Mozilla Vulnérabilités

Chronologie

Taper

Produit

Mozilla Firefox2645
Mozilla Thunderbird756
Mozilla Firefox ESR214
Mozilla Bugzilla138
Mozilla SeaMonkey25

Contre-mesures

Official Fix3034
Temporary Fix0
Workaround5
Unavailable19
Not Defined174

Exploitabilité

High43
Functional5
Proof-of-Concept703
Unproven311
Not Defined2170

Vecteur d'accès

Not Defined0
Physical2
Local108
Adjacent47
Network3075

Authentification

Not Defined0
High2
Low170
None3060

Interaction de l'utilisateur

Not Defined0
Required1984
None1248

C3BM Index

CVSSv3 Base

≤10
≤20
≤310
≤495
≤5472
≤6657
≤7762
≤8637
≤9193
≤10406

CVSSv3 Temp

≤10
≤20
≤343
≤4146
≤5598
≤6928
≤7546
≤8466
≤9346
≤10159

VulDB

≤10
≤20
≤316
≤4129
≤5676
≤6451
≤71064
≤8286
≤9189
≤10421

NVD

≤10
≤20
≤32
≤47
≤587
≤6122
≤7253
≤8154
≤9281
≤10239

CNA

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤84
≤92
≤100

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k0
<2k0
<5k15
<10k133
<25k1503
<50k1091
<100k484
≥100k6

Exploiter aujourd'hui

<1k1769
<2k239
<5k686
<10k437
<25k81
<50k20
<100k0
≥100k0

Exploiter le volume du marché

🔴 CTI Activités

Affected Products (36): Bleach (4), Bonsai (4), Browser (1), Bugzilla (138), Camino (1), Durian Web Application Server (1), Firefox (2645), Firefox ESR (214), Firefox Focus (1), Firefox OS (9), FirefoxOS (1), Focus (4), GTK Widget (1), Hawk (1), Hubs Cloud (2), IoT Gateway (2), Libxul (1), Mac OS X (1), NSS (1), Necko (2), Network Security Services (23), PollBot (1), Prism (2), Products (1), SeaMonkey (25), Seamonkey (2), Suite (2), Thunderbird (757), Thunderbird ESR (6), VPN (2), VPN Client (2), Zamboni (1), before (1), convict (1), geckodriver (1), website (1)

