# Mozilla Firefox. Every CVE that names Mozilla Firefox among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Mozilla Firefox: If an image had not loaded correctly (such as when it is not actually an image)…](https://agentprime.io/advisories/CVE-2019-17014.md) `CVE-2019-17014` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla developers reported memory safety bugs present in Firefox 70.](https://agentprime.io/advisories/CVE-2019-17013.md) `CVE-2019-17013` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2.](https://agentprime.io/advisories/CVE-2019-17012.md) `CVE-2019-17012` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Thunderbird: Under certain conditions, when retrieving a document from a DocShell in the antitracking…](https://agentprime.io/advisories/CVE-2019-17011.md) `CVE-2019-17011` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Thunderbird: Under certain conditions, when checking the Resist Fingerprinting preference during…](https://agentprime.io/advisories/CVE-2019-17010.md) `CVE-2019-17010` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Thunderbird: When running, the updater service wrote status and log files to an unrestricted location…](https://agentprime.io/advisories/CVE-2019-17009.md) `CVE-2019-17009` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [When using nested workers, a use-after-free could occur during worker destruction.](https://agentprime.io/advisories/CVE-2019-17008.md) `CVE-2019-17008` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Thunderbird: The plain text serializer used a fixed-size array for the number of \
    elements it…](https://agentprime.io/advisories/CVE-2019-17005.md) `CVE-2019-17005` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox: If upgrade-insecure-requests was specified in the Content Security Policy…](https://agentprime.io/advisories/CVE-2019-17002.md) `CVE-2019-17002` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [An object tag with a data URI did not correctly inherit the document's Content Security Policy.](https://agentprime.io/advisories/CVE-2019-17000.md) `CVE-2019-17000` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox: A compromised content process could send a message to the parent process that would cause…](https://agentprime.io/advisories/CVE-2019-11765.md) `CVE-2019-11765` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox: Mozilla developers and community members reported memory safety bugs present in Firefox…](https://agentprime.io/advisories/CVE-2019-11764.md) `CVE-2019-11764` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox: Failure to correctly handle null bytes when processing HTML entities resulted in Firefox…](https://agentprime.io/advisories/CVE-2019-11763.md) `CVE-2019-11763` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox: If two same-origin documents set document.domain differently to become cross-origin…](https://agentprime.io/advisories/CVE-2019-11762.md) `CVE-2019-11762` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox: By using a form with a data URI it was possible to gain access to the privileged JSONView…](https://agentprime.io/advisories/CVE-2019-11761.md) `CVE-2019-11761` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling.](https://agentprime.io/advisories/CVE-2019-11760.md) `CVE-2019-11760` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox: An attacker could have caused 4 bytes of HMAC output to be written past the end of a…](https://agentprime.io/advisories/CVE-2019-11759.md) `CVE-2019-11759` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox: Mozilla community member Philipp reported a memory safety bug present in Firefox 68 when…](https://agentprime.io/advisories/CVE-2019-11758.md) `CVE-2019-11758` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox: When following the value's prototype chain…](https://agentprime.io/advisories/CVE-2019-11757.md) `CVE-2019-11757` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox: Improper refcounting of soft token session objects could cause a use-after-free and crash…](https://agentprime.io/advisories/CVE-2019-11756.md) `CVE-2019-11756` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Thunderbird: When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data…](https://agentprime.io/advisories/CVE-2019-11745.md) `CVE-2019-11745` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox: Mozilla Firefox 20.0a1 and earlier allows remote attackers to cause a denial of service…](https://agentprime.io/advisories/CVE-2013-1689.md) `CVE-2013-1689` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 10 Dec 2019 - [Mozilla Firefox: When the pointer lock is enabled by a website though requestPointerLock()…](https://agentprime.io/advisories/CVE-2019-11754.md) `CVE-2019-11754` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: When a master password is set, it is required to be entered again before stored passwords…](https://agentprime.io/advisories/CVE-2019-11733.md) `CVE-2019-11733` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla developers and community members reported memory safety bugs present in Firefox 68.](https://agentprime.io/advisories/CVE-2019-11734.md) `CVE-2019-11734` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: Mozilla developers and community members reported memory safety bugs present in Firefox…](https://agentprime.io/advisories/CVE-2019-11735.md) `CVE-2019-11735` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: The Mozilla Maintenance Service does not guard against files being hardlinked to another…](https://agentprime.io/advisories/CVE-2019-11736.md) `CVE-2019-11736` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: If a wildcard ('\*') is specified for the host in Content Security Policy (CSP)…](https://agentprime.io/advisories/CVE-2019-11737.md) `CVE-2019-11737` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: If a Content Security Policy (CSP) directive is defined that uses a hash-based source…](https://agentprime.io/advisories/CVE-2019-11738.md) `CVE-2019-11738` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: Mozilla developers and community members reported memory safety bugs present in Firefox…](https://agentprime.io/advisories/CVE-2019-11740.md) `CVE-2019-11740` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: A compromised