ByteOS

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1041148

Resource:

x_refsource_CONFIRM

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1035007

Resource:

x_refsource_CONFIRM

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.securitytracker.com/id/1030793

Resource:

vdb-entry

x_refsource_SECTRACK

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html	vendor-advisory x_refsource_SUSE x_transferred
https://bugzilla.mozilla.org/show_bug.cgi?id=1022945	x_refsource_CONFIRM x_transferred
https://bugzilla.mozilla.org/show_bug.cgi?id=995075	x_refsource_CONFIRM x_transferred
https://bugzilla.mozilla.org/show_bug.cgi?id=1027359	x_refsource_CONFIRM x_transferred
https://bugzilla.mozilla.org/show_bug.cgi?id=1037666	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/bid/69524	vdb-entry x_refsource_BID x_transferred
https://security.gentoo.org/glsa/201504-01	vendor-advisory x_refsource_GENTOO x_transferred
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	x_refsource_CONFIRM x_transferred
http://www.securitytracker.com/id/1030794	vdb-entry x_refsource_SECTRACK x_transferred
http://www.mozilla.org/security/announce/2014/mfsa2014-67.html	x_refsource_CONFIRM x_transferred
https://bugzilla.mozilla.org/show_bug.cgi?id=1033121	x_refsource_CONFIRM x_transferred
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html	vendor-advisory x_refsource_SUSE x_transferred
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html	vendor-advisory x_refsource_SUSE x_transferred
http://secunia.com/advisories/60148	third-party-advisory x_refsource_SECUNIA x_transferred
http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html	vendor-advisory x_refsource_SUSE x_transferred
https://bugzilla.mozilla.org/show_bug.cgi?id=1041148	x_refsource_CONFIRM x_transferred
https://bugzilla.mozilla.org/show_bug.cgi?id=1035007	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/61114	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.securitytracker.com/id/1030793	vdb-entry x_refsource_SECTRACK x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1022945

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=995075

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1027359

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1037666

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.securityfocus.com/bid/69524

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://security.gentoo.org/glsa/201504-01

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

Hyperlink: http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.securitytracker.com/id/1030794

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://www.mozilla.org/security/announce/2014/mfsa2014-67.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1033121

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1041148

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1035007

Resource:

x_refsource_CONFIRM

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.securitytracker.com/id/1030793

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:security@mozilla.org

Published At:03 Sep, 2014 | 10:55

Updated At:06 May, 2026 | 22:30

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html	security@mozilla.org	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html	security@mozilla.org	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html	security@mozilla.org	N/A
http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html	security@mozilla.org	Third Party Advisory
http://secunia.com/advisories/60148	security@mozilla.org	N/A
http://secunia.com/advisories/61114	security@mozilla.org	N/A
http://www.mozilla.org/security/announce/2014/mfsa2014-67.html	security@mozilla.org	Vendor Advisory
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	security@mozilla.org	N/A
http://www.securityfocus.com/bid/69524	security@mozilla.org	N/A
http://www.securitytracker.com/id/1030793	security@mozilla.org	N/A
http://www.securitytracker.com/id/1030794	security@mozilla.org	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=1022945	security@mozilla.org	Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1027359	security@mozilla.org	Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1033121	security@mozilla.org	Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1035007	security@mozilla.org	Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1037666	security@mozilla.org	Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1041148	security@mozilla.org	Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=995075	security@mozilla.org	Issue Tracking
https://security.gentoo.org/glsa/201504-01	security@mozilla.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://secunia.com/advisories/60148	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/61114	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.mozilla.org/security/announce/2014/mfsa2014-67.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/69524	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id/1030793	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id/1030794	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=1022945	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1027359	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1033121	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1035007	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1037666	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1041148	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=995075	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking
https://security.gentoo.org/glsa/201504-01	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html

Source: security@mozilla.org

Resource:

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html

Source: security@mozilla.org

Resource:

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html

Source: security@mozilla.org

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html

Source: security@mozilla.org

Resource:

Third Party Advisory

Source: security@mozilla.org

Resource: N/A

Source: security@mozilla.org

Resource: N/A

Hyperlink: http://www.mozilla.org/security/announce/2014/mfsa2014-67.html

Source: security@mozilla.org

Resource:

