Known vulnerabilities in firefox - page 18

Vendor: OpenAnolis
Software: firefox
Software CPE: cpe:2.3:o:openanolis:firefox:*:*:*:*:*:anolis_os:*:*
Total vulnerabilities: 701
Public exploits: 11
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting firefox firefox is affected by 701 known vulnerabilities: 5 critical, 341 high, 233 medium, 122 low Critical High Medium Low

Vulnerabilities (701)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105319 - Memory corruption
CVE-2025-1938
CWE-119 High
No
No
128.8.0-1.0.1, 128.8.0-1.0.2 05.03.2025 SB2025030502
SB2025030503
SB2025030504
and 35 more
#VU105318 - Improper input validation
CVE-2025-1936
CWE-20 Low
No
No
128.8.0-1.0.1, 128.8.0-1.0.2 05.03.2025 SB2025030502
SB2025030503
SB2025030504
and 33 more
#VU105308 - Improper Restriction of Rendered UI Layers or Frames
CVE-2025-1935
CWE-1021 Low
No
No
128.8.0-1.0.1, 128.8.0-1.0.2 05.03.2025 SB2025030502
SB2025030503
SB2025030504
and 33 more
#VU105307 - Resource Management Errors
CVE-2025-1934
CWE-399 Medium
No
No
128.8.0-1.0.1, 128.8.0-1.0.2 05.03.2025 SB2025030502
SB2025030503
SB2025030504
and 33 more
#VU105306 - Out-of-bounds write
CVE-2025-1932
CWE-787 High
No
No
128.8.0-1.0.1, 128.8.0-1.0.2 05.03.2025 SB2025030502
SB2025030503
SB2025030504
and 33 more
#VU105304 - Memory corruption
CVE-2025-1937
CWE-119 High
No
No
128.8.0-1.0.1, 128.8.0-1.0.2 05.03.2025 SB2025030502
SB2025030503
SB2025030504
and 36 more
#VU105303 - Memory corruption
CVE-2025-1933
CWE-119 High
No
No
128.8.0-1.0.1, 128.8.0-1.0.2 05.03.2025 SB2025030502
SB2025030503
SB2025030504
and 33 more
#VU105302 - Use After Free
CVE-2025-1931
CWE-416 High
No
No
128.8.0-1.0.1, 128.8.0-1.0.2 04.03.2025 SB2025030502
SB2025030503
SB2025030504
and 33 more
#VU105301 - Use After Free
CVE-2025-1930
CWE-416 High
No
No
128.8.0-1.0.1, 128.8.0-1.0.2 04.03.2025 SB2025030502
SB2025030503
SB2025030504
and 23 more
#VU103611 - Memory corruption
CVE-2025-1017
CWE-119 High
No
No
128.7.0-1.0.1, 128.7.0-1.0.2 04.02.2025 SB2025020463
SB2025020464
SB2025020465
and 34 more
#VU103610 - Improper Certificate Validation
CVE-2025-1014
CWE-295 Low
No
No
128.7.0-1.0.1, 128.7.0-1.0.2 04.02.2025 SB2025020463
SB2025020464
SB2025020465
and 34 more
#VU103609 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-1013
CWE-362 Low
No
No
128.7.0-1.0.1, 128.7.0-1.0.2 04.02.2025 SB2025020463
SB2025020464
SB2025020465
and 34 more
#VU103608 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-1011
CWE-94 High
No
No
128.7.0-1.0.1, 128.7.0-1.0.2 04.02.2025 SB2025020463
SB2025020464
SB2025020465
and 34 more
#VU103607 - Memory corruption
CVE-2025-1016
CWE-119 High
No
No
128.7.0-1.0.1, 128.7.0-1.0.2 04.02.2025 SB2025020463
SB2025020464
SB2025020465
and 34 more
#VU103606 - Use After Free
CVE-2025-1012
CWE-416 High
No
No
128.7.0-1.0.1, 128.7.0-1.0.2 04.02.2025 SB2025020463
SB2025020464
SB2025020465
and 34 more
#VU103605 - Use After Free
CVE-2025-1010
CWE-416 High
No
No
128.7.0-1.0.1, 128.7.0-1.0.2 04.02.2025 SB2025020463
SB2025020464
SB2025020465
and 34 more
#VU100956 - Error Handling
CVE-2024-11696
CWE-388 Medium
No
No
128.5.1-1.0.1, 128.5.1-1.0.2 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 40 more
#VU100955 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-11695
CWE-451 Medium
No
No
128.5.1-1.0.1, 128.5.1-1.0.2 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 40 more
#VU100953 - Insufficient UI Warning of Dangerous Operations
CVE-2024-11692
CWE-357 Low
No
No
128.5.1-1.0.1, 128.5.1-1.0.2 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 43 more
#VU100952 - Security Features
CVE-2024-11694
CWE-254 Medium
No
No
128.5.1-1.0.1, 128.5.1-1.0.2 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 41 more


Showing elements 341 - 360 out of 701