023-06-02 | CVE-2023-28164 | Unspecified vulnerability in Mozilla Firefox Dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and website spoofing attacks. | 6.5 |
| 2023-06-02 | CVE-2023-29533 | Unspecified vulnerability in Mozilla products A website could have obscured the fullscreen notification by using a combination of <code>window.open</code>, fullscreen requests, <code>window.name</code> assignments, and <code>setInterval</code> calls. | 4.3 |
| 2023-06-02 | CVE-2023-29535 | Unspecified vulnerability in Mozilla products Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced. | 6.5 |