# Mozilla Firefox. Every CVE that names Mozilla Firefox among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Memory safety bugs fixed in Firefox 140 and Thunderbird 140](https://agentprime.io/advisories/CVE-2025-6436.md) `CVE-2025-6436` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 24 Jun 2025 · Tags: Memory corruption - [Save as in Devtools could download files without sanitizing the extension](https://agentprime.io/advisories/CVE-2025-6435.md) `CVE-2025-6435` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 24 Jun 2025 · Tags: Unrestricted file upload - [HTTPS-Only exception screen lacked anti-clickjacking delay](https://agentprime.io/advisories/CVE-2025-6434.md) `CVE-2025-6434` · CVE record: Mozilla Firefox and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 24 Jun 2025 · Tags: CWE-1021 - [WebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificate](https://agentprime.io/advisories/CVE-2025-6433.md) `CVE-2025-6433` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jun 2025 · Tags: Weak cryptography or TLS - [DNS Requests leaked outside of a configured SOCKS proxy](https://agentprime.io/advisories/CVE-2025-6432.md) `CVE-2025-6432` · CVE record: Mozilla Firefox and 1 more · CVSS 8.6 High · Not analysed yet · Published 24 Jun 2025 · Tags: Information disclosure - [The prompt in Firefox for Android that asks before opening a link in an external application could be bypassed](https://agentprime.io/advisories/CVE-2025-6431.md) `CVE-2025-6431` · CVE record: Mozilla Firefox · CVSS 6.5 Medium · Not analysed yet · Published 24 Jun 2025 · Tags: Broken access control - [Firefox for Android opened URLs specified in a link querystring parameter](https://agentprime.io/advisories/CVE-2025-6428.md) `CVE-2025-6428` · CVE record: Mozilla Firefox · CVSS 4.3 Medium · Not analysed yet · Published 24 Jun 2025 · Tags: Open redirect - [connect-src Content Security Policy restriction could be bypassed](https://agentprime.io/advisories/CVE-2025-6427.md) `CVE-2025-6427` · CVE record: Mozilla Firefox and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jun 2025 · Tags: CWE-693 - [Content-Disposition header ignored when a file is included in an embed or object tag](https://agentprime.io/advisories/CVE-2025-6430.md) `CVE-2025-6430` · CVE record: Mozilla Firefox and 1 more · CVSS 6.1 Medium · Not analysed yet · Published 24 Jun 2025 · Tags: Cross-site scripting (XSS) - [Incorrect parsing of URLs could have allowed embedding of youtube.com](https://agentprime.io/advisories/CVE-2025-6429.md) `CVE-2025-6429` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 24 Jun 2025 · Tags: CWE-116 - [No warning when opening executable terminal files on macOS](https://agentprime.io/advisories/CVE-2025-6426.md) `CVE-2025-6426` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 24 Jun 2025 · Tags: CWE-345 - [The WebCompat WebExtension shipped with Firefox exposed a persistent UUID](https://agentprime.io/advisories/CVE-2025-6425.md) `CVE-2025-6425` · CVE record: Mozilla Firefox and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 24 Jun 2025 · Tags: Information disclosure - [Use-after-free in FontFaceSet](https://agentprime.io/advisories/CVE-2025-6424.md) `CVE-2025-6424` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jun 2025 · Tags: Memory corruption - [Integer overflow in OrderedHashTable](https://agentprime.io/advisories/CVE-2025-49710.md) `CVE-2025-49710` · CVE record: Mozilla Firefox · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Jun 2025 · Tags: Memory corruption - [Memory corruption in canvas surfaces](https://agentprime.io/advisories/CVE-2025-49709.md) `CVE-2025-49709` · CVE record: Mozilla Firefox · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Jun 2025 · Tags: Memory corruption - [Memory safety bugs fixed in Firefox 139 and Thunderbird 139](https://agentprime.io/advisories/CVE-2025-5272.md) `CVE-2025-5272` · CVE record: Mozilla Firefox and 1 more · CVSS 7.3 High · Not analysed yet · Published 27 May 2025 · Tags: Memory corruption - [Devtools' preview ignored CSP headers](https://agentprime.io/advisories/CVE-2025-5271.md) `CVE-2025-5271` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 27 May 2025 · Tags: CWE-116 - [SNI was sometimes unencrypted](https://agentprime.io/advisories/CVE-2025-5270.md) `CVE-2025-5270` · CVE record: Mozilla Firefox and 1 more · CVSS 7.5 High · Not analysed yet · Published 27 May 2025 · Tags: Weak cryptography or TLS - [Memory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.11](https://agentprime.io/advisories/CVE-2025-5269.md) `CVE-2025-5269` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 27 May 2025 · Tags: Memory corruption - [Memory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.11](https://agentprime.io/advisories/CVE-2025-5268.md) `CVE-2025-5268` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 