{
  "fix": "Mozilla Firefox ESR (da) 128.3.0",
  "url": "https://patchblox.com/security/fix/windows-app/mozilla.firefox.esr.da-128.3.0",
  "summary": "Mozilla Firefox ESR (da) 128.3.0, released October 1, 2024, fixes 178 CVEs in Mozilla Firefox ESR (da). 2 of them are being exploited (CVE-2023-4863); 2 on CISA KEV. Patch Radar priority: Patch now. The latest Mozilla Firefox ESR (da) is 153.7.0, which also fixes every one of these CVEs.",
  "platform": "windows-app",
  "type": "app-version",
  "title": "Mozilla Firefox ESR (da) 128.3.0",
  "released": "2024-10-01T00:00:00Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2023-4863, exploited (CISA KEV)",
  "supported": true,
  "cveCount": 178,
  "exploitedCveCount": 2,
  "kevCveCount": 2,
  "ransomwareCveCount": 0,
  "maxEpss": 0.99979,
  "maxCvss": 9.8,
  "appliesTo": [
    {
      "product": "Mozilla Firefox ESR (da)",
      "productUrl": "https://patchblox.com/security/product/windows-app/mozilla-firefox-esr-da",
      "fixedVersion": "128.3.0",
      "latestVersion": "153.7.0",
      "supported": true
    }
  ],
  "supersededBy": {
    "product": "Mozilla Firefox ESR (da)",
    "latestVersion": "153.7.0",
    "productUrl": "https://patchblox.com/security/product/windows-app/mozilla-firefox-esr-da"
  },
  "cves": [
    {
      "cveId": "CVE-2023-4863",
      "url": "https://patchblox.com/security/cve/CVE-2023-4863",
      "title": "Chromium: CVE-2023-4863 Heap buffer overflow in WebP",
      "priority": "Patch now",
      "severity": "high",
      "cvss": 9.6,
      "epss": 0.99979,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": true
    },
    {
      "cveId": "CVE-2023-5217",
      "url": "https://patchblox.com/security/cve/CVE-2023-5217",
      "title": "Chromium: CVE-2023-5217 Heap buffer overflow in vp8 encoding in libvpx",
      "priority": "Patch now",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.49013,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": true
    },
    {
      "cveId": "CVE-2024-29944",
      "url": "https://patchblox.com/security/cve/CVE-2024-29944",
      "title": "Mozilla Firefox ESR and 3 others: Inclusion of Web Functionality from an Untrusted Source",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 8.8,
      "epss": 0.047,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5176",
      "url": "https://patchblox.com/security/cve/CVE-2023-5176",
      "title": "Mozilla Firefox ESR and 5 others: Out-of-bounds Write",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.01388,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5174",
      "url": "https://patchblox.com/security/cve/CVE-2023-5174",
      "title": "Mozilla Firefox ESR and 5 others: Use After Free",
      "priority": "Urgent",
      "cvss": 9.8,
      "epss": 0.012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5168",
      "url": "https://patchblox.com/security/cve/CVE-2023-5168",
      "title": "Mozilla Firefox ESR and 5 others: Out-of-bounds Write",
      "priority": "Urgent",
      "cvss": 9.8,
      "epss": 0.01116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-6602",
      "url": "https://patchblox.com/security/cve/CVE-2024-6602",
      "title": "Memory corruption in NSS",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00985,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4056",
      "url": "https://patchblox.com/security/cve/CVE-2023-4056",
      "title": "Mozilla Firefox ESR and 3 others: Memory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115.0,\u2026",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00948,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4057",
      "url": "https://patchblox.com/security/cve/CVE-2023-4057",
      "title": "Mozilla Firefox ESR and 5 others: Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0.",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00888,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-3863",
      "url": "https://patchblox.com/security/cve/CVE-2024-3863",
      "title": "Mozilla Firefox ESR and 5 others: Unrestricted Upload of File with Dangerous Type",
      "priority": "Urgent",
      "cvss": 9.8,
      "epss": 0.00812,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4058",
      "url": "https://patchblox.com/security/cve/CVE-2023-4058",
      "title": "Mozilla Firefox ESR and 3 others: Memory safety bugs present in Firefox 115.",
      "priority": "Urgent",
      "cvss": 9.8,
      "epss": 0.00787,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-4367",
      "url": "https://patchblox.com/security/cve/CVE-2024-4367",
      "title": "Mozilla Firefox ESR and 6 others: Improper Check for Unusual or Exceptional Conditions",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.7066,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-29943",
      "url": "https://patchblox.com/security/cve/CVE-2024-29943",
      "title": "Mozilla Firefox ESR and 3 others: Out-of-bounds Read",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.22935,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6856",
      "url": "https://patchblox.com/security/cve/CVE-2023-6856",
      "title": "Mozilla Firefox ESR and 5 others: The WebGL \u0060DrawElementsInstanced\u0060 method was susceptible to a heap buffer overflow when used on systems\u2026",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.2063,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4050",
      "url": "https://patchblox.com/security/cve/CVE-2023-4050",
      "title": "Mozilla Firefox ESR and 3 others: In some cases, an untrusted input stream was copied to a stack buffer without checking its size.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.12584,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-0741",
      "url": "https://patchblox.com/security/cve/CVE-2024-0741",
      "title": "Mozilla Firefox ESR and 5 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.02155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6858",
      "url": "https://patchblox.com/security/cve/CVE-2023-6858",
      "title": "Mozilla Firefox ESR and 5 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.01544,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5730",
      "url": "https://patchblox.com/security/cve/CVE-2023-5730",
      "title": "Mozilla Firefox ESR and 5 others: Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.01541,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5724",
      "url": "https://patchblox.com/security/cve/CVE-2023-5724",
