5 source-linked records in the current knowledge graph.
Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA KEV ↗ · unattributed attributionMoxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attributionMozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attributionMozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code execution. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attributionMozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attribution