# Mozilla Firefox.

Every CVE that names Mozilla Firefox among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Mozilla Firefox: A malicious page can briefly cause the wrong name to be highlighted as the domain name in…](https://agentprime.io/advisories/CVE-2019-11699.md)
  `CVE-2019-11699` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 23 Jul 2019
- [Mozilla Firefox: A hyperlink using the res: protocol can be used to open local files at a known location…](https://agentprime.io/advisories/CVE-2019-11700.md)
  `CVE-2019-11700` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 23 Jul 2019
- [Mozilla Firefox: The default webcal: protocol handler will load a web site vulnerable to cross-site…](https://agentprime.io/advisories/CVE-2019-11701.md)
  `CVE-2019-11701` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 23 Jul 2019
- [Mozilla Firefox: A hyperlink using protocols associated with Internet Explorer, such as IE.HTTP…](https://agentprime.io/advisories/CVE-2019-11702.md)
  `CVE-2019-11702` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 23 Jul 2019
- [Type confusion in Mozilla Firefox ESR and others](https://agentprime.io/advisories/CVE-2019-11707.md)
  `CVE-2019-11707` · CVE record: Mozilla Firefox ESR and 2 more · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.38 · Not analysed yet · Published 23 Jul 2019 · Tags: Memory corruption
- [Improper input validation in Mozilla Firefox ESR and others](https://agentprime.io/advisories/CVE-2019-11708.md)
  `CVE-2019-11708` · CVE record: Mozilla Firefox ESR and 2 more · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.56 · Not analysed yet · Published 23 Jul 2019 · Tags: CWE-20
- [Mozilla Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox…](https://agentprime.io/advisories/CVE-2019-11709.md)
  `CVE-2019-11709` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019
- [Mozilla developers and community members reported memory safety bugs present in Firefox 67.](https://agentprime.io/advisories/CVE-2019-11710.md)
  `CVE-2019-11710` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 23 Jul 2019
- [Mozilla Firefox ESR: When an inner window is reused, it does not consider the use of document.domain for…](https://agentprime.io/advisories/CVE-2019-11711.md)
  `CVE-2019-11711` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019
- [Mozilla Firefox ESR: POST requests made by NPAPI plugins, such as Flash…](https://agentprime.io/advisories/CVE-2019-11712.md)
  `CVE-2019-11712` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019
- [Mozilla Firefox ESR: A use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed…](https://agentprime.io/advisories/CVE-2019-11713.md)
  `CVE-2019-11713` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019
- [Mozilla Firefox: Necko can access a child on the wrong thread during UDP connections…](https://agentprime.io/advisories/CVE-2019-11714.md)
  `CVE-2019-11714` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 23 Jul 2019
- [Mozilla Firefox ESR: Due to an error while parsing page content…](https://agentprime.io/advisories/CVE-2019-11715.md)
  `CVE-2019-11715` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019
- [Mozilla Firefox: Until explicitly accessed by script, window.globalThis is not enumerable and…](https://agentprime.io/advisories/CVE-2019-11716.md)
  `CVE-2019-11716` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 23 Jul 2019
- [Mozilla Firefox ESR: A vulnerability exists where the caret ("^") character is improperly escaped constructing…](https://agentprime.io/advisories/CVE-2019-11717.md)
  `CVE-2019-11717` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019
- [Activity Stream can display content from sent from the Snippet Service website.](https://agentprime.io/advisories/CVE-2019-11718.md)
  `CVE-2019-11718` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 23 Jul 2019
- [Mozilla Firefox ESR: When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes…](https://agentprime.io/advisories/CVE-2019-11719.md)
  `CVE-2019-11719` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019
- [Mozilla Firefox: Some unicode characters are incorrectly treated as whitespace during the parsing of web…](https://agentprime.io/advisories/CVE-2019-11720.md)
  `CVE-2019-11720` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 23 Jul 2019
- [The unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar.](https://agentprime.io/advisories/CVE-2019-11721.md)
  `CVE-2019-11721` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 23 Jul 2019
- [Mozilla Firefox: A vulnerability exists during the installation of add-ons where the initial fetch ignored…](https://agentprime.io/advisories/CVE-2019-11723.md)
  `CVE-2019-11723` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 23 Jul 2019
- [Mozilla Firefox: Application permissions give additional remote troubleshooting permission to the site…](https://agentprime.io/advisories/CVE-2019-11724.md)
