Mozilla: >> Firefox >> 0.6.1 Security Vulnerabilities
The WebAudio `OscillatorNode` object was susceptible to a stack buffer overflow. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 122.
CVSS Score
8.8
EPSS Score
0.011
Published
2024-01-23
A Linux user opening the print preview dialog could have caused the browser to crash. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
CVSS Score
6.5
EPSS Score
0.004
Published
2024-01-23
When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security Policy could have overridden the child Content Security Policy. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
CVSS Score
6.5
EPSS Score
0.005
Published
2024-01-23
A compromised content process could have updated the document URI. This could have allowed an attacker to set an arbitrary URI in the address bar or history. This vulnerability affects Firefox < 122.
CVSS Score
4.3
EPSS Score
0.002
Published
2024-01-23
A phishing site could have repurposed an `about:` dialog to show phishing content with an incorrect origin in the address bar. This vulnerability affects Firefox < 122 and Thunderbird < 115.7.
CVSS Score
4.3
EPSS Score
0.003
Published
2024-01-23
A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
CVSS Score
8.8
EPSS Score
0.012
Published
2024-01-23
A malicious devtools extension could have been used to escalate privileges. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
CVSS Score
8.8
EPSS Score
0.005
Published
2024-01-23
A use-after-free crash could have occurred on macOS if a Firefox update were being applied on a very busy system. This could have resulted in an exploitable crash. This vulnerability affects Firefox < 122.
CVSS Score
6.5
EPSS Score
0.002
Published
2024-01-23
In specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
CVSS Score
6.5
EPSS Score
0.004
Published
2024-01-23
Some WASM source files could have caused a crash when loaded in devtools. This vulnerability affects Firefox < 122.
CVSS Score
6.5
EPSS Score
0.002
Published
2024-01-23