Vulnerabilities > Mozilla > Firefox > Medium

DATE CVE VULNERABILITY TITLE RISK
2018-06-11 CVE-2016-9071 7PK - Security Features vulnerability in Mozilla Firefox
Content Security Policy combined with HTTP to HTTPS redirection can be used by malicious server to verify whether a known site is within a user's browser history.
network
low complexity
mozilla CWE-254
5.3
2018-06-11 CVE-2016-9067 Use After Free vulnerability in Mozilla Firefox
Two use-after-free errors during DOM operations resulting in potentially exploitable crashes.
network
low complexity
mozilla CWE-416
6.5
2018-06-11 CVE-2016-9064 Improper Certificate Validation vulnerability in Mozilla Firefox
Add-on updates failed to verify that the add-on ID inside the signed package matched the ID of the add-on being updated.
network
high complexity
mozilla CWE-295
5.9
2018-06-11 CVE-2016-5298 Improper Input Validation vulnerability in Mozilla Firefox
A mechanism where disruption of the loading of a new web page can cause the previous page's favicon and SSL indicator to not be reset when the new page is loaded.
network
low complexity
mozilla CWE-20
6.5
2018-06-11 CVE-2016-5294 Improper Input Validation vulnerability in Mozilla Firefox
The Mozilla Updater can be made to choose an arbitrary target working directory for output files resulting from the update process.
local
low complexity
mozilla CWE-20
5.5
2018-06-11 CVE-2016-5293 Improper Input Validation vulnerability in multiple products
When the Mozilla Updater is run, if the Updater's log file in the working directory points to a hardlink, data can be appended to an arbitrary local file.
local
low complexity
mozilla debian CWE-20
5.5
2018-06-11 CVE-2016-5292 Improper Input Validation vulnerability in Mozilla Firefox
During URL parsing, a maliciously crafted URL can cause a potentially exploitable crash.
network
low complexity
mozilla CWE-20
6.5
2018-06-11 CVE-2016-5291 Improper Input Validation vulnerability in multiple products
A same-origin policy bypass with local shortcut files to load arbitrary local content from disk.
local
low complexity
mozilla debian CWE-20
5.5
2018-06-11 CVE-2016-5288 Information Exposure vulnerability in Mozilla Firefox
Web content could access information in the HTTP cache if e10s is disabled.
network
high complexity
mozilla CWE-200
5.9
2018-05-04 CVE-2018-10229 Information Exposure vulnerability in multiple products
A hardware vulnerability in GPU memory modules allows attackers to accelerate micro-architectural attacks through the use of the JavaScript WebGL API.
network
high complexity
google mozilla lg CWE-200
4.8