Description
Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, perform cross-site scripting attack, spoof user interface, bypass security restrictions, execute arbitrary code, obtain sensitive information.
Below is a complete list of vulnerabilities:
- Corrupt pointer dereference vulnerability in js::CheckTracedThing can be exploited to cause denial of service
- Denial of service vulnerability in HTTP/2 can be exploited remotely to cause denial of service.
- Integer overflow vulnerability in OpenType sanitizer can be exploited to cause denial of service.
- Out of bounds memory read in MSubstr can be exploited to cause denial of service.
- Memory safety vulnerability can be exploited to execute arbitrary code.
- Use after free vulnerability can be exploited to cause denial of service or execute arbitrary code.
- Use of uninitialized memory vulnerability in MarkStack assignment operator can be exploited to cause denial of service or execute arbitrary code.
- Out of bounds memory read can be exploited to cause denial of service.
- Use after free vulnerability in WASM garbage collection can be exploited to cause denial of service or execute arbitrary code.
- Information disclosure vulnerability in GetBoundName can be exploited to obtain sensitive information.
- Security vulnerability can be exploited to bypass security restrictions.
- Out of memory conditions vulnerability can be exploited to cause denial of service.
- Use after free vulnerability in networking can be exploited to cause denial of service or execute arbitrary code.
Fiches de renseignement originales
Exploitation
Public exploits exist for this vulnerability.
Produits associés
Liste CVE
- CVE-2024-3858 critical
- CVE-2024-3302 warning
- CVE-2024-3859 high
- CVE-2024-3855 high
- CVE-2024-3864 critical
- CVE-2024-3861 warning
- CVE-2024-3862 high
- CVE-2024-3853 critical
- CVE-2024-3857 critical
- CVE-2024-3854 critical
- CVE-2024-3856 critical
- CVE-2024-3852 critical
- CVE-2024-3863 critical
- CVE-2024-3860 high
- CVE-2024-3865 critical
- CVE-2024-5702 critical
En savoir plus
Découvrez les statistiques de la propagation des vulnérabilités dans votre région statistics.securelist.com
Vous avez trouvé une inexactitude dans la description de cette vulnérabilité ? Faites-le nous savoir !