Mozilla vulnerabilities
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-9680An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines.
- CVE-2022-26486An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape.
- CVE-2022-26485Removing an XSLT parameter during processing could have lead to an exploitable use-after-free.
- CVE-2020-6819Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free.
- CVE-2020-6820Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free.
- CVE-2019-17026Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion.
- CVE-2019-11707A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop.
- CVE-2019-11708Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxe
- CVE-2016-9079A use-after-free vulnerability in SVG Animation has been discovered.