Vendor Advisory

Hyperlink: http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Source: security@mozilla.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/69524

Source: security@mozilla.org

Resource: N/A

Hyperlink: http://www.securitytracker.com/id/1030793

Source: security@mozilla.org

Resource: N/A

Hyperlink: http://www.securitytracker.com/id/1030794

Source: security@mozilla.org

Resource: N/A

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1022945

Source: security@mozilla.org

Resource:

Issue Tracking

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1027359

Source: security@mozilla.org

Resource:

Issue Tracking

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1033121

Source: security@mozilla.org

Resource:

Issue Tracking

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1035007

Source: security@mozilla.org

Resource:

Issue Tracking

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1037666

Source: security@mozilla.org

Resource:

Issue Tracking

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1041148

Source: security@mozilla.org

Resource:

Issue Tracking

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=995075

Source: security@mozilla.org

Resource:

Issue Tracking

Hyperlink: https://security.gentoo.org/glsa/201504-01

Source: security@mozilla.org

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.mozilla.org/security/announce/2014/mfsa2014-67.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/69524

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securitytracker.com/id/1030793

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securitytracker.com/id/1030794

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1022945

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Issue Tracking

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1027359

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Issue Tracking

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1033121

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Issue Tracking

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1035007

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Issue Tracking

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1037666

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Issue Tracking

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1041148

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Issue Tracking

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=995075

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Issue Tracking

Hyperlink: https://security.gentoo.org/glsa/201504-01

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

2486Records found

CVE-2009-2662

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-4.94% / 91.03%

7 Day CHG~0.00%

Published-04 Aug, 2009 | 16:13

Updated-23 Apr, 2026 | 00:35

The browser engine in Mozilla Firefox 3.5.x before 3.5.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the TraceRecorder::snapshot function in js/src/jstracer.cpp, and unspecified other vectors.

Product-firefox n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2008-4070

Matching Score-10

Assigner-Red Hat, Inc.

Matching Score-10

Assigner-Red Hat, Inc.

CVSS Score-10||HIGH

EPSS-7.35% / 93.60%

7 Day CHG~0.00%

Published-27 Sep, 2008 | 00:00

Updated-23 Apr, 2026 | 00:35

Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long header in a news article, related to "canceling [a] newsgroup message" and "cancelled newsgroup messages."

Product-thunderbird seamonkey n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2008-2786

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-1.38% / 68.52%

7 Day CHG~0.00%

Published-19 Jun, 2008 | 21:00

Updated-23 Apr, 2026 | 00:35

Buffer overflow in Firefox 3.0 and 2.0.x has unknown impact and attack vectors. NOTE: due to lack of details as of 20080619, it is not clear whether this is the same issue as CVE-2008-2785. A CVE identifier has been assigned for tracking purposes.

Product-firefox n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2008-0016

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-43.92% / 98.58%

7 Day CHG~0.00%

Published-24 Sep, 2008 | 18:00

Updated-23 Apr, 2026 | 00:35

Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to execute arbitrary code via a crafted UTF-8 URL in a link.

Product-firefox seamonkey n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-2315

Matching Score-10

Assigner-MITRE Corporation

Product-suse_linux_enterprise_server linux_enterprise_debuginfo leap linux_enterprise_server git openstack_cloud linux_enterprise_software_development_kit opensuse n/a

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-17.98% / 96.81%

7 Day CHG+0.93%

Published-08 Apr, 2016 | 14:00

Updated-06 May, 2026 | 22:30

revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, leading to a heap-based buffer overflow.

Vendor-git-scm n/a openSUSE SUSE

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2019-17006

Matching Score-10

Assigner-Mozilla Corporation

Matching Score-10

Assigner-Mozilla Corporation

CVSS Score-9.8||CRITICAL

EPSS-3.55% / 87.82%

7 Day CHG~0.00%

Published-22 Oct, 2020 | 20:24

Updated-05 Aug, 2024 | 01:24

In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow.