  `CVE-2019-11724` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 23 Jul 2019
- [Mozilla Firefox: When a user navigates to site marked as unsafe by the Safebrowsing API…](https://agentprime.io/advisories/CVE-2019-11725.md)
  `CVE-2019-11725` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 23 Jul 2019
- [Mozilla Firefox: A vulnerability exists where it possible to force Network Security Services (NSS) to sign…](https://agentprime.io/advisories/CVE-2019-11727.md)
  `CVE-2019-11727` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 23 Jul 2019
- [Mozilla Firefox: The HTTP Alternative Services header, Alt-Svc…](https://agentprime.io/advisories/CVE-2019-11728.md)
  `CVE-2019-11728` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 23 Jul 2019
- [Mozilla Firefox ESR: Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values…](https://agentprime.io/advisories/CVE-2019-11729.md)
  `CVE-2019-11729` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019
- [Mozilla Firefox ESR: A vulnerability exists where if a user opens a locally saved HTML file…](https://agentprime.io/advisories/CVE-2019-11730.md)
  `CVE-2019-11730` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · EPSS 0.20 · Not analysed yet · Published 23 Jul 2019
- [Mozilla Firefox: A vulnerability exists during authorization prompting for FTP transaction where…](https://agentprime.io/advisories/CVE-2019-9806.md)
  `CVE-2019-9806` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Apr 2019
- [Mozilla Firefox: A latent vulnerability exists in the Prio library where data may be read from…](https://agentprime.io/advisories/CVE-2019-9805.md)
  `CVE-2019-9805` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Apr 2019
- [Mozilla Firefox: In Firefox Developer Tools it is possible that pasting the result of the 'Copy as cURL'…](https://agentprime.io/advisories/CVE-2019-9804.md)
  `CVE-2019-9804` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Apr 2019
- [Mozilla Firefox: The Upgrade-Insecure-Requests (UIR) specification states that if UIR is enabled through…](https://agentprime.io/advisories/CVE-2019-9803.md)
  `CVE-2019-9803` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Apr 2019
- [Mozilla Firefox: If a Sandbox content process is compromised…](https://agentprime.io/advisories/CVE-2019-9802.md)
  `CVE-2019-9802` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Apr 2019
- [Mozilla Thunderbird: Firefox will accept any registered Program ID as an external protocol handler and offer…](https://agentprime.io/advisories/CVE-2019-9801.md)
  `CVE-2019-9801` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 26 Apr 2019
- [Mozilla Firefox: Insufficient bounds checking of data during inter-process communication might allow a…](https://agentprime.io/advisories/CVE-2019-9799.md)
  `CVE-2019-9799` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Apr 2019
- [Mozilla Firefox: On Android systems, Firefox can load a library from APITRACE_LIB…](https://agentprime.io/advisories/CVE-2019-9798.md)
  `CVE-2019-9798` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Apr 2019
- [Mozilla Firefox: Cross-origin images can be read in violation of the same-origin policy by exporting an…](https://agentprime.io/advisories/CVE-2019-9797.md)
  `CVE-2019-9797` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Apr 2019
- [Mozilla Thunderbird: A use-after-free vulnerability can occur when the SMIL animation controller incorrectly…](https://agentprime.io/advisories/CVE-2019-9796.md)
  `CVE-2019-9796` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 26 Apr 2019
- [Mozilla Thunderbird: A vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could…](https://agentprime.io/advisories/CVE-2019-9795.md)
  `CVE-2019-9795` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 26 Apr 2019
- [Mozilla Thunderbird: A vulnerability was discovered where specific command line arguments are not properly…](https://agentprime.io/advisories/CVE-2019-9794.md)
  `CVE-2019-9794` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 26 Apr 2019
- [Mozilla Thunderbird: A mechanism was discovered that removes some bounds checking for string, array…](https://agentprime.io/advisories/CVE-2019-9793.md)
  `CVE-2019-9793` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 26 Apr 2019
- [Mozilla Thunderbird: The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic…](https://agentprime.io/advisories/CVE-2019-9792.md)
  `CVE-2019-9792` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · EPSS 0.13 · Not analysed yet · Published 26 Apr 2019
- [Mozilla Thunderbird: The type inference system allows the compilation of functions that can cause type…](https://agentprime.io/advisories/CVE-2019-9791.md)
  `CVE-2019-9791` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · EPSS 0.20 · Not analysed yet · Published 26 Apr 2019
