FO
Product
Firefox OS
On CISA KEVExploited in the wild
14
CVEs
1
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 3Low 1
Watch
Add Firefox OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-4495 In wildKEV | 8.8 | Aug 8 | Mozilla Firefox Security Feature Bypass Vulnerability Affected: before 2.2 |
| CVE-2015-8511 | 6.4 | Jan 9 | Race condition in the lockscreen feature in Mozilla Firefox OS before 2.5 allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors Affected: through 2.2 |
| CVE-2015-8510 | 6.1 | Jan 9 | Cross-site scripting (XSS) vulnerability in the internationalization feature in the default homescreen app in Mozilla Firefox OS before 2.5 allows user-assisted remote attackers… Affected: through 2.2 |
| CVE-2015-8512 | 4.6 | Jan 9 | The lockscreen feature in Mozilla Firefox OS before 2.5 does not properly restrict failed authentication attempts, which makes it easier for physically proximate attackers to… Affected: through 2.2 |
| CVE-2015-4000 | 3.7 | May 21 | The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows… Affected: 2.2 |
| CVE-2015-4489 | – | Aug 16 | The nsTArray_Impl class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause a denial of service (memory… Affected: through 2.1.0 |
| CVE-2015-4488 | – | Aug 16 | Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to… Affected: 2.1.0 |
| CVE-2015-4487 | – | Aug 16 | The nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause a denial of… Affected: through 2.1.0 |
| CVE-2015-5962 | – | Aug 8 | Integer signedness error in the SharedBufferManagerParent::RecvAllocateGrallocBuffer function in the buffer-management implementation in the graphics layer in Mozilla Firefox OS… Affected: through 2.1.0 |
| CVE-2015-5961 | – | Aug 8 | The COPPA error page in the Accounts setup dialog in Mozilla Firefox OS before 2.2 embeds content from an external web server URL into the System process, which allows… Affected: through 2.1.0 |
| CVE-2015-5960 | – | Aug 8 | Mozilla Firefox OS before 2.2 allows physically proximate attackers to bypass the pass-code protection mechanism and access USB Mass Storage (UMS) media volumes by using the USB… Affected: through 2.1.0 |
| CVE-2015-4494 | – | Aug 8 | Mozilla Firefox OS before 2.2 does not require the wifi-manage privilege for reading a Wi-Fi system message, which allows attackers to obtain potentially sensitive information via… Affected: through 2.1.0 |
| CVE-2015-2745 | – | Aug 8 | Multiple cross-site scripting (XSS) vulnerabilities in the Search app in Gaia in Mozilla Firefox OS before 2.2 allow remote attackers to inject arbitrary HTML via the (1) name or… Affected: through 2.1.0 |
| CVE-2015-2744 | – | Aug 8 | Cross-site scripting (XSS) vulnerability in the Search app in Gaia in Mozilla Firefox OS before 2.2 allows remote attackers to inject arbitrary HTML via a crafted search link that… Affected: through 2.1.0 |
Showing 14