CVE-2023-29551

< 112.0

Memory safety bugs present in Firefox 111. Some of these bugs showed evidence of memory corruption and we presume that with enough

8.8HIGH

CVE-2023-29550

< 112.0

Memory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruption and we pr

8.8HIGH

CVE-2023-29549

< 112.0

Under certain circumstances, a call to the bind function may have resulted in the incorrect realm. This may have created a vulnera

6.5MEDIUM

CVE-2023-29548

< 112.0

A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result. This vulnerability affects Firefox

6.5MEDIUM

CVE-2023-29547

< 112.0

When a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain could have been created, when it sho

6.5MEDIUM

CVE-2023-29544

< 112.0

If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could have caused memory corrup

6.5MEDIUM

CVE-2023-29543

< 112.0

An attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global object's deb

8.8HIGH

CVE-2023-29541

< 112.0

Firefox did not properly handle downloads of files ending in .desktop, which can be interpreted to run attacker-controlled command

8.8HIGH

CVE-2023-29540

< 112.0

Using a redirect embedded into sourceMappingUrls could allow for navigation to external protocol links in sandboxed iframes withou

6.1MEDIUM

CVE-2023-29539

< 112.0

When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained

8.8HIGH

CVE-2023-29538

< 112.0

Under specific circumstances a WebExtension may have received a jar:file:/// URI instead of a moz-extension:/// URI during a load

4.3MEDIUM

CVE-2023-29537

< 112.0

Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code.

7.5HIGH

CVE-2023-29536

< 112.0

An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in a

8.8HIGH

CVE-2023-29535

< 112.0

Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced. This resulted in mem

6.5MEDIUM

CVE-2023-29533

< 112.0

A website could have obscured the fullscreen notification by using a combination of window.open, fullscreen requests, window.name

4.3MEDIUM