Описание
Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, cause denial of service, obtain sensitive information, perform cross-site scripting attack.
Below is a complete list of vulnerabilities:
- Security vulnerability when using the ‘Save As’ functionality can be exploited to bypass security restrictions.
- Use after free vulnerability in JavaScript object transplant can be exploited to cause denial of service or execute arbitrary code.
- Heap buffer overflow vulnerability can be exploited to cause denial of service.
- Information disclosure vulnerability in Offscreen Canvas can be exploited to obtain sensitive information.
- Information disclosure vulnerability can be exploited to obtain sensitive information.
- Security vulnerability can be exploited to bypass security restrictions.
- Сorrupt memory leading vulnerability in Text Fragments can be exploited to a potentially exploitable crash.
- Use after free vulnerability in JavaScript Strings can be exploited to cause denial of service or execute arbitrary code.
- Сorrupt memory leading vulnerability can be exploited to cause denial of service.
- Cross-site scripting (XSS) vulnerability in cookie prefixes can be exploited to perform cross-site scripting attack.
- Information disclosure vulnerability in Screenshot functionality in Firefox can be exploited to obtain sensitive information.
- Memory safety vulnerability can be exploited to execute arbitrary code.
Первичный источник обнаружения
Связанные продукты
Список CVE
- CVE-2024-5692 high
- CVE-2024-5688 critical
- CVE-2024-5700 high
- CVE-2024-5693 high
- CVE-2024-5690 warning
- CVE-2024-5691 warning
- CVE-2024-5696 critical
- CVE-2024-5694 critical
- CVE-2024-5695 critical
- CVE-2024-5687 high
- CVE-2024-5698 high
- CVE-2024-5699 critical
- CVE-2024-5697 warning
- CVE-2024-5701 critical
- CVE-2024-5689 warning
Смотрите также
Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com
Нашли неточность в описании этой уязвимости? Дайте нам знать!