Vendor-Mozilla Corporation NetApp, Inc.Siemens AG

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-20

Improper Input Validation

CVE-2015-5957

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-2.60% / 83.32%

7 Day CHG~0.00%

Published-28 Sep, 2015 | 20:00

Updated-06 May, 2026 | 22:30

Buffer overflow in the DumpSysVar function in var.c in Remind before 3.1.15 allows attackers to have unspecified impact via a long name.

Vendor-roaring_penguin n/a openSUSE

Product-opensuse remind n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5132

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-50.73% / 98.78%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5131 and CVE-2015-5133.

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-evergreen linux_kernel mac_os_x windows flash_player air_sdk air air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-4485

Matching Score-10

Assigner-Mozilla Corporation

Matching Score-10

Assigner-Mozilla Corporation

CVSS Score-10||HIGH

EPSS-8.45% / 94.31%

7 Day CHG~0.00%

Published-16 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Heap-based buffer overflow in the resize_context_buffers function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via malformed WebM video data.

Vendor-n/a Canonical Ltd.openSUSE Oracle Corporation Mozilla Corporation

Product-solaris firefox ubuntu_linux opensuse n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5131

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-50.73% / 98.78%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel evergreen mac_os_x windows flash_player air_sdk air air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-4473

Matching Score-10

Assigner-Mozilla Corporation

Matching Score-10

Assigner-Mozilla Corporation

CVSS Score-10||HIGH

EPSS-6.96% / 93.30%

7 Day CHG~0.00%

Published-16 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Vendor-n/a Canonical Ltd.openSUSE Mozilla Corporation Debian GNU/Linux

Product-debian_linux ubuntu_linux firefox opensuse n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-4486

Matching Score-10

Assigner-Mozilla Corporation

Matching Score-10

Assigner-Mozilla Corporation

CVSS Score-10||HIGH

EPSS-6.61% / 92.99%

7 Day CHG~0.00%

Published-16 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

The decrease_ref_count function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via malformed WebM video data.

Vendor-n/a Canonical Ltd.openSUSE Oracle Corporation Mozilla Corporation

Product-solaris firefox ubuntu_linux opensuse n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5129

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-10.02% / 95.01%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5541.

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel evergreen mac_os_x windows flash_player air_sdk air air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5124

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-6.86% / 93.22%

7 Day CHG~0.00%

Published-20 Jul, 2015 | 23:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, CVE-2015-3134, and CVE-2015-4431.

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-evergreen linux_kernel mac_os_x windows flash_player air_sdk air air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5125

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-5.65% / 91.97%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to cause a denial of service (vector-length corruption) or possibly have unspecified other impact via unknown vectors.

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel evergreen mac_os_x windows flash_player air_sdk air air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5133

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-50.73% / 98.78%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel evergreen mac_os_x windows flash_player air_sdk air air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-2740

Matching Score-10

Assigner-Mozilla Corporation

Product-thunderbird suse_linux_enterprise_software_development_kit firefox firefox_esr ubuntu_linux debian_linux suse_linux_enterprise_server solaris suse_linux_enterprise_desktop n/a

Matching Score-10

Assigner-Mozilla Corporation

CVSS Score-10||HIGH

EPSS-5.55% / 91.83%

7 Day CHG~0.00%

Published-06 Jul, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 might allow remote attackers to cause a denial of service or have unspecified other impact via unknown vectors.

Vendor-n/a Canonical Ltd.Oracle Corporation Novell Mozilla Corporation Debian GNU/Linux

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-2724

Matching Score-10

Assigner-Mozilla Corporation

Product-thunderbird suse_linux_enterprise_software_development_kit firefox firefox_esr ubuntu_linux debian_linux suse_linux_enterprise_server solaris suse_linux_enterprise_desktop n/a

Matching Score-10

Assigner-Mozilla Corporation

CVSS Score-10||HIGH

EPSS-5.87% / 92.25%

7 Day CHG~0.00%

Published-06 Jul, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Vendor-n/a Canonical Ltd.Oracle Corporation Novell Mozilla Corporation Debian GNU/Linux

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-2726

Matching Score-10

Assigner-Mozilla Corporation

Product-suse_linux_enterprise_software_development_kit firefox suse_linux_enterprise_server solaris suse_linux_enterprise_desktop n/a