      "title": "Mozilla Firefox ESR and 5 others: Uncontrolled Resource Consumption",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.01521,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6861",
      "url": "https://patchblox.com/security/cve/CVE-2023-6861",
      "title": "Mozilla Firefox ESR and 5 others: The \u0060nsWindow::PickerOpen(void)\u0060 method was susceptible to a heap buffer overflow when running in headless\u2026",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.01411,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5728",
      "url": "https://patchblox.com/security/cve/CVE-2023-5728",
      "title": "Mozilla Firefox ESR and 5 others: Use After Free",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.01321,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-0743",
      "url": "https://patchblox.com/security/cve/CVE-2024-0743",
      "title": "Mozilla Firefox ESR and 5 others: Unchecked Return Value",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.5,
      "epss": 0.01285,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6864",
      "url": "https://patchblox.com/security/cve/CVE-2023-6864",
      "title": "Mozilla Firefox ESR and 5 others: Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5.",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.01194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5731",
      "url": "https://patchblox.com/security/cve/CVE-2023-5731",
      "title": "Mozilla Firefox ESR and 3 others: Memory safety bugs present in Firefox 118.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.01145,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4046",
      "url": "https://patchblox.com/security/cve/CVE-2023-4046",
      "title": "Mozilla Firefox ESR and 3 others: Allocation of Resources Without Limits or Throttling",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.01125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-2607",
      "url": "https://patchblox.com/security/cve/CVE-2024-2607",
      "title": "Mozilla Firefox ESR and 5 others: Write-what-where Condition",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 8.1,
      "epss": 0.01107,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6859",
      "url": "https://patchblox.com/security/cve/CVE-2023-6859",
      "title": "Mozilla Firefox ESR and 5 others: A use-after-free condition affected TLS socket creation when under memory pressure.",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.01092,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-5688",
      "url": "https://patchblox.com/security/cve/CVE-2024-5688",
      "title": "Mozilla Firefox ESR and 6 others: Use After Free",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.0107,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5175",
      "url": "https://patchblox.com/security/cve/CVE-2023-5175",
      "title": "Mozilla Firefox ESR and 3 others: Use After Free",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.01038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6863",
      "url": "https://patchblox.com/security/cve/CVE-2023-6863",
      "title": "Mozilla Firefox ESR and 5 others: The \u0060ShutdownObserver()\u0060 was susceptible to potentially undefined behavior due to its reliance on a dynamic\u2026",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.01037,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5172",
      "url": "https://patchblox.com/security/cve/CVE-2023-5172",
      "title": "Mozilla Firefox ESR and 3 others: Use After Free",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.01009,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-2612",
      "url": "https://patchblox.com/security/cve/CVE-2024-2612",
      "title": "Mozilla Firefox ESR and 5 others: Use After Free",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 8.1,
      "epss": 0.00971,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6212",
      "url": "https://patchblox.com/security/cve/CVE-2023-6212",
      "title": "Mozilla Firefox ESR and 5 others: Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00947,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4048",
      "url": "https://patchblox.com/security/cve/CVE-2023-4048",
      "title": "Mozilla Firefox ESR and 3 others: An out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in low\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00931,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5173",
      "url": "https://patchblox.com/security/cve/CVE-2023-5173",
      "title": "Mozilla Firefox ESR and 3 others: In a non-standard configuration of Firefox, an integer overflow could have occurred based on network\u2026",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.00911,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6207",
      "url": "https://patchblox.com/security/cve/CVE-2023-6207",
      "title": "Mozilla Firefox ESR and 5 others: Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00906,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6208",
      "url": "https://patchblox.com/security/cve/CVE-2023-6208",
      "title": "Mozilla Firefox ESR and 5 others: When using X11, text selected by the page using the Selection API was erroneously copied into the primary\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00888,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6865",
      "url": "https://patchblox.com/security/cve/CVE-2023-6865",
      "title": "Mozilla Firefox ESR and 3 others: \u0060EncryptingOutputStream\u0060 was susceptible to exposing uninitialized data.",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00888,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-2614",
      "url": "https://patchblox.com/security/cve/CVE-2024-2614",
      "title": "Mozilla Firefox ESR and 5 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 8.8,
      "epss": 0.00886,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6205",
      "url": "https://patchblox.com/security/cve/CVE-2023-6205",
      "title": "Mozilla Firefox ESR and 5 others: It was possible to cause the use of a MessagePort after it had already been freed, which could potentially\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00874,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-1553",
      "url": "https://patchblox.com/security/cve/CVE-2024-1553",
      "title": "Mozilla Firefox ESR and 5 others: Improper Restriction of Operations within the Bounds of a Memory Buffer",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00866,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-5702",
