CVE-2024-10465 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2024-10466 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2024-10463 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2024-10460

The origin of an external protocol handler prompt could have been obscured using a data: URL within an iframe. This vulnerability affects Firefox 132, Firefox ESR 128.4, Thunderbird 128.4, and Thunderbird 132...

CVE-2024-10459

An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable crash. This vulnerability affects Firefox 132, Firefox ESR 128.4, Firefox ESR 115.17, Thunderbird 128.4, and Thunderbird 132...

CVE-2024-10458 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2024-10460 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2024-10459 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2024-10460

The origin of an external protocol handler prompt could have been obscured using a data: URL within an iframe. This vulnerability affects Firefox 132, Firefox ESR 128.4, Thunderbird 128.4, and Thunderbird 132...

CVE-2024-10462

Truncation of a long URL could have allowed origin spoofing in a permission prompt. This vulnerability affects Firefox 132, Firefox ESR 128.4, Thunderbird 128.4, and Thunderbird 132...

CVE-2024-10462 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

UBUNTU-CVE-2024-10463

Video frames could have been leaked between origins in some situations. This vulnerability affects Firefox 132, Firefox ESR 128.4, Firefox ESR 115.17, Thunderbird 128.4, and Thunderbird 132...

Security Vulnerabilities fixed in Firefox ESR 128.4 — Mozilla

A permission leak could have occurred from a trusted site to an untrusted site via embed or object elements. An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable crash. The origin of an external protocol handler prompt could have been...

KLA74641 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Security vulnerability can be exploited ...

Mozilla Firefox ESR < 128.4

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 128.4. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-56 advisory. - Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of these bugs...

Mozilla Firefox ESR < 115.17

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.17. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-57 advisory. - Video frames could have been leaked between origins in some situations. CVE-2024-10463 - A permission...

Mozilla Firefox ESR < 128.4

The version of Firefox ESR installed on the remote Windows host is prior to 128.4. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-56 advisory. - Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of these bugs showed...

KLA74633 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to spoof user interface, bypass security restrictions, cause denial of service, perform cross-site scripting attack, gain privileges, execute arbitrary code. Below is a complete list of...

Mozilla Firefox ESR < 115.17

The version of Firefox ESR installed on the remote Windows host is prior to 115.17. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-57 advisory. - Video frames could have been leaked between origins in some situations. CVE-2024-10463 - A permission leak could...

OESA-2024-2274 firefox security update

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions. Security Fixes: Unexpected data returned from the Safe Browsing API could have led to memory corruption and a potentially exploitable...