Race Conditions

Every one of the 70 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnera…CVE-2020-6820Mozilla · CVSS 8.1 · 7.1% likely

   CWE-362

2. Race condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime.cpp in xul.dll in Mozilla Firefox 3 before 3.0.11 might allow remote attackers to e…CVE-2009-1837Mozilla · 4.3% likely

   CWE-362

3. Race condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, S…CVE-2014-1490Mozilla · 3.9% likely

   CWE-362

4. nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial…CVE-2008-5021Mozilla · 3.6% likely

   CWE-362

5. Race condition in the WorkerPrivate::NotifyFeatures function in Mozilla Firefox before 41.0 allows remote attackers to execute arbitrary code or cause a denial of service (use-aft…CVE-2015-4510Mozilla · 2.7% likely

   CWE-362

6. Race condition in the AsyncPaintWaitEvent::AsyncPaintWaitEvent function in Mozilla Firefox before 37.0.2 allows remote attackers to execute arbitrary code or cause a denial of ser…CVE-2015-2706Mozilla · 2.6% likely

   CWE-362

7. Race condition in the get implementation in the ServiceWorkerManager class in the Service Worker subsystem in Mozilla Firefox before 46.0 allows remote attackers to execute arbitr…CVE-2016-2812Mozilla · 2.4% likely

   CWE-362

8. The mozilla::dom::AudioParamTimeline::AudioNodeInputValue function in the Web Audio API implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly r…CVE-2014-8640Mozilla · 2.4% likely

   CWE-362

9. Race condition in the nsThreadManager::RegisterCurrentThread function in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service…CVE-2015-2715Mozilla · 2.2% likely

   CWE-362

10. During the initialization of a new content process, a race condition occurs that can allow a content process to disclose heap addresses from the parent process. *Note: this issue…CVE-2019-17021Mozilla · 1.9% likely

    CWE-362

11. When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to memory corruption and a potentially exploitable crash. This v…CVE-2020-12420Mozilla · 1.9% likely

    CWE-362

12. Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race condition could cause a use-after-free condition and a potentially exploitabl…CVE-2019-17011Mozilla · 1.5% likely

    CWE-362

13. Under certain conditions, when checking the Resist Fingerprinting preference during device orientation checks, a race condition could have caused a use-after-free and a potentiall…CVE-2019-17010Mozilla · 1.5% likely

    CWE-362

14. A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a potentially exploitable crash. This vulnerability affects Fire…CVE-2020-12387Mozilla · 1.4% likely

    CWE-362

15. When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially exploitable crash. This vulnerability affects Thunderbird < 68.9.…CVE-2020-12405Mozilla · 1.4% likely

    CWE-362

16. A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink, resulting in a use-after-free, memory corruption, and a potentially exploitabl…CVE-2020-12416Mozilla · 1.4% likely

    CWE-362

17. A suspected race condition when calling getaddrinfo led to memory corruption and a potentially exploitable crash. *Note: This issue only affected Linux operating systems. Other op…CVE-2021-29986Mozilla · 1.3% likely

    CWE-362

18. By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that had received full screen and pointer lock access, which could…CVE-2021-43538Mozilla · 1.2% likely

    CWE-362

19. Multiple race conditions in dom/media/systemservices/CamerasChild.cpp in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause…CVE-2016-1975Mozilla · 1.2% likely

    CWE-362

20. Mozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these bugs showed evidence of memory corruption and we presume that with enough effort so…CVE-2020-15670Mozilla · 1.1% likely

    CWE-362

21. A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can lead to a use-after-free in the main process, resulting in…CVE-2019-9818Mozilla · 1.0% likely

    CWE-362

22. Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a malicious application to read sensitive data from application directories. Note: This is…CVE-2021-23977Mozilla · 0.9% likely

    CWE-367

23. A use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with shared workers. This results in a potentially exploitable crash. This vulnerability aff…CVE-2019-9821Mozilla · 0.8% likely

    CWE-362

24. Mozilla developers reported memory safety bugs present in Firefox 80. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these…CVE-2020-15674Mozilla · 0.8% likely

    CWE-667

25. Race condition in the Mozilla Maintenance Service in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Windows allows local users to write to arbitrary files and con…CVE-2015-4481Mozilla · 0.8% likely

    CWE-362

26. By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content. Impact from exposing this object appears to be…CVE-2019-11761Mozilla · 0.8% likely

    CWE-362

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.