      "url": "https://patchblox.com/security/cve/CVE-2024-5702",
      "title": "Mozilla Firefox ESR and 5 others: Use After Free",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00857,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-3864",
      "url": "https://patchblox.com/security/cve/CVE-2024-3864",
      "title": "Mozilla Firefox ESR and 5 others: Improper Restriction of Operations within the Bounds of a Memory Buffer",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00854,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6873",
      "url": "https://patchblox.com/security/cve/CVE-2023-6873",
      "title": "Mozilla Firefox ESR and 3 others: Memory safety bugs present in Firefox 120.",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00853,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6204",
      "url": "https://patchblox.com/security/cve/CVE-2023-6204",
      "title": "Mozilla Firefox ESR and 5 others: On some systems\u2014depending on the graphics settings and drivers\u2014it was possible to force an out-of-bounds\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00841,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-0750",
      "url": "https://patchblox.com/security/cve/CVE-2024-0750",
      "title": "Mozilla Firefox ESR and 5 others: User Interface (UI) Misrepresentation of Critical Information",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00837,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4576",
      "url": "https://patchblox.com/security/cve/CVE-2023-4576",
      "title": "Integer Overflow in RecordedSourceSurfaceCreation",
      "priority": "High",
      "cvss": 8.6,
      "epss": 0.00821,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-5696",
      "url": "https://patchblox.com/security/cve/CVE-2024-5696",
      "title": "Mozilla Firefox ESR and 6 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.6,
      "epss": 0.00807,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5721",
      "url": "https://patchblox.com/security/cve/CVE-2023-5721",
      "title": "Mozilla Firefox ESR and 5 others: It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00807,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4584",
      "url": "https://patchblox.com/security/cve/CVE-2023-4584",
      "title": "Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00804,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4585",
      "url": "https://patchblox.com/security/cve/CVE-2023-4585",
      "title": "Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00774,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-5699",
      "url": "https://patchblox.com/security/cve/CVE-2024-5699",
      "title": "Mozilla Firefox ESR and 4 others: Improper Handling of Case Sensitivity",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.00773,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4053",
      "url": "https://patchblox.com/security/cve/CVE-2023-4053",
      "title": "Full screen notification obscured by external program",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00768,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-0755",
      "url": "https://patchblox.com/security/cve/CVE-2024-0755",
      "title": "Mozilla Firefox ESR and 5 others: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00751,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-3854",
      "url": "https://patchblox.com/security/cve/CVE-2024-3854",
      "title": "Mozilla Firefox ESR and 5 others: Out-of-bounds Read",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00733,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4055",
      "url": "https://patchblox.com/security/cve/CVE-2023-4055",
      "title": "Mozilla Firefox ESR and 3 others: Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00733,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-1546",
      "url": "https://patchblox.com/security/cve/CVE-2024-1546",
      "title": "Mozilla Firefox ESR and 5 others: Out-of-bounds Read",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00718,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5170",
      "url": "https://patchblox.com/security/cve/CVE-2023-5170",
      "title": "Mozilla Firefox ESR and 3 others: In canvas rendering, a compromised content process could have caused a surface to change unexpectedly,\u2026",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.4,
      "epss": 0.00718,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4583",
      "url": "https://patchblox.com/security/cve/CVE-2023-4583",
      "title": "Browsing Context potentially not cleared when closing Private Window",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00685,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6866",
      "url": "https://patchblox.com/security/cve/CVE-2023-6866",
      "title": "Mozilla Firefox ESR and 3 others: TypedArrays can be fallible and lacked proper exception handling.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00681,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-1547",
      "url": "https://patchblox.com/security/cve/CVE-2024-1547",
      "title": "Mozilla Firefox ESR and 5 others: Authentication Bypass by Spoofing",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00679,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6213",
      "url": "https://patchblox.com/security/cve/CVE-2023-6213",
      "title": "Mozilla Firefox ESR and 3 others: Memory safety bugs present in Firefox 119.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00668,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4574",
      "url": "https://patchblox.com/security/cve/CVE-2023-4574",
      "title": "Memory corruption in IPC ColorPickerShownCallback",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00663,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-6611",
      "url": "https://patchblox.com/security/cve/CVE-2024-6611",
      "title": "Incorrect handling of SameSite cookies",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.00662,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-0745",
      "url": "https://patchblox.com/security/cve/CVE-2024-0745",
      "title": "Mozilla Firefox ESR and 3 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00662,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4051",
      "url": "https://patchblox.com/security/cve/CVE-2023-4051",