Link to Vendor Website: https://www.mozilla.org/

PubliéBaseTempVulnérabilitéProdExpConEPSSCTICVE
16/04/20246.36.0Mozilla Firefox MarkStack Remote Code ExecutionWeb BrowserNot DefinedOfficial Fix0.000430.08CVE-2024-3862
16/04/20244.34.1Mozilla Firefox JIT divulgation de l'informationWeb BrowserNot DefinedOfficial Fix0.000430.04CVE-2024-3855
16/04/20244.34.1Mozilla Firefox JIT dénie de serviceWeb BrowserNot DefinedOfficial Fix0.000430.03CVE-2024-3858
16/04/20246.36.0Mozilla Firefox Garbage Collection buffer overflowWeb BrowserNot DefinedOfficial Fix0.000430.03CVE-2024-3856
16/04/20244.34.1Mozilla Firefox JIT divulgation de l'informationWeb BrowserNot DefinedOfficial Fix0.000440.04CVE-2024-3854
16/04/20246.36.0Mozilla Firefox Garbage Collection buffer overflowWeb BrowserNot DefinedOfficial Fix0.000430.03CVE-2024-3853
16/04/20246.36.0Mozilla Firefox JIT Optimization GetBoundName Remote Code ExecutionWeb BrowserNot DefinedOfficial Fix0.000440.08CVE-2024-3852
16/04/20246.36.0Mozilla Firefox AlignedBuffer buffer overflowWeb BrowserNot DefinedOfficial Fix0.000440.20CVE-2024-3861
16/04/20243.13.0Mozilla Firefox JIT dénie de serviceWeb BrowserNot DefinedOfficial Fix0.000430.03CVE-2024-3860
16/04/20244.34.1Mozilla Firefox OpenType Font Parser divulgation de l'informationWeb BrowserNot DefinedOfficial Fix0.000440.00CVE-2024-3859
16/04/20246.36.0Mozilla Firefox JIT buffer overflowWeb BrowserNot DefinedOfficial Fix0.000440.04CVE-2024-3857
16/04/20246.36.0Mozilla Firefox buffer overflowWeb BrowserNot DefinedOfficial Fix0.000440.04CVE-2024-3864
16/04/20246.36.0Mozilla Firefox buffer overflowWeb BrowserNot DefinedOfficial Fix0.000430.04CVE-2024-3865
16/04/20244.34.1Mozilla Firefox xrm-ms File vulnérabilité inconnueWeb BrowserNot DefinedOfficial Fix0.000450.03CVE-2024-3863
16/04/20244.34.1Mozilla Firefox HTTP/2 CONTINUATION Frame dénie de serviceWeb BrowserNot DefinedOfficial Fix0.000440.08CVE-2024-3302
03/04/20244.34.1Mozilla Firefox javascript URL elévation de privilègesWeb BrowserNot DefinedOfficial Fix0.000430.00CVE-2024-31393
03/04/20244.34.1Mozilla Firefox Mixed Content divulgation de l'informationWeb BrowserNot DefinedOfficial Fix0.000430.07CVE-2024-31392
22/03/20244.34.1Mozilla Firefox Javascript Object divulgation de l'informationWeb BrowserNot DefinedOfficial Fix0.000450.04CVE-2024-29943
22/03/20244.34.1Mozilla Firefox Event cross site scriptingWeb BrowserNot DefinedOfficial Fix0.000450.59CVE-2024-29944
19/03/20244.34.1Mozilla Firefox QUIC ACK Frame Decoder dénie de serviceWeb BrowserNot DefinedOfficial Fix0.000430.05CVE-2024-2613
19/03/20246.36.0Mozilla Firefox buffer overflowWeb BrowserNot DefinedOfficial Fix0.000430.04CVE-2024-2606
19/03/20244.34.1Mozilla Thunderbird dénie de serviceMail Client SoftwareNot DefinedOfficial Fix0.000450.03CVE-2024-2616
19/03/20244.34.1Mozilla Firefox ESR dénie de serviceWeb BrowserNot DefinedOfficial Fix0.000450.06CVE-2024-2616
19/03/20244.34.1Mozilla Thunderbird Pointer Lock elévation de privilègesMail Client SoftwareNot DefinedOfficial Fix0.000440.06CVE-2024-2611
19/03/20244.34.1Mozilla Firefox Pointer Lock elévation de privilègesWeb BrowserNot DefinedOfficial Fix0.000440.04CVE-2024-2611
19/03/20244.34.1Mozilla Thunderbird Markup elévation de privilègesMail Client SoftwareNot DefinedOfficial Fix0.000440.06CVE-2024-2610
19/03/20244.34.1Mozilla Firefox Markup elévation de privilègesWeb BrowserNot DefinedOfficial Fix0.000440.05CVE-2024-2610
19/03/20244.34.1Mozilla Firefox Permission Prompt elévation de privilègesWeb BrowserNot DefinedOfficial Fix0.000440.03CVE-2024-2609
19/03/20246.36.0Mozilla Thunderbird AppendEncodedCharacters buffer overflowMail Client SoftwareNot DefinedOfficial Fix0.000440.06CVE-2024-2608
19/03/20246.36.0Mozilla Firefox AppendEncodedCharacters buffer overflowWeb BrowserNot DefinedOfficial Fix0.000440.11CVE-2024-2608
19/03/20243.73.6Mozilla Thunderbird Network Security Services Marvin Attack divulgation de l'informationMail Client SoftwareNot DefinedOfficial Fix0.000440.06CVE-2023-5388
19/03/20243.73.6Mozilla Firefox Network Security Services Marvin Attack divulgation de l'informationWeb BrowserNot DefinedOfficial Fix0.000440.00CVE-2023-5388
19/03/20246.36.0Mozilla Firefox buffer overflowWeb BrowserNot DefinedOfficial Fix0.000430.05CVE-2024-2615
19/03/20246.36.0Mozilla Thunderbird buffer overflowMail Client SoftwareNot DefinedOfficial Fix0.000440.09CVE-2024-2614
19/03/20246.36.0Mozilla Firefox buffer overflowWeb BrowserNot DefinedOfficial Fix0.000440.06CVE-2024-2614
19/03/20245.55.3Mozilla Thunderbird SafeRefPtr buffer overflowMail Client SoftwareNot DefinedOfficial Fix0.000440.08CVE-2024-2612
19/03/20245.55.3Mozilla Firefox SafeRefPtr buffer overflowWeb BrowserNot DefinedOfficial Fix0.000440.04CVE-2024-2612
19/03/20245.55.3Mozilla Thunderbird buffer overflowMail Client SoftwareNot DefinedOfficial Fix0.000440.06CVE-2024-2607
19/03/20245.55.3Mozilla Firefox buffer overflowWeb BrowserNot DefinedOfficial Fix0.000440.06CVE-2024-2607
19/03/20245.55.3Mozilla Thunderbird Windows Error Reporter elévation de privilègesMail Client SoftwareNot DefinedOfficial Fix0.000450.03CVE-2024-2605
19/03/20245.55.3Mozilla Firefox Windows Error Reporter elévation de privilègesWeb BrowserNot DefinedOfficial Fix0.000450.08CVE-2024-2605
05/03/20243.13.0Mozilla Thunderbird Encrypted Subject divulgation de l'informationMail Client SoftwareNot DefinedOfficial Fix0.000450.00CVE-2024-1936
22/02/20244.34.1Mozilla Firefox Javascript URI cross site scriptingWeb BrowserNot DefinedOfficial Fix0.000430.05CVE-2024-26281
22/02/20244.34.1Mozilla Focus 302 Redirect cross site scriptingWeb BrowserNot DefinedOfficial Fix0.000430.02CVE-2024-26284
22/02/20244.34.1Mozilla Firefox AMP URL cross site scriptingWeb BrowserNot DefinedOfficial Fix0.000430.04CVE-2024-26282
22/02/20244.34.1Mozilla Firefox Javascript URI cross site scriptingWeb BrowserNot DefinedOfficial Fix0.000430.04CVE-2024-26283
22/02/20244.34.1Mozilla Focus Javascript URI cross site scriptingWeb BrowserNot DefinedOfficial Fix0.000430.04CVE-2024-1563
20/02/20244.34.1Mozilla Firefox firefox Protocol vulnérabilité inconnueWeb BrowserNot DefinedOfficial Fix0.000430.03CVE-2024-1555
20/02/20244.34.1Mozilla Firefox API fetch vulnérabilité inconnueWeb BrowserNot DefinedOfficial Fix0.000430.04CVE-2024-1554
20/02/20246.36.0Mozilla Firefox buffer overflowWeb BrowserNot DefinedOfficial Fix0.000430.02CVE-2024-1556

3182 plus d'entrées ne sont pas affichées

Do you want to use VulDB in your project?

Use the official API to access entries easily!