# Mozilla Firefox.

Every CVE that names Mozilla Firefox among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Mozilla Firefox: When the RSS Feed preview about:feeds page is framed within another page…](https://agentprime.io/advisories/CVE-2018-18496.md)
  `CVE-2018-18496` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 28 Feb 2019
- [Mozilla Firefox: WebExtension content scripts can be loaded into about: pages in some circumstances…](https://agentprime.io/advisories/CVE-2018-18495.md)
  `CVE-2018-18495` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 28 Feb 2019
- [Mozilla Thunderbird: A same-origin policy violation allowing the theft of cross-origin URL entries when using…](https://agentprime.io/advisories/CVE-2018-18494.md)
  `CVE-2018-18494` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 28 Feb 2019
- [Mozilla Thunderbird: A buffer overflow can occur in the Skia library during buffer offset calculations with…](https://agentprime.io/advisories/CVE-2018-18493.md)
  `CVE-2018-18493` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 28 Feb 2019
- [Mozilla Thunderbird: A use-after-free vulnerability can occur after deleting a selection element due to a weak…](https://agentprime.io/advisories/CVE-2018-18492.md)
  `CVE-2018-18492` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 28 Feb 2019
- [Mozilla Firefox: A buffer overflow occurs when drawing and validating elements with the ANGLE graphics…](https://agentprime.io/advisories/CVE-2018-12407.md)
  `CVE-2018-12407` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 28 Feb 2019
- [Mozilla developers and community members reported memory safety bugs present in Firefox 63.](https://agentprime.io/advisories/CVE-2018-12406.md)
  `CVE-2018-12406` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 28 Feb 2019
- [Mozilla Thunderbird: Mozilla developers and community members reported memory safety bugs present in Firefox…](https://agentprime.io/advisories/CVE-2018-12405.md)
  `CVE-2018-12405` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 28 Feb 2019
- [Mozilla Firefox: If a site is loaded over a HTTPS connection but loads a favicon resource over HTTP…](https://agentprime.io/advisories/CVE-2018-12403.md)
  `CVE-2018-12403` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 28 Feb 2019
- [The internal WebBrowserPersist code does not use correct origin context for a resource being saved.](https://agentprime.io/advisories/CVE-2018-12402.md)
  `CVE-2018-12402` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 28 Feb 2019
- [Mozilla Firefox: Some special resource URIs will cause a non-exploitable crash if loaded with optional…](https://agentprime.io/advisories/CVE-2018-12401.md)
  `CVE-2018-12401` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 28 Feb 2019
- [Mozilla Firefox: In private browsing mode on Firefox for Android…](https://agentprime.io/advisories/CVE-2018-12400.md)
  `CVE-2018-12400` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 28 Feb 2019
- [Mozilla Firefox: When a new protocol handler is registered…](https://agentprime.io/advisories/CVE-2018-12399.md)
  `CVE-2018-12399` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 28 Feb 2019
- [Mozilla Firefox: By using the reflected URL in some special resource URIs, such as chrome…](https://agentprime.io/advisories/CVE-2018-12398.md)
  `CVE-2018-12398` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 28 Feb 2019
- [Mozilla Firefox ESR: A WebExtension can request access to local files without the warning prompt stating that…](https://agentprime.io/advisories/CVE-2018-12397.md)
  `CVE-2018-12397` · CVE record: Mozilla Firefox ESR and 1 more · No CVSS score · Not analysed yet · Published 28 Feb 2019
- [Mozilla Firefox ESR: A vulnerability where a WebExtension can run content scripts in disallowed contexts…](https://agentprime.io/advisories/CVE-2018-12396.md)
  `CVE-2018-12396` · CVE record: Mozilla Firefox ESR and 1 more · No CVSS score · Not analysed yet · Published 28 Feb 2019
- [Mozilla Firefox ESR: By rewriting the Host: request headers using the webRequest API…](https://agentprime.io/advisories/CVE-2018-12395.md)
  `CVE-2018-12395` · CVE record: Mozilla Firefox ESR and 1 more · No CVSS score · Not analysed yet · Published 28 Feb 2019
- [Mozilla Firefox: A potential vulnerability was found in 32-bit builds where an integer overflow during the…](https://agentprime.io/advisories/CVE-2018-12393.md)
  `CVE-2018-12393` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 28 Feb 2019
- [Mozilla Firefox: When manipulating user events in nested loops while opening a document through script…](https://agentprime.io/advisories/CVE-2018-12392.md)
  `CVE-2018-12392` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 28 Feb 2019
- [Mozilla Firefox: During HTTP Live Stream playback on Firefox for Android…](https://agentprime.io/advisories/CVE-2018-12391.md)