      "title": "Full screen notification obscured by file open dialog",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.0066,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4575",
      "url": "https://patchblox.com/security/cve/CVE-2023-4575",
      "title": "Memory corruption in IPC FilePickerShownCallback",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00657,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-7652",
      "url": "https://patchblox.com/security/cve/CVE-2024-7652",
      "title": "Type Confusion in Async Generators in Javascript Engine",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.6,
      "epss": 0.00656,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4577",
      "url": "https://patchblox.com/security/cve/CVE-2023-4577",
      "title": "Memory corruption in JIT UpdateRegExpStatics",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00652,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6206",
      "url": "https://patchblox.com/security/cve/CVE-2023-6206",
      "title": "Mozilla Firefox ESR and 5 others: The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00642,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4049",
      "url": "https://patchblox.com/security/cve/CVE-2023-4049",
      "title": "Mozilla Firefox ESR and 3 others: Race conditions in reference counting code were found through code inspection.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00634,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-0751",
      "url": "https://patchblox.com/security/cve/CVE-2024-0751",
      "title": "Mozilla Firefox ESR and 5 others: Improper Privilege Management",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00633,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4047",
      "url": "https://patchblox.com/security/cve/CVE-2023-4047",
      "title": "Mozilla Firefox ESR and 3 others: Cross-Site Request Forgery (CSRF)",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00632,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4573",
      "url": "https://patchblox.com/security/cve/CVE-2023-4573",
      "title": "Memory corruption in IPC CanvasTranslator",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00632,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-3852",
      "url": "https://patchblox.com/security/cve/CVE-2024-3852",
      "title": "Mozilla Firefox ESR and 5 others: Symbolic Name not Mapping to Correct Object",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00627,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4578",
      "url": "https://patchblox.com/security/cve/CVE-2023-4578",
      "title": "Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00622,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-3856",
      "url": "https://patchblox.com/security/cve/CVE-2024-3856",
      "title": "Mozilla Firefox ESR and 3 others: Use After Free",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00613,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-0744",
      "url": "https://patchblox.com/security/cve/CVE-2024-0744",
      "title": "Mozilla Firefox ESR and 3 others: Improper Restriction of Operations within the Bounds of a Memory Buffer",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.00602,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-0742",
      "url": "https://patchblox.com/security/cve/CVE-2024-0742",
      "title": "Mozilla Firefox ESR and 5 others: It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00596,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-2615",
      "url": "https://patchblox.com/security/cve/CVE-2024-2615",
      "title": "Mozilla Firefox ESR and 3 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.00595,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-4770",
      "url": "https://patchblox.com/security/cve/CVE-2024-4770",
      "title": "Mozilla Firefox ESR and 6 others: Use After Free",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 8.8,
      "epss": 0.00592,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4045",
      "url": "https://patchblox.com/security/cve/CVE-2023-4045",
      "title": "Mozilla Firefox ESR and 3 others: Offscreen Canvas did not properly track cross-origin tainting, which could have been used to access image\u2026",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00589,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-5695",
      "url": "https://patchblox.com/security/cve/CVE-2024-5695",
      "title": "Mozilla Firefox ESR and 4 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.00577,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-5701",
      "url": "https://patchblox.com/security/cve/CVE-2024-5701",
      "title": "Mozilla Firefox ESR and 4 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.00577,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-6609",
      "url": "https://patchblox.com/security/cve/CVE-2024-6609",
      "title": "Memory corruption in NSS",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00576,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4581",
      "url": "https://patchblox.com/security/cve/CVE-2023-4581",
      "title": "XLL file extensions were downloadable without warnings",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00574,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-4764",
      "url": "https://patchblox.com/security/cve/CVE-2024-4764",
      "title": "Mozilla Firefox ESR and 4 others: Use After Free",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.00571,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-3858",
      "url": "https://patchblox.com/security/cve/CVE-2024-3858",
      "title": "Mozilla Firefox ESR and 3 others: NULL Pointer Dereference",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.00567,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-6607",
      "url": "https://patchblox.com/security/cve/CVE-2024-6607",
      "title": "Leaving pointerlock by pressing the escape key could be prevented",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00563,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-1557",
      "url": "https://patchblox.com/security/cve/CVE-2024-1557",
      "title": "Mozilla Firefox ESR and 3 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.1,
      "epss": 0.00558,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-4773",
      "url": "https://patchblox.com/security/cve/CVE-2024-4773",
