Vulnerabilities > Mozilla > Critical

DATE CVE VULNERABILITY TITLE RISK
2023-06-19 CVE-2023-25736 Unspecified vulnerability in Mozilla Firefox
An invalid downcast from `nsHTMLDocument` to `nsIContent` could have lead to undefined behavior.
network
low complexity
mozilla
critical
9.8
2023-06-19 CVE-2023-29534 Unspecified vulnerability in Mozilla Firefox and Firefox Focus
Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android.
network
low complexity
mozilla
critical
9.1
2023-06-19 CVE-2023-29542 Unspecified vulnerability in Mozilla Firefox
A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk with .download.
network
low complexity
mozilla
critical
9.8
2023-06-19 CVE-2023-34416 Out-of-bounds Write vulnerability in Mozilla Firefox
Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12.
network
low complexity
mozilla CWE-787
critical
9.8
2023-06-19 CVE-2023-34417 Out-of-bounds Write vulnerability in Mozilla Firefox
Memory safety bugs present in Firefox 113.
network
low complexity
mozilla CWE-787
critical
9.8
2023-06-19 CVE-2023-29531 Out-of-bounds Write vulnerability in Mozilla Firefox
An attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory corruption and a potentially exploitable crash. *This bug only affects Firefox and Thunderbird for macOS.
network
low complexity
mozilla CWE-787
critical
9.8
2023-06-19 CVE-2023-32216 Out-of-bounds Write vulnerability in Mozilla Firefox
Memory safety bugs present in Firefox 112.
network
low complexity
mozilla CWE-787
critical
9.8
2023-02-16 CVE-2021-43529 Out-of-bounds Write vulnerability in Mozilla Thunderbird
Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages.
network
low complexity
mozilla CWE-787
critical
9.8
2022-12-22 CVE-2021-4129 Out-of-bounds Write vulnerability in Mozilla Firefox ESR
Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, and Masayuki Nakano reported memory safety bugs present in Firefox 94.
network
low complexity
mozilla CWE-787
critical
9.8
2022-12-22 CVE-2022-22759 Unspecified vulnerability in Mozilla Firefox
If a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently appended an element to the iframe's document that e.g.
network
low complexity
mozilla
critical
9.6