Known vulnerabilities in Firefox for iOS - page 3

Vendor: Mozilla
Software CPE: cpe:2.3:a:mozilla:firefox_for_ios:*:*:*:*:*:*:*:*
Total vulnerabilities: 53
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Firefox for iOS Firefox for iOS is affected by 53 known vulnerabilities: 1 critical, 5 high, 31 medium, 16 low Critical High Medium Low

Vulnerabilities (53)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82355 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-5758
CWE-79 Medium
No
No
119.0 25.10.2023 SB2023102505
SB2024010701
#VU80637 - Heap-based Buffer Overflow
CVE-2023-4863
CWE-122 Critical
Available
Exploited
117.3 11.09.2023 SB2023091178
SB2023091245
SB2023091265
and 137 more
#VU78059 - Improper input validation
CVE-2023-37456
CWE-20 Low
Available
No
115.0 11.07.2023 SB2023071139
#VU78058 - Insufficient UI Warning of Dangerous Operations
CVE-2023-37455
CWE-357 Medium
No
No
115.0 11.07.2023 SB2023071139
#VU64804 - Exposure of sensitive information to an unauthorized actor
CVE-2022-31746
CWE-200 Medium
No
No
102.0 29.06.2022 SB2022062926
#VU63918 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-1887
CWE-89 Medium
No
No
101.0 01.06.2022 SB2022060124
#VU53727 - Exposure of sensitive information to an unauthorized actor
CVE-2021-29958
CWE-200 Low
No
No
34.0 01.06.2021 SB2021060147
#VU32933 - Improper input validation
CVE-2020-15651
CWE-20 Medium
No
No
28.0 30.07.2020 SB2020073023
#VU32932 - Permissions, Privileges, and Access Controls
CVE-2020-15661
CWE-264 Medium
No
No
28.0 30.07.2020 SB2020073023
#VU32931 - Permissions, Privileges, and Access Controls
CVE-2020-15662
CWE-264 Medium
No
No
28.0 30.07.2020 SB2020073023
#VU29313 - Exposure of sensitive information to an unauthorized actor
CVE-2020-12414
CWE-200 Medium
No
No
27.0 26.06.2020 SB2020062617
#VU28368 - Exposure of sensitive information to an unauthorized actor
CVE-2020-12404
CWE-200 Low
No
No
26.0 29.05.2020 SB2020052916
#VU27481 - Exposure of sensitive information to an unauthorized actor
CVE-2020-6830
CWE-200 Low
No
No
25.0 02.05.2020 SB2020050204


Showing elements 41 - 60 out of 53