Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2019-11707 — Mozilla Firefox and Thunderbird Type Confusion Vulnerability
Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash.
|
Mozilla | Firefox and Thunderbird | May 23, 2022 | Jun 13, 2022 | |
|
CVE-2019-11708 — Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability
Mozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution.
|
Mozilla | Firefox and Thunderbird | May 23, 2022 | Jun 13, 2022 | |
|
CVE-2013-1690 — Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability
Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.
|
Mozilla | Firefox and Thunderbird | Mar 28, 2022 | Apr 18, 2022 | |
|
CVE-2019-17026 — Mozilla Firefox And Thunderbird Type Confusion Vulnerability
Mozilla Firefox and Thunderbird contain a type confusion vulnerability due to incorrect alias information in the IonMonkey JIT compiler when setting array elements.
|
Mozilla | Firefox and Thunderbird | Nov 3, 2021 | May 3, 2022 | |
|
CVE-2020-6819 — Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
Mozilla Firefox and Thunderbird contain a race condition vulnerability when running the nsDocShell destructor under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts.
|
Mozilla | Firefox and Thunderbird | Nov 3, 2021 | May 3, 2022 | |
|
CVE-2020-6820 — Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
Mozilla Firefox and Thunderbird contain a race condition vulnerability when handling a ReadableStream under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts.
|
Mozilla | Firefox and Thunderbird | Nov 3, 2021 | May 3, 2022 |
Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash.
Firefox and Thunderbird · May 23, 2022
Mozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution.
Firefox and Thunderbird · May 23, 2022
Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.
Firefox and Thunderbird · Mar 28, 2022
Mozilla Firefox and Thunderbird contain a type confusion vulnerability due to incorrect alias information in the IonMonkey JIT compiler when setting array elements.
Firefox and Thunderbird · Nov 3, 2021
Mozilla Firefox and Thunderbird contain a race condition vulnerability when running the nsDocShell destructor under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts.
Firefox and Thunderbird · Nov 3, 2021
Mozilla Firefox and Thunderbird contain a race condition vulnerability when handling a ReadableStream under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts.
Firefox and Thunderbird · Nov 3, 2021