# Mozilla Firefox.

Every CVE that names Mozilla Firefox among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Mozilla Thunderbird: A use-after-free vulnerability can occur during mouse event handling due to issues with…](https://agentprime.io/advisories/CVE-2018-5103.md)
  `CVE-2018-5103` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Thunderbird: A use-after-free vulnerability can occur when manipulating HTML media elements with media…](https://agentprime.io/advisories/CVE-2018-5102.md)
  `CVE-2018-5102` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: A use-after-free vulnerability can occur when manipulating floating "first-letter" style…](https://agentprime.io/advisories/CVE-2018-5101.md)
  `CVE-2018-5101` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: A use-after-free vulnerability can occur when arguments passed to the…](https://agentprime.io/advisories/CVE-2018-5100.md)
  `CVE-2018-5100` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Thunderbird: A use-after-free vulnerability can occur when the widget listener is holding strong…](https://agentprime.io/advisories/CVE-2018-5099.md)
  `CVE-2018-5099` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Thunderbird: A use-after-free vulnerability can occur when form input elements, focus…](https://agentprime.io/advisories/CVE-2018-5098.md)
  `CVE-2018-5098` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Thunderbird: A use-after-free vulnerability can occur during XSL transformations when the source…](https://agentprime.io/advisories/CVE-2018-5097.md)
  `CVE-2018-5097` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Thunderbird: An integer overflow vulnerability in the Skia library when allocating memory for edge…](https://agentprime.io/advisories/CVE-2018-5095.md)
  `CVE-2018-5095` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: A heap buffer overflow vulnerability may occur in WebAssembly when "shrinkElements" is…](https://agentprime.io/advisories/CVE-2018-5094.md)
  `CVE-2018-5094` · CVE record: Mozilla Firefox · No CVSS score · EPSS 0.15 · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: A heap buffer overflow vulnerability may occur in WebAssembly during Memory/Table…](https://agentprime.io/advisories/CVE-2018-5093.md)
  `CVE-2018-5093` · CVE record: Mozilla Firefox · No CVSS score · EPSS 0.19 · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: A use-after-free vulnerability can occur when the thread for a Web Worker is freed from…](https://agentprime.io/advisories/CVE-2018-5092.md)
  `CVE-2018-5092` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox ESR: A use-after-free vulnerability can occur during WebRTC connections when interacting with…](https://agentprime.io/advisories/CVE-2018-5091.md)
  `CVE-2018-5091` · CVE record: Mozilla Firefox ESR and 1 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Memory safety bugs were reported in Firefox 57.](https://agentprime.io/advisories/CVE-2018-5090.md)
  `CVE-2018-5090` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5.](https://agentprime.io/advisories/CVE-2018-5089.md)
  `CVE-2018-5089` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Thunderbird: A buffer overflow occurs when drawing and validating elements using Direct 3D 9 with the…](https://agentprime.io/advisories/CVE-2017-7845.md)
  `CVE-2017-7845` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: A combination of an external SVG image referenced on a page and the coloring of anchor…](https://agentprime.io/advisories/CVE-2017-7844.md)
  `CVE-2017-7844` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox ESR: When Private Browsing mode is used, it is possible for a web worker to write persistent…](https://agentprime.io/advisories/CVE-2017-7843.md)
  `CVE-2017-7843` · CVE record: Mozilla Firefox ESR and 1 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: If a document's Referrer Policy attribute is set to "no-referrer" sometimes two network…](https://agentprime.io/advisories/CVE-2017-7842.md)
  `CVE-2017-7842` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: JavaScript can be injected into an exported bookmarks file by placing JavaScript code…](https://agentprime.io/advisories/CVE-2017-7840.md)
  `CVE-2017-7840` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: Control characters prepended before "javascript:" URLs pasted in the addressbar can cause…](https://agentprime.io/advisories/CVE-2017-7839.md)
  `CVE-2017-7839` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: Punycode format text will be displayed for entire qualified international domain names in…](https://agentprime.io/advisories/CVE-2017-7838.md)
  `CVE-2017-7838` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: SVG loaded through "\<img>" tags can use "\<meta>" tags within the SVG data to set cookies…](https://agentprime.io/advisories/CVE-2017-7837.md)
  `CVE-2017-7837` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: The "pingsender" executable used by the Firefox Health Report dynamically loads a system…](https://agentprime.io/advisories/CVE-2017-7836.md)
  `CVE-2017-7836` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: Mixed content blocking of insecure (HTTP) sub-resources in a secure (HTTPS) document was…](https://agentprime.io/advisories/CVE-2017-7835.md)
  `CVE-2017-7835` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: A "data:" URL loaded in a new tab did not inherit the Content Security Policy (CSP) of…](https://agentprime.io/advisories/CVE-2017-7834.md)
  `CVE-2017-7834` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: Some Arabic and Indic vowel marker characters can be combined with Latin characters in a…](https://agentprime.io/advisories/CVE-2017-7833.md)
  `CVE-2017-7833` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: The combined, single character, version of the letter 'i' with any of the potential…](https://agentprime.io/advisories/CVE-2017-7832.md)
  `CVE-2017-7832` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: A vulnerability where the security wrapper does not deny access to some exposed…](https://agentprime.io/advisories/CVE-2017-7831.md)
  `CVE-2017-7831` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [The Resource Timing API incorrectly revealed navigations in cross-origin iframes.](https://agentprime.io/advisories/CVE-2017-7830.md)
  `CVE-2017-7830` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: A use-after-free vulnerability can occur when flushing and resizing layout because the…](https://agentprime.io/advisories/CVE-2017-7828.md)
