Mozilla Vulnerabilidad

Cronología

Escribe

Producto

Mozilla Firefox2628
Mozilla Thunderbird756
Mozilla Firefox ESR214
Mozilla Bugzilla138
Mozilla SeaMonkey25

Contramedidas

Official Fix3015
Temporary Fix0
Workaround5
Unavailable19
Not Defined176

Explotabilidad

High42
Functional5
Proof-of-Concept703
Unproven311
Not Defined2154

Vector de acceso

Not Defined0
Physical2
Local108
Adjacent47
Network3058

Autenticación

Not Defined0
High2
Low170
None3043

La interacción del usuario

Not Defined0
Required1967
None1248

C3BM Index

CVSSv3 Base

≤10
≤20
≤310
≤494
≤5464
≤6657
≤7755
≤8636
≤9193
≤10406

CVSSv3 Temp

≤10
≤20
≤342
≤4146
≤5590
≤6921
≤7546
≤8465
≤9346
≤10159

VulDB

≤10
≤20
≤316
≤4128
≤5668
≤6451
≤71056
≤8286
≤9189
≤10421

NVD

≤10
≤20
≤32
≤47
≤587
≤6122
≤7253
≤8154
≤9281
≤10239

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤84
≤91
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k0
<2k0
<5k15
<10k133
<25k1472
<50k1104
<100k485
≥100k6

Explotar hoy

<1k1741
<2k243
<5k673
<10k449
<25k88
<50k21
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (36): Bleach (4), Bonsai (4), Browser (1), Bugzilla (138), Camino (1), Durian Web Application Server (1), Firefox (2628), Firefox ESR (214), Firefox Focus (1), Firefox OS (9), FirefoxOS (1), Focus (4), GTK Widget (1), Hawk (1), Hubs Cloud (2), IoT Gateway (2), Libxul (1), Mac OS X (1), NSS (1), Necko (2), Network Security Services (23), PollBot (1), Prism (2), Products (1), SeaMonkey (25), Seamonkey (2), Suite (2), Thunderbird (757), Thunderbird ESR (6), VPN (2), VPN Client (2), Zamboni (1), before (1), convict (1), geckodriver (1), website (1)