- [Mozilla Thunderbird: A use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is…](https://agentprime.io/advisories/CVE-2019-9790.md)
  `CVE-2019-9790` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 26 Apr 2019
- [Mozilla developers and community members reported memory safety bugs present in Firefox 65.](https://agentprime.io/advisories/CVE-2019-9789.md)
  `CVE-2019-9789` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Apr 2019
- [Mozilla Thunderbird: Mozilla developers and community members reported memory safety bugs present in Firefox…](https://agentprime.io/advisories/CVE-2019-9788.md)
  `CVE-2019-9788` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 26 Apr 2019
- [Mozilla Firefox: Cross-origin images can be read from a canvas element in violation of the same-origin…](https://agentprime.io/advisories/CVE-2018-18511.md)
  `CVE-2018-18511` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Apr 2019
- [The about:crashcontent and about:crashparent pages can be triggered by web content.](https://agentprime.io/advisories/CVE-2018-18510.md)
  `CVE-2018-18510` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Apr 2019
- [Mozilla Firefox: When arbitrary text is sent over an FTP connection and a page reload is initiated…](https://agentprime.io/advisories/CVE-2019-9807.md)
  `CVE-2019-9807` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Apr 2019
- [Mozilla Firefox: If WebRTC permission is requested from documents with data: or blob: URLs…](https://agentprime.io/advisories/CVE-2019-9808.md)
  `CVE-2019-9808` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Apr 2019
- [Mozilla Firefox: If the source for resources on a page is through an FTP connection…](https://agentprime.io/advisories/CVE-2019-9809.md)
  `CVE-2019-9809` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Apr 2019
- [Mozilla Firefox: Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method…](https://agentprime.io/advisories/CVE-2019-9810.md)
  `CVE-2019-9810` · CVE record: Mozilla Firefox and 2 more · No CVSS score · EPSS 0.27 · Not analysed yet · Published 26 Apr 2019
- [Mozilla Firefox: Incorrect handling of \_\_proto\_\_ mutations may lead to type confusion in IonMonkey JIT…](https://agentprime.io/advisories/CVE-2019-9813.md)
  `CVE-2019-9813` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 26 Apr 2019
- [Mozilla Firefox: Use of uninitialized memory in Graphite2 library in Firefox before 54 in…](https://agentprime.io/advisories/CVE-2017-7777.md)
  `CVE-2017-7777` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 12 Apr 2019
- [Mozilla Firefox: Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in…](https://agentprime.io/advisories/CVE-2017-7776.md)
  `CVE-2017-7776` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 12 Apr 2019
- [Mozilla Firefox: Out-of-bounds read in Graphite2 Library in Firefox before 54 in…](https://agentprime.io/advisories/CVE-2017-7774.md)
  `CVE-2017-7774` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 12 Apr 2019
- [Mozilla Firefox: Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in…](https://agentprime.io/advisories/CVE-2017-7773.md)
  `CVE-2017-7773` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 12 Apr 2019
- [Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.](https://agentprime.io/advisories/CVE-2017-7771.md)
  `CVE-2017-7771` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 12 Apr 2019
- [Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.](https://agentprime.io/advisories/CVE-2017-7772.md)
  `CVE-2017-7772` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 12 Apr 2019
- [Mozilla Firefox: A same-origin policy violation allowing the theft of cross-origin URL entries when using…](https://agentprime.io/advisories/CVE-2018-18499.md)
  `CVE-2018-18499` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 28 Feb 2019
- [Mozilla Thunderbird: A potential vulnerability leading to an integer overflow can occur during buffer size…](https://agentprime.io/advisories/CVE-2018-18498.md)
  `CVE-2018-18498` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 28 Feb 2019
- [Mozilla Firefox: Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be…](https://agentprime.io/advisories/CVE-2018-18497.md)
  `CVE-2018-18497` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 28 Feb 2019

Newest: <https://agentprime.io/advisories/technology/mozilla-firefox.md>
Older: <https://agentprime.io/advisories/technology/mozilla-firefox.md?cursor=WyIyMDE5LTAyLTI4VDE4OjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxOC0xODQ5NyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=mozilla-firefox&cursor=WyIyMDE5LTA3LTIzVDEzOjIxOjU4LjAwMDAwMFoiLCJDVkUtMjAxOS0xMTY5OCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/mozilla-firefox/?cursor=WyIyMDE5LTA3LTIzVDEzOjIxOjU4LjAwMDAwMFoiLCJDVkUtMjAxOS0xMTY5OCJd>. Everything for agents: <https://agentprime.io/llms.txt>.