      "title": "Mozilla Firefox ESR and 4 others: URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.00541,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-6604",
      "url": "https://patchblox.com/security/cve/CVE-2024-6604",
      "title": "Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.13",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.0054,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-6603",
      "url": "https://patchblox.com/security/cve/CVE-2024-6603",
      "title": "Memory corruption in thread creation",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00537,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-4777",
      "url": "https://patchblox.com/security/cve/CVE-2024-4777",
      "title": "Mozilla Firefox ESR and 6 others: Use After Free",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 8.8,
      "epss": 0.00536,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-4771",
      "url": "https://patchblox.com/security/cve/CVE-2024-4771",
      "title": "Mozilla Firefox ESR and 4 others: Use After Free",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.6,
      "epss": 0.00523,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-2613",
      "url": "https://patchblox.com/security/cve/CVE-2024-2613",
      "title": "Mozilla Firefox ESR and 3 others: Improper Restriction of Rendered UI Layers or Frames",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.00501,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-9399",
      "url": "https://patchblox.com/security/cve/CVE-2024-9399",
      "title": "Mozilla Firefox ESR and 7 others: Improper Resource Shutdown or Release",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00495,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-3865",
      "url": "https://patchblox.com/security/cve/CVE-2024-3865",
      "title": "Mozilla Firefox ESR and 3 others: Improper Restriction of Operations within the Bounds of a Memory Buffer",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.1,
      "epss": 0.00486,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-1555",
      "url": "https://patchblox.com/security/cve/CVE-2024-1555",
      "title": "Mozilla Firefox ESR and 3 others: Authentication Bypass by Spoofing",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.3,
      "epss": 0.00478,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-5694",
      "url": "https://patchblox.com/security/cve/CVE-2024-5694",
      "title": "Mozilla Firefox ESR and 4 others: Use After Free",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.0047,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-6615",
      "url": "https://patchblox.com/security/cve/CVE-2024-6615",
      "title": "Memory safety bugs fixed in Firefox 128 and Thunderbird 128",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00448,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-4778",
      "url": "https://patchblox.com/security/cve/CVE-2024-4778",
      "title": "Mozilla Firefox ESR and 4 others: Improper Handling of Overlap Between Protected Memory Ranges",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.00441,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-5700",
      "url": "https://patchblox.com/security/cve/CVE-2024-5700",
      "title": "Mozilla Firefox ESR and 6 others: Access of Memory Location Before Start of Buffer",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.0044,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4580",
      "url": "https://patchblox.com/security/cve/CVE-2023-4580",
      "title": "Push notifications saved to disk unencrypted",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00422,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-4776",
      "url": "https://patchblox.com/security/cve/CVE-2024-4776",
      "title": "Mozilla Firefox ESR and 4 others: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.2,
      "epss": 0.00417,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-6606",
      "url": "https://patchblox.com/security/cve/CVE-2024-6606",
      "title": "Out-of-bounds read in clipboard component",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.2,
      "epss": 0.00399,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-6601",
      "url": "https://patchblox.com/security/cve/CVE-2024-6601",
      "title": "Race condition in permission assignment",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.0039,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-2608",
      "url": "https://patchblox.com/security/cve/CVE-2024-2608",
      "title": "Mozilla Firefox ESR and 5 others: Integer Overflow to Buffer Overflow",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 8.4,
      "epss": 0.00385,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-1554",
      "url": "https://patchblox.com/security/cve/CVE-2024-1554",
      "title": "Mozilla Firefox ESR and 3 others: Insufficient Verification of Data Authenticity",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.00382,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-3853",
      "url": "https://patchblox.com/security/cve/CVE-2024-3853",
      "title": "Mozilla Firefox ESR and 3 others: A use-after-free could result if a JavaScript realm was in the process of being initialized when a garbage\u2026",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.00356,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-6605",
      "url": "https://patchblox.com/security/cve/CVE-2024-6605",
      "title": "Firefox Android missed activation delay to prevent tapjacking",
      "priority": "High",
      "cvss": 8.8,
      "epss": 0.00355,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-4765",
      "url": "https://patchblox.com/security/cve/CVE-2024-4765",
      "title": "Mozilla Firefox ESR and 4 others: Use of a Broken or Risky Cryptographic Algorithm",
      "priority": "High",
      "cvss": 8.1,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-3857",
      "url": "https://patchblox.com/security/cve/CVE-2024-3857",
      "title": "Mozilla Firefox ESR and 5 others: Use After Free",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00245,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6209",
      "url": "https://patchblox.com/security/cve/CVE-2023-6209",
      "title": "Mozilla Firefox ESR and 5 others: Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal \u0022/../\u0022 part in\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.5,
      "epss": 0.01418,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5171",
