QID 356173

the mozilla foundation describes this issue as follows: unexpected data returned from the safe browsing api could have led to memory corruption and a potentially exploitable crash. (
( CVE-2023-1945) the mozilla foundation describes this issue as follows: a website could have obscured the fullscreen notification by using a combination of window.open, fullscreen requests, window.name assignments, and setinterval calls.
This could have led to user confusion and possible spoofing attacks. (
( CVE-2023-29533) the mozilla foundation describes this issue as follows: following a garbage collector compaction, weak maps may have been accessed before they were correctly traced.
This resulted in memory corruption and a potentially exploitable crash. (
( CVE-2023-29535) the mozilla foundation describes this issue as follows: an attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially exploitable crash. (
( CVE-2023-29536) the mozilla foundation describes this issue as follows: when handling the filename directive in the content-disposition header, the filename would be truncated if the filename contained a null character.
This could have led to reflected file download attacks potentially tricking users to install malware. (
( CVE-2023-29539) the mozilla foundation describes this issue as follows: firefox did not properly handle downloads of files ending in .desktop, which can be interpreted to run attacker-controlled commands. this bug only affects firefox for linux on certain distributions.
( CVE-2023-29550)

Successful exploitation of this vulnerability could lead to a securitybreach or could affect integrity, availability, and confidentiality.