Vulnerabilities > Mozilla > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-06-02 CVE-2023-25738 Out-of-bounds Read vulnerability in Mozilla Firefox
Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.<br>*This bug only affects Firefox on Windows.
network
low complexity
mozilla CWE-125
6.5
2023-06-02 CVE-2023-25741 Unspecified vulnerability in Mozilla Firefox
When dragging and dropping an image cross-origin, the image's size could potentially be leaked.
network
low complexity
mozilla
6.5
2023-06-02 CVE-2023-25742 Unspecified vulnerability in Mozilla Firefox ESR
When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.
network
low complexity
mozilla
6.5
2023-06-02 CVE-2023-25748 Unspecified vulnerability in Mozilla Firefox
By displaying a prompt with a long description, the fullscreen notification could have been hidden, resulting in potential user confusion or spoofing attacks.
network
low complexity
mozilla
4.3
2023-06-02 CVE-2023-25749 Unspecified vulnerability in Mozilla Firefox
Android applications with unpatched vulnerabilities can be launched from a browser using Intents, exposing users to these vulnerabilities.
network
low complexity
mozilla
4.3
2023-06-02 CVE-2023-25750 Exposure of Resource to Wrong Sphere vulnerability in Mozilla Firefox
Under certain circumstances, a ServiceWorker's offline cache may have leaked to the file system when using private browsing mode.
network
low complexity
mozilla CWE-668
4.3
2023-06-02 CVE-2023-25751 Unspecified vulnerability in Mozilla Firefox
Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly.
network
low complexity
mozilla
6.5
2023-06-02 CVE-2023-25752 Unspecified vulnerability in Mozilla Firefox
When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds.
network
low complexity
mozilla
6.5
2023-06-02 CVE-2023-28159 Unspecified vulnerability in Mozilla Firefox
The fullscreen notification could have been hidden on Firefox for Android by using download popups, resulting in potential user confusion or spoofing attacks.
network
low complexity
mozilla
4.3
2023-06-02 CVE-2023-28160 Unspecified vulnerability in Mozilla Firefox
When following a redirect to a publicly accessible web extension file, the URL may have been translated to the actual local path, leaking potentially sensitive information.
network
low complexity
mozilla
6.5