Link to Vendor Website: https://www.mozilla.org/

Fecha de publicaciónBaseTempVulnerabilidadProdExpConCTIEPSSCVE
2024-03-224.34.1Mozilla Firefox Javascript Object divulgación de informaciónWeb BrowserNot DefinedOfficial Fix0.040.00043CVE-2024-29943
2024-03-224.34.1Mozilla Firefox Event cross site scriptingWeb BrowserNot DefinedOfficial Fix0.000.00045CVE-2024-29944
2024-03-194.34.1Mozilla Firefox QUIC ACK Frame Decoder denegación de servicioWeb BrowserNot DefinedOfficial Fix0.030.00043CVE-2024-2613
2024-03-196.36.0Mozilla Firefox desbordamiento de búferWeb BrowserNot DefinedOfficial Fix0.060.00043CVE-2024-2606
2024-03-194.34.1Mozilla Thunderbird denegación de servicioMail Client SoftwareNot DefinedOfficial Fix0.030.00045CVE-2024-2616
2024-03-194.34.1Mozilla Firefox ESR denegación de servicioWeb BrowserNot DefinedOfficial Fix0.030.00045CVE-2024-2616
2024-03-194.34.1Mozilla Thunderbird Pointer Lock escalada de privilegiosMail Client SoftwareNot DefinedOfficial Fix0.270.00044CVE-2024-2611
2024-03-194.34.1Mozilla Firefox Pointer Lock escalada de privilegiosWeb BrowserNot DefinedOfficial Fix0.050.00044CVE-2024-2611
2024-03-194.34.1Mozilla Thunderbird Markup escalada de privilegiosMail Client SoftwareNot DefinedOfficial Fix0.030.00044CVE-2024-2610
2024-03-194.34.1Mozilla Firefox Markup escalada de privilegiosWeb BrowserNot DefinedOfficial Fix0.030.00044CVE-2024-2610
2024-03-194.34.1Mozilla Firefox Permission Prompt escalada de privilegiosWeb BrowserNot DefinedOfficial Fix0.030.00043CVE-2024-2609
2024-03-196.36.0Mozilla Thunderbird AppendEncodedCharacters desbordamiento de búferMail Client SoftwareNot DefinedOfficial Fix0.440.00044CVE-2024-2608
2024-03-196.36.0Mozilla Firefox AppendEncodedCharacters desbordamiento de búferWeb BrowserNot DefinedOfficial Fix0.030.00044CVE-2024-2608
2024-03-193.73.6Mozilla Thunderbird Network Security Services Marvin Attack divulgación de informaciónMail Client SoftwareNot DefinedOfficial Fix0.040.00044CVE-2023-5388
2024-03-193.73.6Mozilla Firefox Network Security Services Marvin Attack divulgación de informaciónWeb BrowserNot DefinedOfficial Fix0.030.00044CVE-2023-5388
2024-03-196.36.0Mozilla Firefox desbordamiento de búferWeb BrowserNot DefinedOfficial Fix0.050.00043CVE-2024-2615
2024-03-196.36.0Mozilla Thunderbird desbordamiento de búferMail Client SoftwareNot DefinedOfficial Fix0.330.00044CVE-2024-2614
2024-03-196.36.0Mozilla Firefox desbordamiento de búferWeb BrowserNot DefinedOfficial Fix0.030.00044CVE-2024-2614
2024-03-195.55.3Mozilla Thunderbird SafeRefPtr desbordamiento de búferMail Client SoftwareNot DefinedOfficial Fix0.150.00044CVE-2024-2612
2024-03-195.55.3Mozilla Firefox SafeRefPtr desbordamiento de búferWeb BrowserNot DefinedOfficial Fix0.050.00044CVE-2024-2612
2024-03-195.55.3Mozilla Thunderbird desbordamiento de búferMail Client SoftwareNot DefinedOfficial Fix0.050.00044CVE-2024-2607
2024-03-195.55.3Mozilla Firefox desbordamiento de búferWeb BrowserNot DefinedOfficial Fix0.000.00044CVE-2024-2607
2024-03-195.55.3Mozilla Thunderbird Windows Error Reporter escalada de privilegiosMail Client SoftwareNot DefinedOfficial Fix0.030.00045CVE-2024-2605
2024-03-195.55.3Mozilla Firefox Windows Error Reporter escalada de privilegiosWeb BrowserNot DefinedOfficial Fix0.080.00045CVE-2024-2605
2024-03-053.13.0Mozilla Thunderbird Encrypted Subject divulgación de informaciónMail Client SoftwareNot DefinedOfficial Fix0.020.00045CVE-2024-1936
2024-02-224.34.1Mozilla Firefox Javascript URI cross site scriptingWeb BrowserNot DefinedOfficial Fix0.020.00043CVE-2024-26281
2024-02-224.34.1Mozilla Focus 302 Redirect cross site scriptingWeb BrowserNot DefinedOfficial Fix0.020.00043CVE-2024-26284
2024-02-224.34.1Mozilla Firefox AMP URL cross site scriptingWeb BrowserNot DefinedOfficial Fix0.040.00043CVE-2024-26282
2024-02-224.34.1Mozilla Firefox Javascript URI cross site scriptingWeb BrowserNot DefinedOfficial Fix0.090.00043CVE-2024-26283
2024-02-224.34.1Mozilla Focus Javascript URI cross site scriptingWeb BrowserNot DefinedOfficial Fix0.070.00043CVE-2024-1563
2024-02-204.34.1Mozilla Firefox firefox Protocol vulnerabilidad desconocidaWeb BrowserNot DefinedOfficial Fix0.030.00043CVE-2024-1555
2024-02-204.34.1Mozilla Firefox API fetch vulnerabilidad desconocidaWeb BrowserNot DefinedOfficial Fix0.030.00043CVE-2024-1554
2024-02-206.36.0Mozilla Firefox desbordamiento de búferWeb BrowserNot DefinedOfficial Fix0.020.00043CVE-2024-1556
2024-02-206.36.0Mozilla Firefox Remote Code ExecutionWeb BrowserNot DefinedOfficial Fix0.030.00044CVE-2024-1552
2024-02-204.34.1Mozilla Firefox Response Header vulnerabilidad desconocidaWeb BrowserNot DefinedOfficial Fix0.040.00044CVE-2024-1551
2024-02-204.34.1Mozilla Firefox Fullscreen Mode requestPointerLock escalada de privilegiosWeb BrowserNot DefinedOfficial Fix0.020.00044CVE-2024-1550
2024-02-204.34.1Mozilla Firefox Cursor escalada de privilegiosWeb BrowserNot DefinedOfficial Fix0.030.00044CVE-2024-1549
2024-02-204.34.1Mozilla Firefox Fullscreen Notification escalada de privilegiosWeb BrowserNot DefinedOfficial Fix0.020.00044CVE-2024-1548
2024-02-204.34.1Mozilla Firefox API escalada de privilegiosWeb BrowserNot DefinedOfficial Fix0.040.00044CVE-2024-1547
2024-02-204.34.1Mozilla Firefox Networking Channel divulgación de informaciónWeb BrowserNot DefinedOfficial Fix0.060.00044CVE-2024-1546
2024-02-206.36.0Mozilla Firefox desbordamiento de búferWeb BrowserNot DefinedOfficial Fix0.030.00043CVE-2024-1557
2024-02-206.36.0Mozilla Thunderbird desbordamiento de búferMail Client SoftwareNot DefinedOfficial Fix0.020.00044CVE-2024-1553
2024-02-206.36.0Mozilla Firefox desbordamiento de búferWeb BrowserNot DefinedOfficial Fix0.030.00044CVE-2024-1553
2024-02-052.52.4Mozilla Firefox QR Code RedirectWeb BrowserNot DefinedOfficial Fix0.040.00046CVE-2024-0953
2024-01-234.84.7Mozilla Thunderbird HSTS divulgación de informaciónMail Client SoftwareNot DefinedOfficial Fix0.040.00056CVE-2024-0753
2024-01-234.84.7Mozilla Firefox HSTS divulgación de informaciónWeb BrowserNot DefinedOfficial Fix0.040.00056CVE-2024-0753
2024-01-237.17.0Mozilla Thunderbird Devtool Extension escalada de privilegiosMail Client SoftwareNot DefinedOfficial Fix0.020.00077CVE-2024-0751
2024-01-237.17.0Mozilla Firefox Devtool Extension escalada de privilegiosWeb BrowserNot DefinedOfficial Fix0.030.00077CVE-2024-0751
2024-01-235.45.3Mozilla Firefox WASM Source File denegación de servicioWeb BrowserNot DefinedOfficial Fix0.040.00046CVE-2024-0754
2024-01-235.45.3Mozilla Firefox desbordamiento de búferWeb BrowserNot DefinedOfficial Fix0.020.00046CVE-2024-0752

3165 no se muestran más entradas

Interested in the pricing of exploits?

See the underground prices here!