  `CVE-2018-12391` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 28 Feb 2019
- [Mozilla Firefox: Mozilla developers and community members reported memory safety bugs present in Firefox…](https://agentprime.io/advisories/CVE-2018-12390.md)
  `CVE-2018-12390` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 28 Feb 2019
- [Mozilla developers and community members reported memory safety bugs present in Firefox 62.](https://agentprime.io/advisories/CVE-2018-12388.md)
  `CVE-2018-12388` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 28 Feb 2019
- [Mozilla Firefox: When proxy auto-detection is enabled…](https://agentprime.io/advisories/CVE-2018-18506.md)
  `CVE-2018-18506` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 5 Feb 2019
- [Mozilla Thunderbird: An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079…](https://agentprime.io/advisories/CVE-2018-18505.md)
  `CVE-2018-18505` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 5 Feb 2019
- [Mozilla Firefox: When JavaScript is used to create and manipulate an audio buffer…](https://agentprime.io/advisories/CVE-2018-18503.md)
  `CVE-2018-18503` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 5 Feb 2019
- [Mozilla developers and community members reported memory safety bugs present in Firefox 64.](https://agentprime.io/advisories/CVE-2018-18502.md)
  `CVE-2018-18502` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 5 Feb 2019
- [Mozilla Thunderbird: Mozilla developers and community members reported memory safety bugs present in Firefox…](https://agentprime.io/advisories/CVE-2018-18501.md)
  `CVE-2018-18501` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 5 Feb 2019
- [Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8.](https://agentprime.io/advisories/CVE-2018-5188.md)
  `CVE-2018-5188` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018
- [Memory safety bugs present in Firefox 60 and Firefox ESR 60.](https://agentprime.io/advisories/CVE-2018-5187.md)
  `CVE-2018-5187` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018
- [Memory safety bugs present in Firefox 60.](https://agentprime.io/advisories/CVE-2018-5186.md)
  `CVE-2018-5186` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 18 Oct 2018
- [Mozilla Thunderbird: A vulnerability can occur when capturing a media stream when the media source type is…](https://agentprime.io/advisories/CVE-2018-5156.md)
  `CVE-2018-5156` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018
- [Mozilla Firefox ESR: A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with…](https://agentprime.io/advisories/CVE-2018-12387.md)
  `CVE-2018-12387` · CVE record: Mozilla Firefox ESR and 1 more · No CVSS score · Not analysed yet · Published 18 Oct 2018
- [Mozilla Firefox ESR: A vulnerability in register allocation in JavaScript can lead to type confusion…](https://agentprime.io/advisories/CVE-2018-12386.md)
  `CVE-2018-12386` · CVE record: Mozilla Firefox ESR and 1 more · No CVSS score · EPSS 0.14 · Not analysed yet · Published 18 Oct 2018
- [Mozilla Thunderbird: A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by…](https://agentprime.io/advisories/CVE-2018-12385.md)
  `CVE-2018-12385` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018
- [Mozilla Firefox: If a user saved passwords before Firefox 58 and then later set a master password…](https://agentprime.io/advisories/CVE-2018-12383.md)
  `CVE-2018-12383` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018
- [Mozilla Firefox: The displayed addressbar URL can be spoofed on Firefox for Android using a javascript…](https://agentprime.io/advisories/CVE-2018-12382.md)
  `CVE-2018-12382` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 18 Oct 2018
- [Mozilla Firefox ESR: Manually dragging and dropping an Outlook email message into the browser will trigger a…](https://agentprime.io/advisories/CVE-2018-12381.md)
  `CVE-2018-12381` · CVE record: Mozilla Firefox ESR and 1 more · No CVSS score · Not analysed yet · Published 18 Oct 2018
- [Mozilla Firefox: When the Mozilla Updater opens a MAR format file which contains a very long item…](https://agentprime.io/advisories/CVE-2018-12379.md)
  `CVE-2018-12379` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018
- [Mozilla Firefox: A use-after-free vulnerability can occur when an IndexedDB index is deleted while still…](https://agentprime.io/advisories/CVE-2018-12378.md)
  `CVE-2018-12378` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018
- [Mozilla Firefox: A use-after-free vulnerability can occur when refresh driver timers are refreshed in some…](https://agentprime.io/advisories/CVE-2018-12377.md)
  `CVE-2018-12377` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018
- [Memory safety bugs present in Firefox 61 and Firefox ESR 60.1.](https://agentprime.io/advisories/CVE-2018-12376.md)
  `CVE-2018-12376` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018
- [Memory safety bugs present in Firefox 61.](https://agentprime.io/advisories/CVE-2018-12375.md)
