259
public CVEs overlapping this major version
- Critical58
- High113
- Medium75
- Low13
Version security report
Firefox 150 security vulnerabilities
These public CVE records overlap Firefox major version 150. Matching is based on disclosed version ranges, not an exploit test.
CVE list
Critical CVSS 10.0
Sandbox escape due to invalid pointer in the Disability Access APIs component.
Fixed in 153
Critical CVSS 9.8
Integer overflow in the Networking: JAR component.
Fixed in 151
Critical CVSS 9.8
Sandbox escape in the Profile Backup component.
Fixed in 150.0.3
Critical CVSS 9.8
Incorrect boundary conditions in the Audio/Video: Playback component.
Fixed in 150
Critical CVSS 9.8
Mitigation bypass in the DOM: Security component.
Fixed in 150
Critical CVSS 9.8
Mitigation bypass in the Networking: Cookies component.
Fixed in 150
Critical CVSS 9.8
Mitigation bypass in the Networking: Cookies component.
Fixed in 150
Critical CVSS 9.8
Uninitialized memory in the Audio/Video: Web Codecs component.
Fixed in 150
Critical CVSS 9.8
Memory safety bugs present in Firefox ESR 140.
Fixed in 153
Critical CVSS 9.8
Memory safety bugs present in Firefox 152.
Fixed in 153
Critical CVSS 9.8
JIT miscompilation in the JavaScript Engine: JIT component.
Fixed in 153
Critical CVSS 9.8
Integer overflow in the Audio/Video: Playback component.
Fixed in 153
Critical CVSS 9.8
Mitigation bypass in the DOM: Service Workers component.
Fixed in 153
Critical CVSS 9.8
Integer overflow in the Graphics: ImageLib component.
Fixed in 153
Critical CVSS 9.8
Integer overflow in the Audio/Video component.
Fixed in 153
Critical CVSS 9.8
Incorrect boundary conditions, integer overflow in the Libraries component in NSS.
Fixed in 153
Critical CVSS 9.8
Sandbox escape in the DOM: Networking component.
Fixed in 153
Critical CVSS 9.8
Site isolation issue in the Networking component.
Fixed in 153
Critical CVSS 9.8
Mitigation bypass in the DOM: Networking component.
Fixed in 153
Critical CVSS 9.8
Mitigation bypass in the DOM: Service Workers component.
Fixed in 153
Critical CVSS 9.8
Mitigation bypass in the PDF Viewer component.
Fixed in 153
Critical CVSS 9.8
Site isolation issue in the Networking: HTTP component.
Fixed in 153
Critical CVSS 9.8
Integer overflow in the JavaScript: WebAssembly component.
Fixed in 153
Critical CVSS 9.8
Incorrect boundary conditions in the JavaScript: WebAssembly component.
Fixed in 153
Critical CVSS 9.8
JIT miscompilation in the JavaScript: WebAssembly component.
Fixed in 153
Critical CVSS 9.8
Memory safety bugs present in Firefox ESR 115.
Fixed in 153
Critical CVSS 9.8
Site isolation issue in the Graphics: WebRender component.
Fixed in 153
Critical CVSS 9.8
Incorrect boundary conditions in the Graphics component.
Fixed in 153
Critical CVSS 9.8
Sandbox escape due to use-after-free in the Disability Access APIs component.
Fixed in 153
Critical CVSS 9.8
JIT miscompilation in the JavaScript Engine: JIT component.
Fixed in 153
Critical CVSS 9.8
Invalid pointer in the DOM: Bindings (WebIDL) component.
Fixed in 153
Critical CVSS 9.8
Sandbox escape due to use-after-free in the Disability Access APIs component.
Fixed in 153
Critical CVSS 9.8
Sandbox escape due to use-after-free in the DOM: Navigation component.
Fixed in 153
Critical CVSS 9.8
Incorrect boundary conditions in the Audio/Video: cubeb component.
Fixed in 153
Critical CVSS 9.8
Same-origin policy bypass in the DOM: Navigation component.
Fixed in 153
Critical CVSS 9.8
Use-after-free in the Graphics: WebGPU component.
Fixed in 152
Critical CVSS 9.6
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.
Fixed in 151
Critical CVSS 9.6
Sandbox escape due to use-after-free in the Disability Access APIs component.
Fixed in 151
Critical CVSS 9.6
Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component.
Fixed in 150
Critical CVSS 9.6
Sandbox escape due to incorrect boundary conditions in the Networking component.
Fixed in 152
Critical CVSS 9.6
Sandbox escape in the Security: Process Sandboxing component.
Fixed in 152
Critical CVSS 9.6
Sandbox escape in the DOM: Navigation component.
Fixed in 152
Critical CVSS 9.6
Sandbox escape in the DOM: Workers component.
Fixed in 152
Critical CVSS 9.3
Same-origin policy bypass in the Networking: HTTP component.
Fixed in 151
Critical CVSS 9.1
Same-origin policy bypass in the DOM: Networking component.
Fixed in 151
Critical CVSS 9.1
Mitigation bypass in the Networking component.
Fixed in 153
Critical CVSS 9.1
Mitigation bypass in the DOM: Security component.
Fixed in 153
Critical CVSS 9.1
Incorrect boundary conditions in the Graphics: WebGPU component.
Fixed in 153
Critical CVSS 9.1
JIT miscompilation in the JavaScript Engine: JIT component.
Fixed in 153
Critical CVSS 9.1
Mitigation bypass in the Enterprise Policies component.
Fixed in 153
Critical CVSS 9.1
Same-origin policy bypass in the Networking: DNS component.
Fixed in 153
Critical CVSS 9.1
Mitigation bypass in the Networking component.
Fixed in 153
Critical CVSS 9.1
Mitigation bypass in the DOM: Networking component.
Fixed in 153
Critical CVSS 9.1
Incorrect boundary conditions in the Audio/Video: Playback component.
Fixed in 153
Critical CVSS 9.1
Incorrect boundary conditions in the Audio/Video: GMP component.
Fixed in 153
Critical CVSS 9.1
Mitigation bypass in the DOM: Security component.
Fixed in 152
Critical CVSS 9.1
Mitigation bypass in the DOM: Security component.
Fixed in 152
Critical CVSS 9.1
Same-origin policy bypass in the Networking: Cookies component.
Fixed in 152
High CVSS 8.8
Memory safety bugs present in Firefox ESR 115.
Fixed in 151
High CVSS 8.8
Memory safety bugs present in Firefox ESR 140.
Fixed in 151
Showing the highest-severity 60 of 259 records.