Advisories · Technology
Mozilla Firefox ESR.
Every CVE that names Mozilla Firefox ESR among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
Mozilla Firefox ESR: The WebAssembly JIT could miscalculate the size of a return type…
- Mozilla Firefox ESR
- Mozilla Thunderbird
-
Mozilla Firefox ESR: Ports that were written as an integer overflow above the bounds of a 16-bit integer could…
- Mozilla Firefox ESR
- Mozilla Thunderbird
-
Mozilla Thunderbird: The Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which…
- Mozilla Thunderbird
- Mozilla Firefox
-
Mozilla Firefox ESR: A transient execution vulnerability, named Floating Point Value Injection (FPVI) allowed…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Thunderbird: A locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would…
- Mozilla Thunderbird
- Mozilla Firefox
-
Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11.
- Mozilla Thunderbird
- Mozilla Firefox
-
Mozilla Firefox ESR: A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox ESR: Using techniques that built on the slipstream research…
- Mozilla Firefox ESR
- Mozilla Firefox
-
A malicious extension could have opened a popup window lacking an address bar.
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6.
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7.
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: If a user clicked into a specifically crafted PDF…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: Using the new logical assignment operators in a JavaScript switch statement could have…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: Performing garbage collection on re-declared JavaScript variables resulted in a…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: If Content Security Policy blocked frame navigation…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: As specified in the W3C Content Security Policy draft, when creating a violation report…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: When trying to load a cross-origin resource in an audio/video context a decoding error…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: Certain blit values provided by the user were not properly constrained leading to a heap…
- Mozilla Firefox
- Mozilla Thunderbird
-
Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed.
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: When flex-basis was used on a table wrapper…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: Using techniques that built on the slipstream research…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: When an extension with the proxy permission registered to receive <all_urls>…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: If a user downloaded a file lacking an extension on Windows…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5.
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4.
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: Searching for a single word from the address bar caused an mDNS request to be sent on the…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: Some websites have a feature "Show Password" where clicking a button will change a…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: When DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: If the Compact() method was called on an nsTArray…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: During browser shutdown, reference decrementing could have occured on a previously freed…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: Firefox did not block execution of scripts with incorrect MIME types when the response…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: In some cases, removing HTML elements during sanitization would keep existing SVG event…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: It was possible to cause the browser to enter fullscreen mode without displaying the…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: A parsing and event loading mismatch in Firefox's SVG code could have allowed load events…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: In certain circumstances, the MCallGetProperty opcode can be emitted with unmet…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox: If Firefox is installed to a user-writable directory…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: By holding a reference to the eval() function from an about:blank window…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox ESR: When aborting an operation, such as a fetch…
- Mozilla Firefox ESR
- Mozilla Thunderbird
-
Mozilla developers reported memory safety bugs present in Firefox for Android 79.
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2.
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: By exploiting an Open Redirect vulnerability on a website…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: When recursing through graphical layers while scrolling…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox ESR: A redirected HTTP request which is observed or modified through a web extension could…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox ESR: When in an endless loop, a website specifying a custom cursor using CSS could make it…
- Mozilla Firefox ESR
- Mozilla Firefox
-
An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links.
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox: By observing the stack trace for JavaScript errors in web workers…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox ESR: Given an installed malicious file picker application…
- Mozilla Firefox ESR
-
Mozilla Firefox ESR: Given an installed malicious file picker application…
- Mozilla Firefox ESR
-
Mozilla Firefox: Mozilla developers and community members reported memory safety bugs present in Firefox…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox ESR: The code for downloading files did not properly take care of special characters…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Firefox could be made to load attacker-supplied DLL files from the installation directory.
- Mozilla Firefox ESR
- Mozilla Firefox
-
JIT optimizations involving the Javascript arguments object could confuse later optimizations.
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Thunderbird: NSS has shown timing differences when performing DSA signatures…
- Mozilla Thunderbird
- Mozilla Firefox
-
Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8.
- Mozilla Thunderbird
- Mozilla Firefox
-
Mozilla Thunderbird: When browsing a malicious page, a race condition in our SharedWorkerService could occur…
- Mozilla Thunderbird
- Mozilla Firefox
-
Mozilla Thunderbird: Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects…
- Mozilla Thunderbird
- Mozilla Firefox
-
Mozilla Firefox ESR: When performing add-on updates, certificate chains terminating in non-built-in-roots were…
- Mozilla Firefox ESR
- Mozilla Firefox