| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Information disclosure in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. |
| Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. |
| Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. |
| Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. |
| Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. |
| Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. |
| Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. |
| Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. |
| Incorrect boundary conditions in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. |
| GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when a merge request in a public project referenced a confidential issue from a private project, an authenticated user with no project membership could have read the confidential issue's title, due to a viewer-independent fragment cache key that incorrectly shared per-user-redacted rendered content across all users. |
| Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. |
| Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. |
| Privilege escalation in the Toolkit component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. |
| Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. |
| Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. |
| Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. |
| Other issue in the Console component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. |
| Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. |
| Sandbox escape due to invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. |
| Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. |