Filters
Focus was incorrectly allowing internal links to utilize the app scheme used for deeplinking, which …
9.1
First published (updated )
Websites could utilize Javascript links to spoof URL addresses in the Focus navigation bar
4.7
EPSS
0.05%
First published (updated )
The file scheme of URLs would be hidden, resulting in potential spoofing of a website's address in t…
4.4
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android…
9.1
First published (updated )
An attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory cor…
9.8
First published (updated )
A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by …
5.5
First published (updated )
A website could have obscured the fullscreen notification by using a combination of window.open, ful…
4.3
First published (updated )
Following a Garbage Collector compaction, weak maps may have been accessed before they were correctl…
6.5
First published (updated )
Under specific circumstances a WebExtension may have received a jar:file:/// URI instead of a moz-ex…
4.3
First published (updated )
Using a redirect embedded into sourceMappingUrls could allow for navigation to external protocol lin…
6.1
First published (updated )
A newline in a filename could have been used to bypass the file extension security mechanisms that r…
9.8
First published (updated )
If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector c…
6.5
First published (updated )
Similar to CVE-2023-28163, this time when choosing 'Save Link As', suggested filenames containing en…
6.5
First published (updated )
When recording the screen while in Private Browsing on Firefox for Android the address bar and keybo…
6.5
First published (updated )
When a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain could …
6.5
First published (updated )
A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result.
6.5
First published (updated )
Mozilla developers Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the Mozilla Fuzzing Team r…
8.8
First published (updated )
Mozilla Firefox Use-After-Free Vulnerability
First published (updated )
Mozilla Firefox Use-After-Free Vulnerability
First published (updated )