Vulnerabilities > Mozilla

DATE CVE VULNERABILITY TITLE RISK
2024-09-03 CVE-2024-8388 Unspecified vulnerability in Mozilla Firefox
Multiple prompts and panels from both Firefox and the Android OS could be used to obscure the notification announcing the transition to fullscreen mode after the fix for CVE-2023-6870 in Firefox 121.
network
low complexity
mozilla
5.3
2024-09-03 CVE-2024-8389 Out-of-bounds Write vulnerability in Mozilla Firefox 129.0
Memory safety bugs present in Firefox 129.
network
low complexity
mozilla CWE-787
critical
9.8
2024-08-06 CVE-2024-43111 Cross-site Scripting vulnerability in Mozilla Firefox
Long pressing on a download link could potentially allow Javascript commands to be executed within the browser This vulnerability affects Firefox for iOS < 129.
network
low complexity
mozilla CWE-79
6.1
2024-08-06 CVE-2024-43112 Cross-site Scripting vulnerability in Mozilla Firefox
Long pressing on a download link could potentially provide a means for cross-site scripting This vulnerability affects Firefox for iOS < 129.
network
low complexity
mozilla CWE-79
6.1
2024-08-06 CVE-2024-43113 Cross-site Scripting vulnerability in Mozilla Firefox
The contextual menu for links could provide an opportunity for cross-site scripting attacks This vulnerability affects Firefox for iOS < 129.
network
low complexity
mozilla CWE-79
6.1
2024-08-06 CVE-2024-7518 Unspecified vulnerability in Mozilla Firefox
Select options could obscure the fullscreen notification dialog.
network
low complexity
mozilla
6.5
2024-08-06 CVE-2024-7519 Out-of-bounds Write vulnerability in Mozilla Firefox
Insufficient checks when processing graphics shared memory could have led to memory corruption.
network
low complexity
mozilla CWE-787
critical
9.6
2024-08-06 CVE-2024-7520 Type Confusion vulnerability in Mozilla Firefox
A type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code execution.
network
low complexity
mozilla CWE-843
8.8
2024-08-06 CVE-2024-7521 Improper Handling of Exceptional Conditions vulnerability in Mozilla Firefox
Incomplete WebAssembly exception handing could have led to a use-after-free.
network
low complexity
mozilla CWE-755
8.8
2024-08-06 CVE-2024-7522 Out-of-bounds Read vulnerability in Mozilla Firefox
Editor code failed to check an attribute value.
network
low complexity
mozilla CWE-125
8.8