27 May 2025 · Tags: Memory corruption - [Clickjacking vulnerability could have led to leaking saved payment card details](https://agentprime.io/advisories/CVE-2025-5267.md) `CVE-2025-5267` · CVE record: Mozilla Firefox and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 27 May 2025 · Tags: CWE-1021 - [Script element events leaked cross-origin resource status](https://agentprime.io/advisories/CVE-2025-5266.md) `CVE-2025-5266` · CVE record: Mozilla Firefox and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 27 May 2025 · Tags: Information disclosure - [Potential local code execution in “Copy as cURL” command](https://agentprime.io/advisories/CVE-2025-5265.md) `CVE-2025-5265` · CVE record: Mozilla Firefox and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 27 May 2025 · Tags: Command injection - [Potential local code execution in “Copy as cURL” command](https://agentprime.io/advisories/CVE-2025-5264.md) `CVE-2025-5264` · CVE record: Mozilla Firefox and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 27 May 2025 · Tags: Command injection - [Error handling for script execution was incorrectly isolated from web content](https://agentprime.io/advisories/CVE-2025-5263.md) `CVE-2025-5263` · CVE record: Mozilla Firefox and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 27 May 2025 · Tags: CWE-346 - [Out-of-bounds access when optimizing linear sums](https://agentprime.io/advisories/CVE-2025-4919.md) `CVE-2025-4919` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 17 May 2025 · Tags: Memory corruption - [Out-of-bounds access when resolving Promise objects](https://agentprime.io/advisories/CVE-2025-4918.md) `CVE-2025-4918` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 May 2025 · Tags: Memory corruption - [Memory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.10](https://agentprime.io/advisories/CVE-2025-4093.md) `CVE-2025-4093` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 29 Apr 2025 · Tags: Memory corruption - [Memory safety bugs fixed in Firefox 138 and Thunderbird 138](https://agentprime.io/advisories/CVE-2025-4092.md) `CVE-2025-4092` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 29 Apr 2025 · Tags: Memory corruption - [Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10](https://agentprime.io/advisories/CVE-2025-4091.md) `CVE-2025-4091` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 29 Apr 2025 · Tags: Memory corruption - [Leaked library paths in Thunderbird for Android](https://agentprime.io/advisories/CVE-2025-4090.md) `CVE-2025-4090` · CVE record: Mozilla Firefox and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 29 Apr 2025 · Tags: Information disclosure - [Potential local code execution in "copy as cURL" command](https://agentprime.io/advisories/CVE-2025-4089.md) `CVE-2025-4089` · CVE record: Mozilla Firefox and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 29 Apr 2025 · Tags: Command injection - [Cross-site request forgery via storage access API redirects](https://agentprime.io/advisories/CVE-2025-4088.md) `CVE-2025-4088` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 29 Apr 2025 · Tags: Cross-site request forgery (CSRF) - [Unsafe attribute access during XPath parsing](https://agentprime.io/advisories/CVE-2025-4087.md) `CVE-2025-4087` · CVE record: Mozilla Firefox and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 29 Apr 2025 · Tags: Memory corruption - [Specially crafted filename could be used to obscure download type](https://agentprime.io/advisories/CVE-2025-4086.md) `CVE-2025-4086` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 29 Apr 2025 · Tags: CWE-451 - [Potential information leakage and privilege escalation in UITour actor](https://agentprime.io/advisories/CVE-2025-4085.md) `CVE-2025-4085` · CVE record: Mozilla Firefox and 1 more · CVSS 7.1 High · Not analysed yet · Published 29 Apr 2025 · Tags: Privilege escalation - [Potential local code execution in "copy as cURL" command](https://agentprime.io/advisories/CVE-2025-4084.md) `CVE-2025-4084` · CVE record: Mozilla Firefox and 1 more · CVSS 5.7 Medium · Not analysed yet · Published 29 Apr 2025 · Tags: CWE-116 - [Process isolation bypass using "javascript:" URI links in cross-origin frames](https://agentprime.io/advisories/CVE-2025-4083.md) `CVE-2025-4083` · CVE record: Mozilla Firefox and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Apr 2025 · Tags: CWE-653 - [WebGL shader attribute memory corruption in Thunderbird for macOS](https://agentprime.io/advisories/CVE-2025-4082.md) `CVE-2025-4082` · CVE record: Mozilla Firefox and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 29 Apr 2025 · Tags: Memory corruption - [Privilege escalation in Thunderbird