Matching Score-10

Assigner-Mozilla Corporation

CVSS Score-10||HIGH

EPSS-6.06% / 92.45%

7 Day CHG~0.00%

Published-06 Jul, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Vendor-n/a Mozilla Corporation Oracle Corporation Novell

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-2725

Matching Score-10

Assigner-Mozilla Corporation

Product-thunderbird suse_linux_enterprise_software_development_kit firefox firefox_esr suse_linux_enterprise_server solaris suse_linux_enterprise_desktop n/a

Matching Score-10

Assigner-Mozilla Corporation

CVSS Score-10||HIGH

EPSS-6.06% / 92.45%

7 Day CHG~0.00%

Published-06 Jul, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Vendor-n/a Mozilla Corporation Oracle Corporation Novell

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-2739

Matching Score-10

Assigner-Mozilla Corporation

Product-thunderbird suse_linux_enterprise_software_development_kit firefox ubuntu_linux debian_linux firefox_esr suse_linux_enterprise_server solaris suse_linux_enterprise_desktop n/a

Matching Score-10

Assigner-Mozilla Corporation

CVSS Score-10||HIGH

EPSS-2.73% / 84.15%

7 Day CHG~0.00%

Published-06 Jul, 2015 | 01:00

Updated-06 May, 2026 | 22:30

The ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which has unspecified impact and attack vectors.

Vendor-n/a Canonical Ltd.Oracle Corporation Novell Mozilla Corporation Debian GNU/Linux

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-0348

Matching Score-10

Matching Score-10

Product-enterprise_linux_desktop_supplementary enterprise_linux_server_supplementary suse_linux_workstation_extension mac_os_x windows flash_player suse_linux_enterprise_desktop enterprise_linux_server_supplementary_eus linux_kernel enterprise_linux_workstation_supplementary opensuse n/a

CVSS Score-10||HIGH

EPSS-8.76% / 94.48%

7 Day CHG~0.00%

Published-14 Apr, 2015 | 22:00

Updated-06 May, 2026 | 22:30

Buffer overflow in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-9488

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-4.02% / 89.25%

7 Day CHG~0.00%

Published-14 Apr, 2015 | 18:00

Updated-06 May, 2026 | 22:30

The is_utf8_well_formed function in GNU less before 475 allows remote attackers to have unspecified impact via malformed UTF-8 characters, which triggers an out-of-bounds read.

Vendor-n/a openSUSE GNU

Product-less opensuse n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-2978

Matching Score-10

Assigner-MITRE Corporation

Product-linux_enterprise_desktop suse_linux_enterprise_server linux_enterprise_workstation_extension directfb linux_enterprise_software_development_kit opensuse n/a

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-6.10% / 92.50%

7 Day CHG~0.00%

Published-11 Jun, 2014 | 14:00

Updated-06 May, 2026 | 22:30

The Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the Voodoo interface, which triggers an out-of-bounds write.

Vendor-directfb n/a openSUSE SUSE

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-1534

Matching Score-10

Assigner-Mozilla Corporation

Matching Score-10

Assigner-Mozilla Corporation

CVSS Score-10||HIGH

EPSS-5.82% / 92.19%

7 Day CHG~0.00%

Published-11 Jun, 2014 | 10:00

Updated-06 May, 2026 | 22:30

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Product-firefox n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-1562

Matching Score-10

Assigner-Mozilla Corporation

Matching Score-10

Assigner-Mozilla Corporation

CVSS Score-10||HIGH

EPSS-5.58% / 91.88%

7 Day CHG~0.00%

Published-03 Sep, 2014 | 10:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Product-thunderbird firefox firefox_esr n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-1528

Matching Score-10

Assigner-Mozilla Corporation

Matching Score-10

Assigner-Mozilla Corporation

CVSS Score-10||HIGH

EPSS-5.56% / 91.84%

7 Day CHG+0.01%

Published-30 Apr, 2014 | 10:00

Updated-06 May, 2026 | 22:30

The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write and application crash) by painting on a CANVAS element.