  `CVE-2017-7828` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Memory safety bugs were reported in Firefox 56.](https://agentprime.io/advisories/CVE-2017-7827.md)
  `CVE-2017-7827` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4.](https://agentprime.io/advisories/CVE-2017-7826.md)
  `CVE-2017-7826` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Several fonts on OS X display some Tibetan and Arabic characters as whitespace.](https://agentprime.io/advisories/CVE-2017-7825.md)
  `CVE-2017-7825` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: A buffer overflow occurs when drawing and validating elements with the ANGLE graphics…](https://agentprime.io/advisories/CVE-2017-7824.md)
  `CVE-2017-7824` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: The content security policy (CSP) "sandbox" directive did not create a unique origin for…](https://agentprime.io/advisories/CVE-2017-7823.md)
  `CVE-2017-7823` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: The AES-GCM implementation in WebCrypto API accepts 0-length IV when it should require a…](https://agentprime.io/advisories/CVE-2017-7822.md)
  `CVE-2017-7822` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: A vulnerability where WebExtensions can download and attempt to open a file of some…](https://agentprime.io/advisories/CVE-2017-7821.md)
  `CVE-2017-7821` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [The "instanceof" operator can bypass the Xray wrapper mechanism.](https://agentprime.io/advisories/CVE-2017-7820.md)
  `CVE-2017-7820` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: A use-after-free vulnerability can occur in design mode when image objects are resized if…](https://agentprime.io/advisories/CVE-2017-7819.md)
  `CVE-2017-7819` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich…](https://agentprime.io/advisories/CVE-2017-7818.md)
  `CVE-2017-7818` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: A spoofing vulnerability can occur when a page switches to fullscreen mode without user…](https://agentprime.io/advisories/CVE-2017-7817.md)
  `CVE-2017-7817` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: WebExtensions could use popups and panels in the extension UI to load an "about:"…](https://agentprime.io/advisories/CVE-2017-7816.md)
  `CVE-2017-7816` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: On pages containing an iframe, the "data:" protocol can be used to create a modal dialog…](https://agentprime.io/advisories/CVE-2017-7815.md)
  `CVE-2017-7815` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: File downloads encoded with "blob:" and "data:" URL elements bypassed normal file…](https://agentprime.io/advisories/CVE-2017-7814.md)
  `CVE-2017-7814` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: Inside the JavaScript parser, a cast of an integer to a narrower type can result in data…](https://agentprime.io/advisories/CVE-2017-7813.md)
  `CVE-2017-7813` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: If web content on a page is dragged onto portions of the browser UI, such as the tab bar…](https://agentprime.io/advisories/CVE-2017-7812.md)
  `CVE-2017-7812` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Memory safety bugs were reported in Firefox 55.](https://agentprime.io/advisories/CVE-2017-7811.md)
  `CVE-2017-7811` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3.](https://agentprime.io/advisories/CVE-2017-7810.md)
  `CVE-2017-7810` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: A content security policy (CSP) "frame-ancestors" directive containing origins with paths…](https://agentprime.io/advisories/CVE-2017-7808.md)
  `CVE-2017-7808` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Thunderbird: A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the…](https://agentprime.io/advisories/CVE-2017-7807.md)
  `CVE-2017-7807` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: A use-after-free vulnerability can occur when the layer manager is freed too early when…](https://agentprime.io/advisories/CVE-2017-7806.md)
  `CVE-2017-7806` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer.](https://agentprime.io/advisories/CVE-2017-7805.md)
  `CVE-2017-7805` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Thunderbird: The destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by…](https://agentprime.io/advisories/CVE-2017-7804.md)
  `CVE-2017-7804` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Thunderbird: When a page's content security policy (CSP) header contains a "sandbox" directive…](https://agentprime.io/advisories/CVE-2017-7803.md)
  `CVE-2017-7803` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Thunderbird: A use-after-free vulnerability can occur when manipulating the DOM during the resize…](https://agentprime.io/advisories/CVE-2017-7802.md)
  `CVE-2017-7802` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Thunderbird: A use-after-free vulnerability can occur while re-computing layout for a "marquee"…](https://agentprime.io/advisories/CVE-2017-7801.md)
  `CVE-2017-7801` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Thunderbird: A use-after-free vulnerability can occur in WebSockets when the object holding the…](https://agentprime.io/advisories/CVE-2017-7800.md)
  `CVE-2017-7800` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [JavaScript in the "about:webrtc" page is not sanitized properly being assigned to "innerHTML".](https://agentprime.io/advisories/CVE-2017-7799.md)
  `CVE-2017-7799` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox ESR: The Developer Tools feature suffers from a XUL injection vulnerability due to improper…](https://agentprime.io/advisories/CVE-2017-7798.md)
  `CVE-2017-7798` · CVE record: Mozilla Firefox ESR and 1 more · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: Response header name interning does not have same-origin protections and these headers…](https://agentprime.io/advisories/CVE-2017-7797.md)
  `CVE-2017-7797` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018

Newest: <https://agentprime.io/advisories/technology/mozilla-firefox.md>
Older: <https://agentprime.io/advisories/technology/mozilla-firefox.md?cursor=WyIyMDE4LTA2LTExVDIxOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxNy03Nzk3Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=mozilla-firefox&cursor=WyIyMDE4LTA2LTExVDIxOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxOC01MTA0Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/mozilla-firefox/?cursor=WyIyMDE4LTA2LTExVDIxOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxOC01MTA0Il0>. Everything for agents: <https://agentprime.io/llms.txt>.