| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159. |
| Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159. |
| Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159. |
| Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159. |
| Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159. |
| Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159. |
| Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, Thunderbird 153.5, and Firefox ESR 115.44. |
| Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. |
| Information disclosure in the Networking: DNS component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. |
| Integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. |
| Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. |
| Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. |
| Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. |
| Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. |
| Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. |
| Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. |
| Incorrect boundary conditions in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. |
| GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when a merge request in a public project referenced a confidential issue from a private project, an authenticated user with no project membership could have read the confidential issue's title, due to a viewer-independent fragment cache key that incorrectly shared per-user-redacted rendered content across all users. |
| Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. |
| Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. |