      "url": "https://patchblox.com/security/cve/CVE-2023-5171",
      "title": "Mozilla Firefox ESR and 5 others: During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing\u2026",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.01116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5169",
      "url": "https://patchblox.com/security/cve/CVE-2023-5169",
      "title": "Mozilla Firefox ESR and 5 others: A compromised content process could have provided malicious data in a \u0060PathRecording\u0060 resulting in an\u2026",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.01095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5732",
      "url": "https://patchblox.com/security/cve/CVE-2023-5732",
      "title": "Address bar spoofing via bidirectional characters",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.5,
      "epss": 0.01049,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5388",
      "url": "https://patchblox.com/security/cve/CVE-2023-5388",
      "title": "Mozilla Firefox ESR and 5 others: NSS was susceptible to a timing side-channel attack when performing RSA decryption.",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 6.5,
      "epss": 0.00974,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6860",
      "url": "https://patchblox.com/security/cve/CVE-2023-6860",
      "title": "Mozilla Firefox ESR and 5 others: The \u0060VideoBridge\u0060 allowed any content process to use textures produced by remote decoders.",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.00958,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-1548",
      "url": "https://patchblox.com/security/cve/CVE-2024-1548",
      "title": "Mozilla Firefox ESR and 5 others: A website could have obscured the fullscreen notification by using a dropdown select input element.",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.00945,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5725",
      "url": "https://patchblox.com/security/cve/CVE-2023-5725",
      "title": "Mozilla Firefox ESR and 5 others: A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.00935,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5727",
      "url": "https://patchblox.com/security/cve/CVE-2023-5727",
      "title": "Mozilla Firefox ESR and 5 others: The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00829,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-3302",
      "url": "https://patchblox.com/security/cve/CVE-2024-3302",
      "title": "Mozilla Firefox ESR and 5 others: Allocation of Resources Without Limits or Throttling",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.7,
      "epss": 0.00766,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-1551",
      "url": "https://patchblox.com/security/cve/CVE-2024-1551",
      "title": "Mozilla Firefox ESR and 5 others: Reliance on Cookies without Validation and Integrity Checking",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.00743,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-0746",
      "url": "https://patchblox.com/security/cve/CVE-2024-0746",
      "title": "Mozilla Firefox ESR and 5 others: Use After Free",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.5,
      "epss": 0.00738,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-5690",
      "url": "https://patchblox.com/security/cve/CVE-2024-5690",
      "title": "Mozilla Firefox ESR and 6 others: Observable Discrepancy",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.00736,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-0753",
      "url": "https://patchblox.com/security/cve/CVE-2024-0753",
      "title": "Mozilla Firefox ESR and 5 others: In specific HSTS configurations an attacker could have bypassed HSTS on a subdomain.",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.5,
      "epss": 0.00717,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6135",
      "url": "https://patchblox.com/security/cve/CVE-2023-6135",
      "title": "Mozilla Firefox ESR and 3 others: Multiple NSS NIST curves were susceptible to a side-channel attack known as \u0022Minerva\u0022.",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 4.3,
      "epss": 0.00714,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4052",
      "url": "https://patchblox.com/security/cve/CVE-2023-4052",
      "title": "Mozilla Firefox ESR and 5 others: The Firefox updater created a directory writable by non-privileged users.",
      "priority": "Routine",
      "cvss": 6.5,
      "epss": 0.00711,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-2610",
      "url": "https://patchblox.com/security/cve/CVE-2024-2610",
      "title": "Mozilla Firefox ESR and 5 others: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 6.1,
      "epss": 0.00704,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5723",
      "url": "https://patchblox.com/security/cve/CVE-2023-5723",
      "title": "Mozilla Firefox ESR and 3 others: An attacker with temporary script access to a site could have set a cookie containing invalid characters\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 5.3,
      "epss": 0.00699,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5729",
      "url": "https://patchblox.com/security/cve/CVE-2023-5729",
      "title": "Mozilla Firefox ESR and 3 others: A malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt.",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 4.3,
      "epss": 0.00698,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6867",
      "url": "https://patchblox.com/security/cve/CVE-2023-6867",
      "title": "Mozilla Firefox ESR and 3 others: The timing of a button click causing a popup to disappear was approximately the same length as the anti-clickjacking\u2026",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.1,
      "epss": 0.00683,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-3859",
      "url": "https://patchblox.com/security/cve/CVE-2024-3859",
      "title": "Mozilla Firefox ESR and 5 others: Integer Overflow or Wraparound",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.00669,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-5691",
      "url": "https://patchblox.com/security/cve/CVE-2024-5691",
      "title": "Mozilla Firefox ESR and 6 others: Protection Mechanism Failure",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.00654,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6872",
      "url": "https://patchblox.com/security/cve/CVE-2023-6872",