  `CVE-2018-12375` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 18 Oct 2018
- [In Reader View SameSite cookie protections are not checked on exiting.](https://agentprime.io/advisories/CVE-2018-12370.md)
  `CVE-2018-12370` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 18 Oct 2018
- [WebExtensions bundled with embedded experiments were not correctly checked for proper authorization.](https://agentprime.io/advisories/CVE-2018-12369.md)
  `CVE-2018-12369` · CVE record: Mozilla Firefox ESR and 1 more · No CVSS score · Not analysed yet · Published 18 Oct 2018
- [Mozilla Thunderbird: Windows 10 does not warn users before opening executable files with the SettingContent-ms…](https://agentprime.io/advisories/CVE-2018-12368.md)
  `CVE-2018-12368` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018
- [Mozilla Thunderbird: In the previous mitigations for Spectre…](https://agentprime.io/advisories/CVE-2018-12367.md)
  `CVE-2018-12367` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018
- [Mozilla Thunderbird: An invalid grid size during QCMS (color profile) transformations can result in the…](https://agentprime.io/advisories/CVE-2018-12366.md)
  `CVE-2018-12366` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018
- [Mozilla Thunderbird: A compromised IPC child process can escape the content sandbox and list the names of…](https://agentprime.io/advisories/CVE-2018-12365.md)
  `CVE-2018-12365` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018
- [Mozilla Thunderbird: NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests…](https://agentprime.io/advisories/CVE-2018-12364.md)
  `CVE-2018-12364` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018
- [Mozilla Thunderbird: A use-after-free vulnerability can occur when script uses mutation events to move DOM…](https://agentprime.io/advisories/CVE-2018-12363.md)
  `CVE-2018-12363` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018
- [Mozilla Thunderbird: An integer overflow can occur during graphics operations done by the Supplemental…](https://agentprime.io/advisories/CVE-2018-12362.md)
  `CVE-2018-12362` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018
- [An integer overflow can occur in the SwizzleData code while calculating buffer sizes.](https://agentprime.io/advisories/CVE-2018-12361.md)
  `CVE-2018-12361` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018
- [Mozilla Thunderbird: A use-after-free vulnerability can occur when deleting an input element during a mutation…](https://agentprime.io/advisories/CVE-2018-12360.md)
  `CVE-2018-12360` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018
- [Mozilla Thunderbird: A buffer overflow can occur when rendering canvas content while adjusting the height and…](https://agentprime.io/advisories/CVE-2018-12359.md)
  `CVE-2018-12359` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 18 Oct 2018
- [Mozilla Firefox: Service workers can use redirection to avoid the tainting of cross-origin resources in…](https://agentprime.io/advisories/CVE-2018-12358.md)
  `CVE-2018-12358` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 18 Oct 2018
- [Mozilla Firefox: A use-after-free in nsINode::ReplaceOrInsertBefore during DOM operations resulting in…](https://agentprime.io/advisories/CVE-2016-9069.md)
  `CVE-2016-9069` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 18 Oct 2018
- [Mozilla Firefox: If a text string that happens to be a filename in the operating system's native format is…](https://agentprime.io/advisories/CVE-2018-5182.md)
  `CVE-2018-5182` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: If a URL using the "file:" protocol is dragged and dropped onto an open tab that is…](https://agentprime.io/advisories/CVE-2018-5181.md)
  `CVE-2018-5181` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [A use-after-free vulnerability can occur during WebGL operations.](https://agentprime.io/advisories/CVE-2018-5180.md)
  `CVE-2018-5180` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018
- [Mozilla Firefox: A vulnerability exists in XSLT during number formatting where a negative buffer size may…](https://agentprime.io/advisories/CVE-2018-5177.md)
  `CVE-2018-5177` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 11 Jun 2018

Newest: <https://agentprime.io/advisories/technology/mozilla-firefox.md>
Older: <https://agentprime.io/advisories/technology/mozilla-firefox.md?cursor=WyIyMDE4LTA2LTExVDIxOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxOC01MTc3Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=mozilla-firefox&cursor=WyIyMDE5LTAyLTI4VDE4OjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxOC0xODQ5NyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/mozilla-firefox/?cursor=WyIyMDE5LTAyLTI4VDE4OjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxOC0xODQ5NyJd>. Everything for agents: <https://agentprime.io/llms.txt>.