Known vulnerabilities in firefox - page 19

Vendor: OpenAnolis
Software: firefox
Software CPE: cpe:2.3:o:openanolis:firefox:*:*:*:*:*:anolis_os:*:*
Total vulnerabilities: 701
Public exploits: 11
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting firefox firefox is affected by 701 known vulnerabilities: 5 critical, 341 high, 233 medium, 122 low Critical High Medium Low

Vulnerabilities (701)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU115736 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2025-10534
CWE-451 Low
No
No
140.3.0-1 17.09.2025 SB2025091769
SB2025091771
SB2025101603
#VU115735 - Security Features
CVE-2025-10531
CWE-254 Medium
No
No
140.3.0-1 17.09.2025 SB2025091769
SB2025091771
SB2025101603
#VU100959 - Memory corruption
CVE-2024-11699
CWE-119 High
No
No
128.5.1-1.0.1, 128.5.1-1.0.2 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 40 more
#VU100957 - Data Handling
CVE-2024-11697
CWE-19 Low
No
No
128.5.1-1.0.1, 128.5.1-1.0.2 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 43 more
#VU99490 - Memory corruption
CVE-2024-10467
CWE-119 High
No
No
128.4.0-1.0.1, 128.4.0-1.0.2 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99489 - Resource Management Errors
CVE-2024-10466
CWE-399 Low
No
No
128.4.0-1.0.1, 128.4.0-1.0.2 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99488 - Insufficient UI Warning of Dangerous Operations
CVE-2024-10465
CWE-357 Low
No
No
128.4.0-1.0.1, 128.4.0-1.0.2 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99487 - Resource Management Errors
CVE-2024-10464
CWE-399 Low
No
No
128.4.0-1.0.1, 128.4.0-1.0.2 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99486 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-10462
CWE-451 Medium
No
No
128.4.0-1.0.1, 128.4.0-1.0.2 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99485 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-10461
CWE-79 Medium
No
No
128.4.0-1.0.1, 128.4.0-1.0.2 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99484 - Insufficient UI Warning of Dangerous Operations
CVE-2024-10460
CWE-357 Low
No
No
128.4.0-1.0.1, 128.4.0-1.0.2 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99482 - Exposure of sensitive information to an unauthorized actor
CVE-2024-10463
CWE-200 Low
No
No
128.4.0-1.0.1, 128.4.0-1.0.2 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99481 - Use After Free
CVE-2024-10459
CWE-416 High
No
No
128.4.0-1.0.1, 128.4.0-1.0.2 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99480 - Permissions, Privileges, and Access Controls
CVE-2024-10458
CWE-264 Medium
No
No
128.4.0-1.0.1, 128.4.0-1.0.2 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU98333 - Use After Free
CVE-2024-9680
CWE-416 Critical
Available
Exploited
128.3.1-1, 128.3.1-2.0.1, 128.3.1-2.0.2 09.10.2024 SB2024100998
SB2024101002
SB2024101049
and 44 more
#VU97413 - Type confusion
CVE-2024-7652
CWE-843 High
No
No
128.2.0-1.0.1, 128.2.0-1.0.2 17.09.2024 SB2024070955
SB2024071650
SB2024072101
and 20 more
#VU96738 - Memory corruption
CVE-2024-8384
CWE-119 High
No
No
128.2.0-1.0.1, 128.2.0-1.0.2 03.09.2024 SB2024090361
SB2024090401
SB2024090425
and 39 more
#VU96737 - Improper Authorization in Handler for Custom URL Scheme
CVE-2024-8383
CWE-939 Medium
No
No
128.2.0-1.0.1, 128.2.0-1.0.2 03.09.2024 SB2024090361
SB2024090401
SB2024090425
and 28 more
#VU96736 - Exposed Dangerous Method or Function
CVE-2024-8382
CWE-749 Low
No
No
128.2.0-1.0.1, 128.2.0-1.0.2 03.09.2024 SB2024090361
SB2024090401
SB2024090425
and 39 more
#VU96735 - Type confusion
CVE-2024-8381
CWE-843 High
Available
No
128.2.0-1.0.1, 128.2.0-1.0.2 03.09.2024 SB2024090361
SB2024090401
SB2024090425
and 39 more


Showing elements 361 - 380 out of 701