      "title": "Mozilla Firefox ESR and 3 others: Browser tab titles were being leaked by GNOME to system logs.",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00646,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5722",
      "url": "https://patchblox.com/security/cve/CVE-2023-5722",
      "title": "Mozilla Firefox ESR and 3 others: Using iterative requests an attacker was able to learn the size of an opaque response, as well as the\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 5.3,
      "epss": 0.00645,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-5692",
      "url": "https://patchblox.com/security/cve/CVE-2024-5692",
      "title": "Mozilla Firefox ESR and 6 others: On Windows 10, when using the \u0027Save As\u0027 functionality, an attacker could have tricked the browser into\u2026",
      "priority": "Routine",
      "cvss": 6.5,
      "epss": 0.00615,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6210",
      "url": "https://patchblox.com/security/cve/CVE-2023-6210",
      "title": "Mozilla Firefox ESR and 3 others: When an https: web page created a pop-up from a \u0022javascript:\u0022 URL, that pop-up was incorrectly allowed\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00614,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-2611",
      "url": "https://patchblox.com/security/cve/CVE-2024-2611",
      "title": "Mozilla Firefox ESR and 5 others: A missing delay on when pointer lock was used could have allowed a malicious page to trick a user into\u2026",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 6.1,
      "epss": 0.00609,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-2609",
      "url": "https://patchblox.com/security/cve/CVE-2024-2609",
      "title": "Mozilla Firefox ESR and 5 others: Product UI does not Warn User of Unsafe Actions",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.00603,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-0747",
      "url": "https://patchblox.com/security/cve/CVE-2024-0747",
      "title": "Mozilla Firefox ESR and 5 others: Protection Mechanism Failure",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.5,
      "epss": 0.006,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-2605",
      "url": "https://patchblox.com/security/cve/CVE-2024-2605",
      "title": "Mozilla Firefox ESR and 5 others: An attacker could have leveraged the Windows Error Reporter to run arbitrary code on the system escaping\u2026",
      "priority": "Routine",
      "cvss": 5.9,
      "epss": 0.00583,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-5693",
      "url": "https://patchblox.com/security/cve/CVE-2024-5693",
      "title": "Mozilla Firefox ESR and 6 others: Inclusion of Functionality from Untrusted Control Sphere",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.00578,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-1550",
      "url": "https://patchblox.com/security/cve/CVE-2024-1550",
      "title": "Mozilla Firefox ESR and 5 others: Improper Restriction of Rendered UI Layers or Frames",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.00575,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6869",
      "url": "https://patchblox.com/security/cve/CVE-2023-6869",
      "title": "Mozilla Firefox ESR and 3 others: A \u0060\u0026lt;dialog\u003E\u0060 element could have been manipulated to paint content outside of a sandboxed iframe.",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00559,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-4768",
      "url": "https://patchblox.com/security/cve/CVE-2024-4768",
      "title": "Mozilla Firefox ESR and 6 others: Improper Preservation of Permissions",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 6.1,
      "epss": 0.00539,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-1549",
      "url": "https://patchblox.com/security/cve/CVE-2024-1549",
      "title": "Mozilla Firefox ESR and 5 others: If a website set a large custom cursor, portions of the cursor could have overlapped with the permission\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.00529,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-6612",
      "url": "https://patchblox.com/security/cve/CVE-2024-6612",
      "title": "CSP violation leakage when using devtools",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 5.3,
      "epss": 0.00496,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6211",
      "url": "https://patchblox.com/security/cve/CVE-2023-6211",
      "title": "Mozilla Firefox ESR and 3 others: If an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS-only\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00494,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6871",
      "url": "https://patchblox.com/security/cve/CVE-2023-6871",
      "title": "Mozilla Firefox ESR and 3 others: Under certain conditions, Firefox did not display a warning when a user attempted to navigate to a new\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 4.3,
      "epss": 0.00493,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-4767",
      "url": "https://patchblox.com/security/cve/CVE-2024-4767",
      "title": "Mozilla Firefox ESR and 6 others: Exposure of Private Personal Information to an Unauthorized Actor",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 6.1,
      "epss": 0.00492,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-1556",
      "url": "https://patchblox.com/security/cve/CVE-2024-1556",
      "title": "Mozilla Firefox ESR and 3 others: Improper Check for Unusual or Exceptional Conditions",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00474,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4579",
      "url": "https://patchblox.com/security/cve/CVE-2023-4579",
      "title": "Persisted search terms were formatted as URLs",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 3.1,
      "epss": 0.00451,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-2606",
      "url": "https://patchblox.com/security/cve/CVE-2024-2606",
      "title": "Mozilla Firefox ESR and 3 others: Passing invalid data could have led to invalid wasm values being created, such as arbitrary integers\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 3.7,
      "epss": 0.00437,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-10941",
      "url": "https://patchblox.com/security/cve/CVE-2024-10941",
