Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
MozillaFirefox Esr

7 matches found

CVE
CVE•added 2020/04/24 4:15 p.m.•1120 views

CVE-2020-6819

Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Thunderbird < 68.7.0, Firefox < 74.0.1, and Firefox ESR

8.1CVSS7.3AI score0.0035EPSS
CVE
CVE•added 2020/04/24 4:15 p.m.•1085 views

CVE-2020-6820

Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Thunderbird < 68.7.0, Firefox < 74.0.1, and Firefox ESR

8.1CVSS7.3AI score0.04405EPSS
CVE
CVE•added 2020/04/24 4:15 p.m.•270 views

CVE-2020-6825

Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 74 and Firefox ESR 68.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary c...

9.8CVSS9.9AI score0.00701EPSS
CVE
CVE•added 2020/04/24 4:15 p.m.•268 views

CVE-2020-6821

When reading from areas partially or fully outside the source resource with WebGL's copyTexSubImage method, the specification requires the returned values be zero. Previously, this memory was uninitialized, leading to potentially sensitive data disclosure. This vulnerability affects Thunderbird &lt...

7.5CVSS7.9AI score0.00541EPSS
CVE
CVE•added 2020/04/24 4:15 p.m.•244 views

CVE-2020-6822

On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in GMPDecodeData. It is possible that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 68.7.0, Firefox ESR < 68.7, and Firefo...

8.8CVSS8.9AI score0.00817EPSS
CVE
CVE•added 2020/04/24 4:15 p.m.•201 views

CVE-2020-6828

A malicious Android application could craft an Intent that would have been processed by Firefox for Android and potentially result in a file overwrite in the user's profile directory. One exploitation vector for this would be to supply a user.js file providing arbitrary malicious preference values....

7.5CVSS8AI score0.00355EPSS
CVE
CVE•added 2020/04/24 4:15 p.m.•186 views

CVE-2020-6827

When following a link that opened an intent://-schemed URL, causing a custom tab to be opened, Firefox for Android could be tricked into displaying the incorrect URI. Note: This issue only affects Firefox for Android. Other operating systems are unaffected. . This vulnerability affects Firefox ESR

4.7CVSS5.8AI score0.00321EPSS