Vulnerabilities > Mozilla > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-06-02 | CVE-2023-25738 | Out-of-bounds Read vulnerability in Mozilla Firefox Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.<br>*This bug only affects Firefox on Windows. | 6.5 |
| 2023-06-02 | CVE-2023-25741 | Unspecified vulnerability in Mozilla Firefox When dragging and dropping an image cross-origin, the image's size could potentially be leaked. | 6.5 |
| 2023-06-02 | CVE-2023-25742 | Unspecified vulnerability in Mozilla Firefox ESR When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash. | 6.5 |
| 2023-06-02 | CVE-2023-25748 | Unspecified vulnerability in Mozilla Firefox By displaying a prompt with a long description, the fullscreen notification could have been hidden, resulting in potential user confusion or spoofing attacks. | 4.3 |
| 2023-06-02 | CVE-2023-25749 | Unspecified vulnerability in Mozilla Firefox Android applications with unpatched vulnerabilities can be launched from a browser using Intents, exposing users to these vulnerabilities. | 4.3 |
| 2023-06-02 | CVE-2023-25750 | Exposure of Resource to Wrong Sphere vulnerability in Mozilla Firefox Under certain circumstances, a ServiceWorker's offline cache may have leaked to the file system when using private browsing mode. | 4.3 |
| 2023-06-02 | CVE-2023-25751 | Unspecified vulnerability in Mozilla Firefox Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. | 6.5 |
| 2023-06-02 | CVE-2023-25752 | Unspecified vulnerability in Mozilla Firefox When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds. | 6.5 |
| 2023-06-02 | CVE-2023-28159 | Unspecified vulnerability in Mozilla Firefox The fullscreen notification could have been hidden on Firefox for Android by using download popups, resulting in potential user confusion or spoofing attacks. | 4.3 |
| 2023-06-02 | CVE-2023-28160 | Unspecified vulnerability in Mozilla Firefox When following a redirect to a publicly accessible web extension file, the URL may have been translated to the actual local path, leaking potentially sensitive information. | 6.5 |