      "title": "Mozilla Firefox ESR and 4 others: Improper Neutralization of Invalid Characters in Identifiers in Web Pages",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.0043,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-0754",
      "url": "https://patchblox.com/security/cve/CVE-2024-0754",
      "title": "Mozilla Firefox ESR and 3 others: Uncaught Exception",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 6.5,
      "epss": 0.00426,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-0752",
      "url": "https://patchblox.com/security/cve/CVE-2024-0752",
      "title": "Mozilla Firefox ESR and 3 others: Use After Free",
      "priority": "Routine",
      "cvss": 6.5,
      "epss": 0.00419,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-5687",
      "url": "https://patchblox.com/security/cve/CVE-2024-5687",
      "title": "Mozilla Firefox ESR and 4 others: Improper Access Control",
      "priority": "Routine",
      "cvss": 5.3,
      "epss": 0.00411,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-3855",
      "url": "https://patchblox.com/security/cve/CVE-2024-3855",
      "title": "Mozilla Firefox ESR and 3 others: Out-of-bounds Read",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00398,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-5689",
      "url": "https://patchblox.com/security/cve/CVE-2024-5689",
      "title": "Mozilla Firefox ESR and 4 others: In addition to detecting when a user was taking a screenshot (XXX), a website was able to overlay the\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 4.3,
      "epss": 0.00398,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-6600",
      "url": "https://patchblox.com/security/cve/CVE-2024-6600",
      "title": "Memory corruption in WebGL API",
      "priority": "Routine",
      "cvss": 6.3,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-5697",
      "url": "https://patchblox.com/security/cve/CVE-2024-5697",
      "title": "Mozilla Firefox ESR and 4 others: Observable Discrepancy",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 4.3,
      "epss": 0.00395,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-5698",
      "url": "https://patchblox.com/security/cve/CVE-2024-5698",
      "title": "Mozilla Firefox ESR and 4 others: User Interface (UI) Misrepresentation of Critical Information",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.1,
      "epss": 0.00382,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-6608",
      "url": "https://patchblox.com/security/cve/CVE-2024-6608",
      "title": "Cursor could be moved out of the viewport using pointerlock.",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 4.3,
      "epss": 0.00377,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-4774",
      "url": "https://patchblox.com/security/cve/CVE-2024-4774",
      "title": "Mozilla Firefox ESR and 4 others: Reliance on Undefined, Unspecified, or Implementation-Defined Behavior",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00372,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-6614",
      "url": "https://patchblox.com/security/cve/CVE-2024-6614",
      "title": "Incorrect listing of stack frames",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 4.3,
      "epss": 0.0037,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-4769",
      "url": "https://patchblox.com/security/cve/CVE-2024-4769",
      "title": "Mozilla Firefox ESR and 6 others: Insufficient Type Distinction",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 6.1,
      "epss": 0.00369,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-0748",
      "url": "https://patchblox.com/security/cve/CVE-2024-0748",
      "title": "Mozilla Firefox ESR and 3 others: A compromised content process could have updated the document URI.",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 4.3,
      "epss": 0.00368,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-3862",
      "url": "https://patchblox.com/security/cve/CVE-2024-3862",
      "title": "Mozilla Firefox ESR and 3 others: Use of Uninitialized Resource",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 5.3,
      "epss": 0.00365,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-6610",
      "url": "https://patchblox.com/security/cve/CVE-2024-6610",
      "title": "Form validation popups could block exiting full-screen mode",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 4.3,
      "epss": 0.00342,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-0749",
      "url": "https://patchblox.com/security/cve/CVE-2024-0749",
      "title": "Mozilla Firefox ESR and 5 others: Origin Validation Error",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.00336,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-3861",
      "url": "https://patchblox.com/security/cve/CVE-2024-3861",
      "title": "Mozilla Firefox ESR and 5 others: If an AlignedBuffer were assigned to itself, the subsequent self-move could result in an incorrect reference\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.00228,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-4775",
      "url": "https://patchblox.com/security/cve/CVE-2024-4775",
      "title": "Mozilla Firefox ESR and 4 others: Missing Handler",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 5.9,
      "epss": 0.00218,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-4772",
      "url": "https://patchblox.com/security/cve/CVE-2024-4772",
      "title": "Mozilla Firefox ESR and 4 others: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 5.9,
      "epss": 0.00217,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4054",
      "url": "https://patchblox.com/security/cve/CVE-2023-4054",
      "title": "Mozilla Firefox ESR and 4 others: When opening appref-ms files, Firefox did not warn the user that these files may contain malicious code.",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 5.5,
      "epss": 0.00208,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-6613",
      "url": "https://patchblox.com/security/cve/CVE-2024-6613",
      "title": "Incorrect listing of stack frames",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 5.5,
      "epss": 0.00186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-3860",
      "url": "https://patchblox.com/security/cve/CVE-2024-3860",
      "title": "Mozilla Firefox ESR and 3 others: Missing Release of Memory after Effective Lifetime",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.2,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T13:47:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}