Vendor-n/a Canonical Ltd.openSUSE Oracle Corporation Mozilla Corporation Microsoft Corporation Fedora Project

Product-firefox ubuntu_linux seamonkey solaris windows fedora opensuse n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-1554

Matching Score-10

Assigner-Mozilla Corporation

Matching Score-10

Assigner-Mozilla Corporation

CVSS Score-10||HIGH

EPSS-5.81% / 92.18%

7 Day CHG~0.00%

Published-03 Sep, 2014 | 10:00

Updated-06 May, 2026 | 22:30

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Product-firefox n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-5602

Matching Score-10

Assigner-Mozilla Corporation

Matching Score-10

Assigner-Mozilla Corporation

CVSS Score-10||HIGH

EPSS-5.17% / 91.36%

7 Day CHG~0.00%

Published-30 Oct, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

The Worker::SetEventListener function in the Web workers implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to direct proxies.

Product-thunderbird firefox thunderbird_esr seamonkey n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3324

Matching Score-10

Matching Score-10

Product-adobe_air mac_os_x enterprise_linux_server enterprise_linux_workstation linux_enterprise_desktop enterprise_linux_desktop adobe_air_sdk enterprise_linux_server_eus windows flash_player enterprise_linux_eus android linux_kernel opensuse n/a

CVSS Score-10||HIGH

EPSS-5.39% / 91.64%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3332

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-5.32% / 91.55%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3331

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-5.32% / 91.55%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3325

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-5.39% / 91.64%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3329

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-5.32% / 91.55%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3326

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-5.39% / 91.64%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3333

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-5.39% / 91.64%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3334, and CVE-2013-3335.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3328

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-5.39% / 91.64%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3327

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-5.39% / 91.64%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3334

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-5.39% / 91.64%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, and CVE-2013-3335.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3330

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-5.32% / 91.55%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3335

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-5.32% / 91.55%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, and CVE-2013-3334.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1705

Matching Score-10

Assigner-Mozilla Corporation

Matching Score-10

Assigner-Mozilla Corporation

CVSS Score-10||HIGH

EPSS-3.91% / 88.95%

7 Day CHG~0.00%

Published-07 Aug, 2013 | 01:00

Updated-29 Apr, 2026 | 01:13

Heap-based buffer underflow in the cryptojs_interpret_key_gen_type function in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Certificate Request Message Format (CRMF) request.

Product-firefox seamonkey n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1718

Matching Score-10

Assigner-Mozilla Corporation

Matching Score-10

Assigner-Mozilla Corporation

CVSS Score-10||HIGH

EPSS-5.44% / 91.69%

7 Day CHG~0.00%

Published-18 Sep, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Product-thunderbird_esr firefox thunderbird seamonkey n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1736

Matching Score-10

Assigner-Mozilla Corporation

Matching Score-10

Assigner-Mozilla Corporation

CVSS Score-10||HIGH

EPSS-5.39% / 91.64%

7 Day CHG~0.00%

Published-18 Sep, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to improperly establishing parent-child relationships of range-request nodes.

Product-thunderbird firefox thunderbird_esr seamonkey n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1678

Matching Score-10

Assigner-Mozilla Corporation

Matching Score-10

Assigner-Mozilla Corporation

CVSS Score-10||HIGH

EPSS-5.50% / 91.77%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

The _cairo_xlib_surface_add_glyph function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (invalid write operation) via unspecified vectors.

Product-thunderbird firefox thunderbird_esr n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-2728

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-5.32% / 91.55%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1719

Matching Score-10

Assigner-Mozilla Corporation

Matching Score-10

Assigner-Mozilla Corporation

CVSS Score-10||HIGH

EPSS-5.44% / 91.69%

7 Day CHG~0.00%

Published-18 Sep, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Product-thunderbird firefox seamonkey n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1680

Matching Score-10

Assigner-Mozilla Corporation

Matching Score-10

Assigner-Mozilla Corporation

CVSS Score-10||HIGH

EPSS-5.44% / 91.70%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Use-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

Product-thunderbird firefox thunderbird_esr n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1676

Matching Score-10

Assigner-Mozilla Corporation

Matching Score-10

Assigner-Mozilla Corporation

CVSS Score-10||HIGH

EPSS-5.60% / 91.91%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

The SelectionIterator::GetNextSegment function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.

Product-thunderbird firefox thunderbird_esr n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1379

Matching Score-10

Matching Score-10