Known vulnerabilities in Firefox for Android 97.3.0

Vendor: Mozilla
Version: 97.3.0
Software CPE: cpe:2.3:a:mozilla:firefox_for_android:*:*:*:*:*:*:*:*
Total vulnerabilities: 20
Public exploits: 3
Known exploited (KEV): 2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Firefox for Android version 97.3.0 Firefox for Android 97.3.0 is affected by 20 vulnerabilities: 2 critical, 6 high, 7 medium, 5 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU84567 - Memory corruption
CVE-2023-6864
CWE-119 High
No
No
121.0 19.12.2023 SB2023121946
SB2023121947
SB2023121951
and 41 more
#VU84566 - Reliance on Undefined, Unspecified, or Implementation-Defined Behavior
CVE-2023-6863
CWE-758 Low
No
No
121.0 19.12.2023 SB2023121946
SB2023121947
SB2023121951
and 40 more
#VU84564 - Heap-based Buffer Overflow
CVE-2023-6861
CWE-122 Medium
No
No
121.0 19.12.2023 SB2023121946
SB2023121947
SB2023121951
and 41 more
#VU84563 - Multiple Interpretations of UI Input
CVE-2023-6867
CWE-450 Medium
No
No
121.0 19.12.2023 SB2023121946
SB2023121951
SB2023121965
and 21 more
#VU84562 - Security Features
CVE-2023-6860
CWE-254 Medium
No
No
121.0 19.12.2023 SB2023121946
SB2023121947
SB2023121951
and 41 more
#VU84561 - Use After Free
CVE-2023-6859
CWE-416 Low
No
No
121.0 19.12.2023 SB2023121946
SB2023121947
SB2023121951
and 41 more
#VU84560 - Heap-based Buffer Overflow
CVE-2023-6858
CWE-122 Low
No
No
121.0 19.12.2023 SB2023121946
SB2023121947
SB2023121951
and 41 more
#VU84559 - Buffer Underwrite ('Buffer Underflow')
CVE-2023-6857
CWE-124 Low
No
No
121.0 19.12.2023 SB2023121946
SB2023121947
SB2023121951
and 41 more
#VU84558 - Use of Uninitialized Variable
CVE-2023-6865
CWE-457 Medium
No
No
121.0 19.12.2023 SB2023121946
SB2023121951
SB2023121965
and 21 more
#VU84557 - Heap-based Buffer Overflow
CVE-2023-6856
CWE-122 High
No
No
121.0 19.12.2023 SB2023121946
SB2023121947
SB2023121951
and 41 more
#VU81244 - Heap-based Buffer Overflow
CVE-2023-5217
CWE-122 Critical
Public exploit available
Exploited
118.1.0 27.09.2023 SB2023092804
SB2023092847
SB2023092851
and 101 more
#VU80637 - Heap-based Buffer Overflow
CVE-2023-4863
CWE-122 Critical
Public exploit available
Exploited
117.0.1 11.09.2023 SB2023091178
SB2023091245
SB2023091265
and 137 more
#VU67788 - Out-of-bounds read
CVE-2022-3266
CWE-125 High
No
No
105.1.0 02.10.2022 SB2022092029
SB2022100204
SB2022102745
and 3 more
#VU66724 - Memory corruption
CVE-2022-38478
CWE-119 High
No
No
104.1.0 23.08.2022 SB2022082315
SB2022082316
SB2022082411
and 36 more
#VU66720 - Permissions, Privileges, and Access Controls
CVE-2022-38473
CWE-264 Medium
No
No
104.1.0 23.08.2022 SB2022082315
SB2022082316
SB2022082411
and 36 more
#VU66719 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-38472
CWE-451 Medium
No
No
104.1.0 23.08.2022 SB2022082315
SB2022082316
SB2022082411
and 35 more
#VU64758 - Security Features
CVE-2022-34469
CWE-254 Low
No
No
102.1.1 29.06.2022 SB2022062902
SB2022081404
SB2022091450
and 2 more
#VU63502 - Improper input validation
CVE-2022-1529
CWE-20 High
No
No
100.3.0 21.05.2022 SB2022052102
SB2022052103
SB2022052104
and 30 more
#VU63501 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-1802
CWE-94 High
Public exploit available
No
100.3.0 21.05.2022 SB2022052102
SB2022052103
SB2022052104
and 32 more
#VU62761 - Security Features
CVE-2022-29910
CWE-254 Medium
No
No
100.1.0 03.05.2022 SB2022050314
SB2022081404