Advisories · Technology
Mozilla Firefox for Android.
Every CVE that names Mozilla Firefox for Android among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.1 Medium
Open redirect in Mozilla Firefox for Android
- Mozilla Firefox for Android
- Open redirect
- CVSS 6.5 Medium
Mozilla Firefox for Android: When recording the screen while in Private Browsing on Firefox for Android the address…
- Mozilla Firefox for Android
- Mozilla Focus for Android
- CVSS 9.1 CriticalCritical · CVSS 9+
Mozilla Firefox for Android: Different techniques existed to obscure the fullscreen notification in Firefox and Focus…
- Mozilla Firefox for Android
- Mozilla Focus for Android
- CVSS 7.5 High
Use after free in Mozilla Firefox for Android
- Mozilla Firefox for Android
- Memory corruption
- CVSS 8.8 High
Out-of-bounds write in Mozilla Firefox for Android and others
- Mozilla Firefox for Android
- Mozilla Firefox
- Memory corruption
- CVSS 8.8 High
Memory safety bugs present in Firefox 111 and Firefox ESR 102.9.
- Mozilla Firefox
- Mozilla Focus for Android
- CVSS 6.5 Medium
Weak encryption in Mozilla Firefox for Android and others
- Mozilla Firefox for Android
- Mozilla Firefox
- Weak cryptography or TLS
- CVSS 6.5 Medium
A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result.
- Mozilla Firefox
- Mozilla Focus for Android
- CVSS 6.5 Medium
Mozilla Firefox for Android: When a secure cookie existed in the Firefox cookie jar an insecure cookie for the same…
- Mozilla Firefox for Android
- Mozilla Firefox
- CVSS 6.5 Medium
Mozilla Firefox for Android: If multiple instances of resource exhaustion occurred at the incorrect time…
- Mozilla Firefox for Android
- Mozilla Firefox
- CVSS 8.8 High
Improper output encoding in Mozilla Firefox for Android and others
- Mozilla Firefox for Android
- Mozilla Firefox
- CWE-116
- CVSS 8.8 High
Improper output encoding in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Focus for Android
- CWE-116
-
Mozilla Firefox for Android: Using a redirect embedded into <code>sourceMappingUrls</code> could allow for navigation…
- Mozilla Firefox for Android
- Mozilla Firefox
-
Mozilla Firefox: When handling the filename directive in the Content-Disposition header…
- Mozilla Firefox
- Mozilla Focus for Android
-
Mozilla Firefox for Android: Under specific circumstances a WebExtension may have received a <code>jar:file:///</code>…
- Mozilla Firefox for Android
- Mozilla Firefox
-
Mozilla Firefox for Android: Multiple race conditions in the font initialization could have led to memory corruption…
- Mozilla Firefox for Android
- Mozilla Firefox
-
Mozilla Firefox: An attacker could cause the memory manager to incorrectly free a pointer that addresses…
- Mozilla Firefox
- Mozilla Focus for Android
-
Mozilla Firefox: Following a Garbage Collector compaction…
- Mozilla Firefox
- Mozilla Focus for Android
-
Mozilla Firefox: A website could have obscured the fullscreen notification by using a combination of…
- Mozilla Firefox
- Mozilla Focus for Android
- CVSS 9.6 CriticalCritical · KEV, CVSS 9+KEV
Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV
Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 8.8 HighCritical · CVSS 7+ and EPSS
Prototype pollution in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Prototype pollution
- CVSS 8.8 HighCritical · CVSS 7+ and EPSS
Prototype pollution in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Prototype pollution
-
Mozilla Firefox: When Web Render components were destructed…
- Mozilla Firefox
- Mozilla Firefox for Android
-
Mozilla Firefox: A malicious webpage could have forced a Firefox for Android user into executing…
- Mozilla Firefox
- Mozilla Firefox for Android
-
Mozilla Firefox: When performing EC scalar point multiplication…
- Mozilla Firefox
- Mozilla Firefox for Android
-
Mozilla Firefox: During ECDSA signature generation, padding applied in the nonce designed to ensure…
- Mozilla Firefox
- Mozilla Firefox for Android
-
Mozilla Firefox: When converting coordinates from projective to affine…
- Mozilla Firefox
- Mozilla Firefox for Android
-
Mozilla Firefox: By holding a reference to the eval() function from an about:blank window…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: When trying to load a non-video in an audio/video context the exact status code (200…
- Mozilla Firefox
- Mozilla Firefox for Android
-
Mozilla Firefox: A lock was missing when accessing a data structure and importing certificate information…
- Mozilla Firefox
- Mozilla Firefox for Android
-
Mozilla developers reported memory safety bugs present in Firefox for Android 79.
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox for Android: When typing in a password under certain conditions…
- Mozilla Firefox for Android