Known vulnerabilities in Firefox for Android 89.1.1

Vendor: Mozilla
Version: 89.1.1
Software CPE: cpe:2.3:a:mozilla:firefox_for_android:*:*:*:*:*:*:*:*
Total vulnerabilities: 19
Public exploits: 3
Known exploited (KEV): 4
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Firefox for Android version 89.1.1 Firefox for Android 89.1.1 is affected by 19 vulnerabilities: 4 critical, 2 high, 8 medium, 5 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU84567 - Memory corruption
CVE-2023-6864
CWE-119 High
No
No
121.0 19.12.2023 SB2023121946
SB2023121947
SB2023121951
and 41 more
#VU84566 - Reliance on Undefined, Unspecified, or Implementation-Defined Behavior
CVE-2023-6863
CWE-758 Low
No
No
121.0 19.12.2023 SB2023121946
SB2023121947
SB2023121951
and 40 more
#VU84564 - Heap-based Buffer Overflow
CVE-2023-6861
CWE-122 Medium
No
No
121.0 19.12.2023 SB2023121946
SB2023121947
SB2023121951
and 41 more
#VU84563 - Multiple Interpretations of UI Input
CVE-2023-6867
CWE-450 Medium
No
No
121.0 19.12.2023 SB2023121946
SB2023121951
SB2023121965
and 21 more
#VU84562 - Security Features
CVE-2023-6860
CWE-254 Medium
No
No
121.0 19.12.2023 SB2023121946
SB2023121947
SB2023121951
and 41 more
#VU84561 - Use After Free
CVE-2023-6859
CWE-416 Low
No
No
121.0 19.12.2023 SB2023121946
SB2023121947
SB2023121951
and 41 more
#VU84560 - Heap-based Buffer Overflow
CVE-2023-6858
CWE-122 Low
No
No
121.0 19.12.2023 SB2023121946
SB2023121947
SB2023121951
and 41 more
#VU84559 - Buffer Underwrite ('Buffer Underflow')
CVE-2023-6857
CWE-124 Low
No
No
121.0 19.12.2023 SB2023121946
SB2023121947
SB2023121951
and 41 more
#VU84558 - Use of Uninitialized Variable
CVE-2023-6865
CWE-457 Medium
No
No
121.0 19.12.2023 SB2023121946
SB2023121951
SB2023121965
and 21 more
#VU84557 - Heap-based Buffer Overflow
CVE-2023-6856
CWE-122 High
No
No
121.0 19.12.2023 SB2023121946
SB2023121947
SB2023121951
and 41 more
#VU81244 - Heap-based Buffer Overflow
CVE-2023-5217
CWE-122 Critical
Public exploit available
Exploited
118.1.0 27.09.2023 SB2023092804
SB2023092847
SB2023092851
and 101 more
#VU80637 - Heap-based Buffer Overflow
CVE-2023-4863
CWE-122 Critical
Public exploit available
Exploited
117.0.1 11.09.2023 SB2023091178
SB2023091245
SB2023091265
and 137 more
#VU61033 - Use After Free
CVE-2022-26486
CWE-416 Critical
No
Exploited
97.3.0 05.03.2022 SB2022030501
SB2022030720
SB2022030724
and 26 more
#VU61032 - Use After Free
CVE-2022-26485
CWE-416 Critical
Public exploit available
Exploited
97.3.0 05.03.2022 SB2022030501
SB2022030720
SB2022030724
and 28 more
#VU59375 - Improper input validation
CVE-2022-22749
CWE-20 Medium
No
No
96.1.0 11.01.2022 SB2022011114
#VU56371 - Permissions, Privileges, and Access Controls
CVE-2021-29993
CWE-264 Medium
No
No
92.1.0 07.09.2021 SB2021090711
#VU55681 - Resource Management Errors
CVE-2021-29983
CWE-399 Medium
No
No
91.1.0 10.08.2021 SB2021081008
SB2021100414
SB2021092228
and 5 more
#VU54682 - Permissions, Privileges, and Access Controls
CVE-2021-29973
CWE-264 Low
No
No
90.1.0 13.07.2021 SB2021071316
#VU54680 - Permissions, Privileges, and Access Controls
CVE-2021-29971
CWE-264 Medium
No
No
90.1.0 13.07.2021 SB2021071316