sandboxed content process can perform a Universal Cross-site Scripting…](https://agentprime.io/advisories/CVE-2019-11741.md) `CVE-2019-11741` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: A same-origin policy violation occurs allowing the theft of cross-origin images through a…](https://agentprime.io/advisories/CVE-2019-11742.md) `CVE-2019-11742` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft…](https://agentprime.io/advisories/CVE-2019-11743.md) `CVE-2019-11743` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: Some HTML elements, such as \<title\> and \<textarea>…](https://agentprime.io/advisories/CVE-2019-11744.md) `CVE-2019-11744` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: A use-after-free vulnerability can occur while manipulating video elements if the body is…](https://agentprime.io/advisories/CVE-2019-11746.md) `CVE-2019-11746` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: The "Forget about this site" feature in the History pane is intended to remove all saved…](https://agentprime.io/advisories/CVE-2019-11747.md) `CVE-2019-11747` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: WebRTC in Firefox will honor persisted permissions given to sites for access to…](https://agentprime.io/advisories/CVE-2019-11748.md) `CVE-2019-11748` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: A vulnerability exists in WebRTC where malicious web content can use probing techniques…](https://agentprime.io/advisories/CVE-2019-11749.md) `CVE-2019-11749` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [A type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash.](https://agentprime.io/advisories/CVE-2019-11750.md) `CVE-2019-11750` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: Logging-related command line parameters are not properly sanitized when Firefox is…](https://agentprime.io/advisories/CVE-2019-11751.md) `CVE-2019-11751` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: It is possible to delete an IndexedDB key value and subsequently try to extract it during…](https://agentprime.io/advisories/CVE-2019-11752.md) `CVE-2019-11752` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: The Firefox installer allows Firefox to be installed to a custom user writable location…](https://agentprime.io/advisories/CVE-2019-11753.md) `CVE-2019-11753` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Thunderbird: Mozilla developers and community members reported memory safety bugs present in Firefox…](https://agentprime.io/advisories/CVE-2019-9800.md) `CVE-2019-9800` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Firefox ESR: As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by…](https://agentprime.io/advisories/CVE-2019-9811.md) `CVE-2019-9811` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla developers and community members reported memory safety bugs present in Firefox 66.](https://agentprime.io/advisories/CVE-2019-9814.md) `CVE-2019-9814` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Thunderbird: If hyperthreading is not disabled, a timing attack vulnerability exists…](https://agentprime.io/advisories/CVE-2019-9815.md) `CVE-2019-9815` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Thunderbird: A possible vulnerability exists where type confusion can occur when manipulating…](https://agentprime.io/advisories/CVE-2019-9816.md) `CVE-2019-9816` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Images from a different domain can be read using a canvas object in some circumstances.](https://agentprime.io/advisories/CVE-2019-9817.md) `CVE-2019-9817` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Thunderbird: A race condition is present in the crash generation server used to generate data for the…](https://agentprime.io/advisories/CVE-2019-9818.md) `CVE-2019-9818` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Thunderbird: A vulnerability where a JavaScript compartment mismatch can occur while working with the…](https://agentprime.io/advisories/CVE-2019-9819.md) `CVE-2019-9819` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Thunderbird: A use-after-free vulnerability can occur in the chrome event handler when it is freed…](https://agentprime.io/advisories/CVE-2019-9820.md) `CVE-2019-9820` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Firefox: A use-after-free vulnerability can occur in AssertWorkerThread due to a race condition…](https://agentprime.io/advisories/CVE-2019-9821.md) `CVE-2019-9821` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Thunderbird: A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an…](https://agentprime.io/advisories/CVE-2019-11691.md) `CVE-2019-11691` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Thunderbird: A use-after-free vulnerability can occur when listeners are removed from the event…](https://agentprime.io/advisories/CVE-2019-11692.md) `CVE-2019-11692` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Thunderbird: The bufferdata function in WebGL is vulnerable to a buffer overflow with specific…](https://agentprime.io/advisories/CVE-2019-11693.md) `CVE-2019-11693` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Thunderbird: A vulnerability exists in the Windows sandbox where an uninitialized value in memory can…](https://agentprime.io/advisories/CVE-2019-11694.md) `CVE-2019-11694` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Firefox: A custom cursor defined by scripting on a site can position itself over the addressbar to…](https://agentprime.io/advisories/CVE-2019-11695.md) `CVE-2019-11695` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Firefox: Files with the .JNLP extension used for "Java web start" applications are not treated as…](https://agentprime.io/advisories/CVE-2019-11696.md) `CVE-2019-11696` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Firefox: If the ALT and "a" keys are pressed when users receive an extension installation prompt…](https://agentprime.io/advisories/CVE-2019-11697.md) `CVE-2019-11697` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 23 Jul 2019 - [Mozilla Thunderbird: If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the…](https://agentprime.io/advisories/CVE-2019-11698.md) `CVE-2019-11698` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 23 Jul 2019 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .