FF
Product
Firefox Focus
On CISA KEVExploited in the wild
20
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 5Medium 12Low 0
Watch
Add Firefox Focus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-26485 In wildKEV | 8.8 | Dec 22 | Mozilla Firefox Use-After-Free Vulnerability Affected: before 97.3.0 |
| CVE-2024-1563 | 8.1 | Feb 22 | An attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI when opening an external URL with a custom Firefox scheme and a timeout race… Affected: before 122.0 |
| CVE-2026-8945 | 7.5 | May 19 | Sandbox escape in Firefox and Firefox Focus for Android Affected: before 151.0 |
| CVE-2024-0605 | 7.5 | Jan 22 | Using a javascript: URI with a setTimeout race condition, an attacker can execute unauthorized scripts on top origin sites in urlbar Affected: before 122.0 |
| CVE-2023-25743 | 7.5 | Jun 2 | A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.<br>*This bug only affects Firefox Focus Affected: All versions, or not specified |
Showing 5