Mozilla Firefox

Mitigation bypass in the Networking: Cookies component

Mitigation bypass in the Networking: Cookies component

Use-after-free in MediaTrackGraphImpl::GetInstance()

Large branch table could lead to truncated instruction

JIT miscompilation in the JavaScript Engine: JIT component

Memory safety bugs fixed in Firefox 153

Memory safety bugs present in Firefox 129. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 130.

Use-after-free in the CSS Parsing and Computation component

Use-after-free in the Layout: Text and Fonts component

Memory safety bugs fixed in Firefox 148 and Thunderbird 148

Sandboxed iframes could allow local downloads despite sandbox restrictions

Sandboxed iframe could start downloads

Use-after-free in the DOM: Window and Location component

Use-after-free in the Graphics: ImageLib component

Use-after-free in the JavaScript Engine component

Use-after-free in the JavaScript: GC component

Use-after-free in the JavaScript: GC component

Use-after-free in the DOM: Core & HTML component

Disclosure of uninitialized memory when .toUpperCase() causes string to get longer

Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153

Spoofed web content presented under trusted domains using scripted navigation on Firefox iOS

Invalid pointer in the JavaScript Engine component

Incorrect URL stripping in CSP reports

Use-after-free in Custom Highlight

Memory safety bugs fixed in Firefox 149 and Thunderbird 149

Use-after-free in the Audio/Video: GMP component

Use-after-free in the JavaScript Engine component

Memory safety bugs fixed in Firefox 149.0.2 and Thunderbird 149.0.2

Memory safety bugs fixed in Firefox 147 and Thunderbird 147

Mitigation bypass in the Networking: HTTP component

Use-after-free in the JavaScript Engine component

Use-after-free during concurrent delazification

Memory safety bugs fixed in Firefox 142 and Thunderbird 142

Memory safety bugs fixed in Firefox 141 and Thunderbird 141

Memory safety bugs present in Firefox 125. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 126.

Privilege escalation in the Netmonitor component

Integer overflow in the JavaScript: WebAssembly component

JIT miscompilation in the JavaScript: WebAssembly component

Integer overflow in the Audio/Video: Playback component

Privilege escalation in the Netmonitor component