Updater](https://agentprime.io/advisories/CVE-2025-2817.md) `CVE-2025-2817` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 29 Apr 2025 · Tags: Path traversal - [Race condition in nsHttpTransaction could lead to memory corruption](https://agentprime.io/advisories/CVE-2025-3608.md) `CVE-2025-3608` · CVE record: Mozilla Firefox · CVSS 6.5 Medium · Not analysed yet · Published 15 Apr 2025 · Tags: Race condition - [Tab title disclosure across pages when using AI chatbot](https://agentprime.io/advisories/CVE-2025-3035.md) `CVE-2025-3035` · CVE record: Mozilla Firefox · CVSS 5.3 Medium · Not analysed yet · Published 1 Apr 2025 · Tags: Information disclosure - [Memory safety bugs fixed in Firefox 137 and Thunderbird 137](https://agentprime.io/advisories/CVE-2025-3034.md) `CVE-2025-3034` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 1 Apr 2025 - [Opening local .url files could lead to another file being opened](https://agentprime.io/advisories/CVE-2025-3033.md) `CVE-2025-3033` · CVE record: Mozilla Firefox and 1 more · CVSS 7.7 High · Not analysed yet · Published 1 Apr 2025 · Tags: Path traversal - [Leaking file descriptors from the fork server](https://agentprime.io/advisories/CVE-2025-3032.md) `CVE-2025-3032` · CVE record: Mozilla Firefox and 1 more · CVSS 7.4 High · Not analysed yet · Published 1 Apr 2025 · Tags: CWE-403 - [JIT optimization bug with different stack slot sizes](https://agentprime.io/advisories/CVE-2025-3031.md) `CVE-2025-3031` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Apr 2025 · Tags: Information disclosure - [Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9](https://agentprime.io/advisories/CVE-2025-3030.md) `CVE-2025-3030` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 1 Apr 2025 · Tags: Memory corruption - [URL Bar Spoofing via non-BMP Unicode characters](https://agentprime.io/advisories/CVE-2025-3029.md) `CVE-2025-3029` · CVE record: Mozilla Firefox and 1 more · CVSS 7.3 High · Not analysed yet · Published 1 Apr 2025 · Tags: Authentication bypass - [Use-after-free triggered by XSLTProcessor](https://agentprime.io/advisories/CVE-2025-3028.md) `CVE-2025-3028` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Apr 2025 · Tags: Memory corruption - [Incorrect handle could lead to sandbox escapes](https://agentprime.io/advisories/CVE-2025-2857.md) `CVE-2025-2857` · CVE record: Mozilla Firefox · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Mar 2025 · Tags: Information disclosure - [Memory safety bugs fixed in Firefox 136 and Thunderbird 136](https://agentprime.io/advisories/CVE-2025-1943.md) `CVE-2025-1943` · CVE record: Mozilla Firefox and 1 more · CVSS 8.2 High · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption - [Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8](https://agentprime.io/advisories/CVE-2025-1938.md) `CVE-2025-1938` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption - [Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.8](https://agentprime.io/advisories/CVE-2025-1937.md) `CVE-2025-1937` · CVE record: Mozilla Firefox and 1 more · CVSS 7.5 High · Not analysed yet · Published 4 Mar 2025 · Tags: CWE-1260 - [Adding %00 and a fake extension to a jar: URL changed the interpretation of the contents](https://agentprime.io/advisories/CVE-2025-1936.md) `CVE-2025-1936` · CVE record: Mozilla Firefox and 1 more · CVSS 7.3 High · Not analysed yet · Published 4 Mar 2025 · Tags: CWE-158 - [Clickjacking the registerProtocolHandler info-bar](https://agentprime.io/advisories/CVE-2025-1935.md) `CVE-2025-1935` · CVE record: Mozilla Firefox and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 4 Mar 2025 · Tags: Cross-site scripting (XSS) - [Disclosure of uninitialized memory when .toUpperCase() causes string to get longer](https://agentprime.io/advisories/CVE-2025-1942.md) `CVE-2025-1942` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Mar 2025 · Tags: Memory corruption - [Lock screen setting bypass in Firefox Focus for Android](https://agentprime.io/advisories/CVE-2025-1941.md) `CVE-2025-1941` · CVE record: Mozilla Firefox · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Mar 2025 · Tags: Broken access control - [Unexpected GC during RegExp bailout processing](https://agentprime.io/advisories/CVE-2025-1934.md) `CVE-2025-1934` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 4 Mar 2025 - [Android Intent confirmation prompt tapjacking using Select options](https://agentprime.io/advisories/CVE-2025-1940.md) `CVE-2025-1940` · CVE record: Mozilla Firefox · CVSS 7.1 High · Not analysed yet · Published 4 Mar 2025 · Tags: CWE-1021 - [JIT corruption of WASM i32 return values on 64-bit CPUs](https://agentprime.io/advisories/CVE-2025-1933.md) `CVE-2025-1933` · CVE record: Mozilla Firefox and 1 more · CVSS 7.6 High · Not analysed yet · Published 4 Mar 2025 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .