Mozilla

Products

Exploited and recent CVEs

• CVE-2024-9680 Critical 9.8 Exploited An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This 23.2%
• CVE-2024-9680 Critical 9.8 Exploited An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This 23.2%
• CVE-2024-9680 Critical 9.8 Exploited An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This 23.2%
• CVE-2022-26485 High 8.8 Exploited Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2 14.3%
• CVE-2022-26486 Critical 9.6 Exploited An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affect 2.4%
• CVE-2022-26485 High 8.8 Exploited Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2 14.3%
• CVE-2022-26485 High 8.8 Exploited Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2 14.3%
• CVE-2022-26486 Critical 9.6 Exploited An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affect 2.4%
• CVE-2022-26486 Critical 9.6 Exploited An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affect 2.4%
• CVE-2022-26486 Critical 9.6 Exploited An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affect 2.4%
• CVE-2022-26485 High 8.8 Exploited Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2 14.3%
• CVE-2022-26486 Critical 9.6 Exploited An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affect 2.4%
• CVE-2022-26485 High 8.8 Exploited Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2 14.3%
• CVE-2020-6819 High 8.1 Exploited Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affect 3.0%
• CVE-2020-6819 High 8.1 Exploited Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affect 3.0%
• CVE-2020-6819 High 8.1 Exploited Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affect 3.0%
• CVE-2020-6820 High 8.1 Exploited Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Thunde 7.1%
• CVE-2020-6820 High 8.1 Exploited Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Thunde 7.1%
• CVE-2020-6820 High 8.1 Exploited Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Thunde 7.1%
• CVE-2019-17026 High 8.8 Exploited Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affe 46.3%
• CVE-2019-17026 High 8.8 Exploited Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affe 46.3%
• CVE-2019-17026 High 8.8 Exploited Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affe 46.3%
• CVE-2019-11707 High 8.8 Exploited A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing 38.0%
• CVE-2019-11707 High 8.8 Exploited A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing 38.0%
• CVE-2019-11707 High 8.8 Exploited A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing 38.0%
• CVE-2019-11708 Critical 10.0 Exploited Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content chosen by a compromised 55.9%
• CVE-2019-11708 Critical 10.0 Exploited Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content chosen by a compromised 55.9%
• CVE-2019-11708 Critical 10.0 Exploited Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content chosen by a compromised 55.9%
• CVE-2016-9079 High 7.5 Exploited A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vul 87.4%
• CVE-2016-9079 High 7.5 Exploited A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vul 87.4%