Threat database

In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and spoofing attacks. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

CVE-2015-4495 is a security feature bypass vulnerability in Mozilla Firefox that allows remote attackers to bypass the Same Origin Policy, potentially enabling them to read arbitrary files or escalate privileges.

CVE-2019-11707 is a type confusion vulnerability in Mozilla Firefox and Thunderbird that arises from issues in the Array.pop JavaScript method. This flaw can lead to an exploitable crash when manipulating JavaScript objects. It has been observed to be exploited in the wild.

CVE-2019-11708 is a sandbox escape vulnerability in Mozilla Firefox and Thunderbird that could allow remote code execution. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2013-1690 is a vulnerability in Mozilla Firefox and Thunderbird where improper handling of onreadystatechange events combined with page reloading can lead to denial-of-service (DoS) or potentially allow execution of malicious code. This flaw has been exploited in the wild. No specific affected versions or patch information are provided in the input data.

Mozilla Firefox has a use-after-free vulnerability in its WebGPU IPC Framework that can be exploited to achieve arbitrary code execution. This vulnerability is known to have been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2022-26485 is a use-after-free vulnerability in Mozilla Firefox's XSLT parameter processing. This flaw can be exploited to achieve arbitrary code execution. The vulnerability has been observed in the wild, indicating active exploitation. No specific affected versions or patch information is provided in the input data.

CVE-2013-1675 is an information disclosure vulnerability in Mozilla Firefox caused by improper initialization of data structures related to SVG zoom events. This flaw allows remote attackers to obtain sensitive information from process memory by tricking users into visiting a crafted website. The vulnerability has been exploited in the wild and is considered high severity.

CVE-2019-17026 is a high severity type confusion vulnerability in Mozilla Firefox and Thunderbird. It arises from incorrect alias information in the IonMonkey JIT compiler when setting array elements. This flaw has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2020-6820 is a use-after-free vulnerability in Mozilla Firefox and Thunderbird caused by a race condition when handling a ReadableStream under certain conditions. This flaw can lead to memory corruption with unspecified impacts. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2020-6819 is a use-after-free vulnerability in Mozilla Firefox and Thunderbird caused by a race condition in the nsDocShell destructor. This flaw can lead to memory corruption with unspecified impacts. It has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the input data.