Mozilla Firefox

• CVE-2024-7530 Critical 9.8 Incorrect garbage collection interaction could have led to a use-after-free. This vulnerability affects Firefox < 129. 0.4%
• CVE-2024-7523 Medium 6.3 A select option could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. *This issue only affects Android versions of Firefox.* This 0.3%
• CVE-2024-7531 Medium 6.3 Calling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can result in plaintext on an Intel Sandy Bridge processor. In Firefox this only affects the QUIC header pro 0.4%
• CVE-2024-7529 High 8.1 The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerability affects Firefox < 129, Firefox ESR < 115. 0.5%
• CVE-2024-7528 Critical 9.8 Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 128.1, and Thunderbird < 128.1. 0.5%
• CVE-2024-7527 High 8.8 Unexpected marking work at the start of sweeping could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thund 0.6%
• CVE-2024-7526 High 7.5 ANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could be leveraged to leak sensitive data from memory. This vulnerability affects Firefox < 129, Firefox ESR 0.6%
• CVE-2024-7525 Critical 9.1 It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read and modify the response body of requests on any site. This vulnerability affects Fir 0.6%
• CVE-2024-7524 Medium 6.1 Firefox adds web-compatibility shims in place of some tracking scripts blocked by Enhanced Tracking Protection. On a site protected by Content Security Policy in "strict-dynamic" mode, an attacker ab 0.5%
• CVE-2024-7522 Critical 9.1 Editor code failed to check an attribute value. This could have led to an out-of-bounds read. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, 0.6%
• CVE-2024-7521 Critical 9.8 Incomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 0.6%
• CVE-2024-7520 High 8.8 A type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code execution. This vulnerability affects Firefox < 129, Firefox ESR < 128.1, and Thunderbird < 128.1. 0.6%
• CVE-2024-7519 High 8.8 Insufficient checks when processing graphics shared memory could have led to memory corruption. This could be leveraged by an attacker to perform a sandbox escape. This vulnerability affects Firefox < 0.6%
• CVE-2024-7518 Medium 6.5 Select options could obscure the fullscreen notification dialog. This could be used by a malicious site to perform a spoofing attack. This vulnerability affects Firefox < 129, Firefox ESR < 128.1, and 0.5%
• CVE-2024-6615 High 8.8 Memory safety bugs fixed in Firefox 128 and Thunderbird 128 0.4%
• CVE-2024-6614 Medium 4.3 Incorrect listing of stack frames 0.4%
• CVE-2024-6613 Medium 5.5 Incorrect listing of stack frames 0.2%
• CVE-2024-6612 Medium 5.3 CSP violation leakage when using devtools 0.5%
• CVE-2024-6611 Critical 9.8 Incorrect handling of SameSite cookies 0.7%
• CVE-2024-6610 Medium 6.3 Form validation popups could block exiting full-screen mode 0.3%
• CVE-2024-6609 High 8.8 Memory corruption in NSS 0.6%
• CVE-2024-6608 Medium 4.3 Cursor could be moved out of the viewport using pointerlock. 0.4%
• CVE-2024-6607 High 8.8 Leaving pointerlock by pressing the escape key could be prevented 0.6%
• CVE-2024-6606 High 8.2 Out-of-bounds read in clipboard component 0.4%
• CVE-2024-6605 High 8.8 Firefox Android missed activation delay to prevent tapjacking 0.4%
• CVE-2024-6604 High 7.5 Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.13 0.5%
• CVE-2024-6603 High 7.4 Memory corruption in thread creation 0.5%
• CVE-2024-6602 Critical 9.8 Memory corruption in NSS 1.0%
• CVE-2024-6601 Medium 4.7 Race condition in permission assignment 0.4%
• CVE-2024-6600 Medium 6.3 Memory corruption in WebGL API 0.4%
• CVE-2024-5701 Critical 9.8 Memory safety bugs present in Firefox 126. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. 0.6%
• CVE-2024-5699 Critical 9.8 In violation of spec, cookie prefixes such as `__Secure` were being ignored if they were not correctly capitalized - by spec they should be checked with a case-insensitive comparison. This could have 0.8%
• CVE-2024-5698 Medium 5.4 By manipulating the fullscreen feature while opening a data-list, an attacker could have overlaid a text box over the address bar. This could have led to user confusion and possible spoofing attacks. 0.4%
• CVE-2024-5697 Medium 5.3 A website was able to detect when a user took a screenshot of a page using the built-in Screenshot functionality in Firefox. This vulnerability affects Firefox < 127. 0.4%
• CVE-2024-5695 Critical 9.8 If an out-of-memory condition occurs at a specific point using allocations in the probabilistic heap checker, an assertion could have been triggered, and in rarer situations, memory corruption could h 0.6%
• CVE-2024-5694 High 7.5 An attacker could have caused a use-after-free in the JavaScript engine to read memory in the JavaScript string section of the heap. This vulnerability affects Firefox < 127. 0.5%
• CVE-2024-5689 Medium 4.3 In addition to detecting when a user was taking a screenshot (XXX), a website was able to overlay the 'My Shots' button that appeared, and direct the user to a replica Firefox Screenshots page that co 0.4%
• CVE-2024-5687 Medium 5.3 If a specific sequence of actions is performed when opening a new tab, the triggering principal associated with the new tab may have been incorrect. The triggering principal is used to calculate many 0.4%
• CVE-2024-5700 High 7.0 Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these coul 0.4%
• CVE-2024-5696 High 8.6 By manipulating the text in an `&lt;input&gt;` tag, an attacker could have caused corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox < 127, Firefox ESR < 115 0.8%
• CVE-2024-5693 Medium 6.1 Offscreen Canvas did not properly track cross-origin tainting, which could be used to access image data from another site in violation of same-origin policy. This vulnerability affects Firefox < 127, 0.6%
• CVE-2024-5692 Medium 6.5 On Windows 10, when using the 'Save As' functionality, an attacker could have tricked the browser into saving the file with a disallowed extension such as `.url` by including an invalid character in t 0.6%
• CVE-2024-5691 Medium 4.7 By tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window. This vulnerability 0.7%
• CVE-2024-5690 Medium 4.3 By monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were functional on a user's system. This vulnerability affects Firefox < 127, Firefox ES 0.7%
• CVE-2024-5688 High 8.1 If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird 1.1%
• CVE-2024-5702 High 7.5 Memory corruption in the networking stack could have led to a potentially exploitable crash. This vulnerability affects Firefox < 125, Firefox ESR < 115.12, and Thunderbird < 115.12. 0.9%
• CVE-2024-4778 Critical 9.8 Memory safety bugs present in Firefox 125. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. 0.4%
• CVE-2024-4776 High 8.2 A file dialog shown while in full-screen mode could have resulted in the window remaining disabled. This vulnerability affects Firefox < 126. 0.4%
• CVE-2024-4775 Medium 5.9 An iterator stop condition was missing when handling WASM code in the built-in profiler, potentially leading to invalid memory access and undefined behavior. *Note:* This issue only affects the applic 0.2%
• CVE-2024-4774 Medium 6.5 The `ShmemCharMapHashEntry()` code was susceptible to potentially undefined behavior by bypassing the move semantics for one of its data members. This vulnerability affects Firefox < 126. 0.4%