Vulnerabilities > Mozilla

DATE CVE VULNERABILITY TITLE RISK
2023-06-02 CVE-2023-25742 Unspecified vulnerability in Mozilla Firefox ESR
When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.
network
low complexity
mozilla
6.5
2023-06-02 CVE-2023-25743 Authentication Bypass by Spoofing vulnerability in Mozilla Firefox Focus
A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.<br>*This bug only affects Firefox Focus.
network
low complexity
mozilla CWE-290
7.5
2023-06-02 CVE-2023-25744 Out-of-bounds Write vulnerability in Mozilla Firefox ESR
Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7.
network
low complexity
mozilla CWE-787
8.8
2023-06-02 CVE-2023-25745 Out-of-bounds Write vulnerability in Mozilla Firefox
Memory safety bugs present in Firefox 109.
network
low complexity
mozilla CWE-787
8.8
2023-06-02 CVE-2023-25746 Out-of-bounds Write vulnerability in Mozilla Firefox ESR
Memory safety bugs present in Firefox ESR 102.7.
network
low complexity
mozilla CWE-787
8.8
2023-06-02 CVE-2023-25748 Unspecified vulnerability in Mozilla Firefox
By displaying a prompt with a long description, the fullscreen notification could have been hidden, resulting in potential user confusion or spoofing attacks.
network
low complexity
mozilla
4.3
2023-06-02 CVE-2023-25749 Unspecified vulnerability in Mozilla Firefox
Android applications with unpatched vulnerabilities can be launched from a browser using Intents, exposing users to these vulnerabilities.
network
low complexity
mozilla
4.3
2023-06-02 CVE-2023-25750 Exposure of Resource to Wrong Sphere vulnerability in Mozilla Firefox
Under certain circumstances, a ServiceWorker's offline cache may have leaked to the file system when using private browsing mode.
network
low complexity
mozilla CWE-668
4.3
2023-06-02 CVE-2023-25751 Unspecified vulnerability in Mozilla Firefox
Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly.
network
low complexity
mozilla
6.5
2023-06-02 CVE-2023-25752 Unspecified vulnerability in Mozilla Firefox
When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds.
network
low complexity
mozilla
6.5