Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability previously existed in Mozilla Firefox version 134, which stemmed from the fact that under certain circumstances, the user opt-in setting of Focus, which requires authentication...

UBUNTU-CVE-2024-11695

A crafted URL containing Arabic script and whitespace characters could have hidden the true origin of the page, resulting in a potential spoofing attack. This vulnerability affects Firefox 133, Firefox ESR 128.5, Thunderbird 133, and Thunderbird 128.5...

The vulnerability in the CORS mechanism of Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows a hacker to bypass security restrictions.

The vulnerability of the CORS mechanism in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to a data source confirmation error. Exploiting this vulnerability can allow an attacker to bypass security restrictions remotely...

The vulnerability in the Firefox web browser relates to the insecure external control of critical data states, allowing a hacker to trigger a service failure.

The vulnerability in the Firefox web browser is related to the insecure external control of critical data states. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Form Validation Popup Handler component in the Firefox web browser, related to the disclosure of information that allows a violator to trigger a service denial.

The vulnerability of the Form Validation Popup Handler component in the Firefox web browser is related to insufficient validation of entered data. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the Frame Iterator component in the Firefox web browser, related to the execution of a loop with an unreachable exit condition, allows attackers to compromise data integrity.

The vulnerability of the Frame Iterator component in the Firefox web browser is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to compromise data integrity...

The vulnerability of the Firefox web browser’s screenshot creation feature lies in the improper limitation of the visible layers of the user interface. This allows attackers to compromise the integrity of data.

The vulnerability in the Firefox web browser’s screenshot creation function is related to an incorrect limitation on the visible layers of the user interface. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of data...

The vulnerability of the JavaScript engine in the Firefox web browser, related to memory usage after it is freed, allows attackers to gain access to confidential data.

The vulnerability of the JavaScript engine in the Firefox web browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A security bypass vulnerability exists in multiple Mozilla products, whi...

The vulnerability in the Firefox web browser, related to vulnerabilities in the authentication process, allows attackers to compromise data integrity.

The vulnerability in the Firefox web browser is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

The vulnerability in the implementation of the WebGL 3D graphics application programming interface for Firefox, Firefox ESR, and Thunderbird email client allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebGL 3D graphics application programming interface in Firefox, Firefox ESR, and Thunderbird email client relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and...

The vulnerability in the Firefox web browser, related to the lack of restrictions on file downloads, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability in the Firefox web browser relates to the lack of restrictions on file downloads. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability in Firefox ESR and Firefox web browsers relates to the insufficient elimination of certain elements in the request, allowing an attacker to access confidential data.

The vulnerability in web browsers Firefox ESR and Firefox is related to insufficient elimination of special elements in requests. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

The vulnerability in the TLS protocol implementation of the Firefox web browser relates to errors in the certificate validation process, which allows attackers to compromise data integrity.

The vulnerability in the implementation of the TLS protocol in the Firefox web browser is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

The vulnerability of the FontFace component in the Firefox web browser, related to memory usage after it is freed, allows a hacker to trigger a service denial.

The vulnerability of the FontFace component in the Firefox web browser is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the Mozilla Firefox browser lies in its improper limitation of the visible layers of the user interface, which allows attackers to perform spoofing attacks.

The vulnerability of the Mozilla Firefox browser is related to an improper limitation on the displayed layers of the user interface. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...

The vulnerability of Firefox browsers, including Firefox ESR, arises from the absence of a confirmation dialog box when opening Usenet links such as “news:“ and “snews:“. This allows a malicious user to download any application and execute any code.

The vulnerability of Firefox and Firefox ESR lies in the absence of a confirmation dialog box when opening “news:“ and “snews:“ protocols related to Usenet. Exploiting this vulnerability allows an attacker to download arbitrary applications and execute arbitrary code...

The vulnerability of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird lies in improper restrictions on operations within memory buffers, which allows attackers to influence system functionality.

The vulnerabilities of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird are related to improper restrictions on operations within memory buffers. Exploiting these vulnerabilities can allow a remote attacker to influence system operations...

The vulnerability in the full-screen notification mode of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird allows a hacker to perform spoofing attacks.

The vulnerability in the full-screen notification mode of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird is related to an improper limitation on the number of user interface layers or frames displayed. Exploiting this vulnerability allows a malicious actor to perfo...

Mozilla Multiple Product Type Obfuscation Vulnerability

Mozilla Firefox and others are products of the Mozilla Foundation in the U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of e-mail client software separate from the Mozilla Application...