# Mozilla Firefox.

Every CVE that names Mozilla Firefox among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Mozilla Firefox: Cross-origin iframes that contained a login form could have been recognized by the login…](https://agentprime.io/advisories/CVE-2020-26962.md)
  `CVE-2020-26962` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 9 Dec 2020
- [Mozilla Firefox: When DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges…](https://agentprime.io/advisories/CVE-2020-26961.md)
  `CVE-2020-26961` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 9 Dec 2020
- [Mozilla Firefox: If the Compact() method was called on an nsTArray…](https://agentprime.io/advisories/CVE-2020-26960.md)
  `CVE-2020-26960` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 9 Dec 2020
- [Mozilla Firefox: During browser shutdown, reference decrementing could have occured on a previously freed…](https://agentprime.io/advisories/CVE-2020-26959.md)
  `CVE-2020-26959` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 9 Dec 2020
- [Mozilla Firefox: Firefox did not block execution of scripts with incorrect MIME types when the response…](https://agentprime.io/advisories/CVE-2020-26958.md)
  `CVE-2020-26958` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 9 Dec 2020
- [OneCRL was non-functional in the new Firefox for Android due to a missing service initialization.](https://agentprime.io/advisories/CVE-2020-26957.md)
  `CVE-2020-26957` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 9 Dec 2020
- [Mozilla Firefox: In some cases, removing HTML elements during sanitization would keep existing SVG event…](https://agentprime.io/advisories/CVE-2020-26956.md)
  `CVE-2020-26956` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 9 Dec 2020
- [Mozilla Firefox: When a user downloaded a file in Firefox for Android, if a cookie is set…](https://agentprime.io/advisories/CVE-2020-26955.md)
  `CVE-2020-26955` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 9 Dec 2020
- [Mozilla Firefox: When accepting a malicious intent from other installed apps…](https://agentprime.io/advisories/CVE-2020-26954.md)
  `CVE-2020-26954` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 9 Dec 2020
- [Mozilla Firefox: It was possible to cause the browser to enter fullscreen mode without displaying the…](https://agentprime.io/advisories/CVE-2020-26953.md)
  `CVE-2020-26953` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 9 Dec 2020
- [Mozilla Firefox: Incorrect bookkeeping of functions inlined during JIT compilation could have led to…](https://agentprime.io/advisories/CVE-2020-26952.md)
  `CVE-2020-26952` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 9 Dec 2020
- [Mozilla Firefox: A parsing and event loading mismatch in Firefox's SVG code could have allowed load events…](https://agentprime.io/advisories/CVE-2020-26951.md)
  `CVE-2020-26951` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 9 Dec 2020
- [Mozilla Firefox: In certain circumstances, the MCallGetProperty opcode can be emitted with unmet…](https://agentprime.io/advisories/CVE-2020-26950.md)
  `CVE-2020-26950` · CVE record: Mozilla Firefox and 2 more · No CVSS score · EPSS 0.42 · Not analysed yet · Published 9 Dec 2020
- [Mozilla Firefox: When performing EC scalar point multiplication…](https://agentprime.io/advisories/CVE-2020-6829.md)
  `CVE-2020-6829` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 28 Oct 2020
- [Mozilla Firefox: If a valid external protocol handler was referenced in an image tag…](https://agentprime.io/advisories/CVE-2020-15680.md)
  `CVE-2020-15680` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 22 Oct 2020
- [Mozilla Firefox: When multiple WASM threads had a reference to a module…](https://agentprime.io/advisories/CVE-2020-15681.md)
  `CVE-2020-15681` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 22 Oct 2020
- [Mozilla Firefox: When a link to an external protocol was clicked…](https://agentprime.io/advisories/CVE-2020-15682.md)
  `CVE-2020-15682` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 22 Oct 2020
- [Mozilla Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox…](https://agentprime.io/advisories/CVE-2020-15683.md)
  `CVE-2020-15683` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 22 Oct 2020
- [Mozilla developers reported memory safety bugs present in Firefox 81.](https://agentprime.io/advisories/CVE-2020-15684.md)
  `CVE-2020-15684` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 22 Oct 2020
- [Mozilla Firefox: During ECDSA signature generation, padding applied in the nonce designed to ensure…](https://agentprime.io/advisories/CVE-2020-12401.md)
  `CVE-2020-12401` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 8 Oct 2020
- [Mozilla Firefox: When converting coordinates from projective to affine…](https://agentprime.io/advisories/CVE-2020-12400.md)
  `CVE-2020-12400` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 8 Oct 2020
- [Mozilla Firefox: If Firefox is installed to a user-writable directory…](https://agentprime.io/advisories/CVE-2020-15663.md)
  `CVE-2020-15663` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 1 Oct 2020
- [Mozilla Firefox: By holding a reference to the eval() function from an about:blank window…](https://agentprime.io/advisories/CVE-2020-15664.md)
  `CVE-2020-15664` · CVE record: Mozilla Firefox and 3 more · No CVSS score · Not analysed yet · Published 1 Oct 2020
- [Mozilla Firefox: Firefox did not reset the address bar after the beforeunload dialog was shown if the user…](https://agentprime.io/advisories/CVE-2020-15665.md)
  `CVE-2020-15665` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 1 Oct 2020
- [Mozilla Firefox: When trying to load a non-video in an audio/video context the exact status code (200…](https://agentprime.io/advisories/CVE-2020-15666.md)
  `CVE-2020-15666` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 1 Oct 2020
- [Mozilla Firefox: When processing a MAR update file, after the signature has been validated…](https://agentprime.io/advisories/CVE-2020-15667.md)
  `CVE-2020-15667` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 1 Oct 2020
- [Mozilla Firefox: A lock was missing when accessing a data structure and importing certificate information…](https://agentprime.io/advisories/CVE-2020-15668.md)
  `CVE-2020-15668` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 1 Oct 2020
- [Mozilla developers reported memory safety bugs present in Firefox for Android 79.](https://agentprime.io/advisories/CVE-2020-15670.md)
  `CVE-2020-15670` · CVE record: Mozilla Firefox and 3 more · No CVSS score · Not analysed yet · Published 1 Oct 2020
- [Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2.](https://agentprime.io/advisories/CVE-2020-15673.md)
  `CVE-2020-15673` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 1 Oct 2020
- [Mozilla developers reported memory safety bugs present in Firefox 80.](https://agentprime.io/advisories/CVE-2020-15674.md)
  `CVE-2020-15674` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 1 Oct 2020
- [Mozilla Firefox: When processing surfaces, the lifetime may outlive a persistent buffer leading to memory…](https://agentprime.io/advisories/CVE-2020-15675.md)
  `CVE-2020-15675` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 1 Oct 2020
- [Mozilla Firefox: Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided…](https://agentprime.io/advisories/CVE-2020-15676.md)
  `CVE-2020-15676` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 1 Oct 2020
- [Mozilla Firefox: By exploiting an Open Redirect vulnerability on a website…](https://agentprime.io/advisories/CVE-2020-15677.md)
  `CVE-2020-15677` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 1 Oct 2020
- [Mozilla Firefox: When recursing through graphical layers while scrolling…](https://agentprime.io/advisories/CVE-2020-15678.md)
  `CVE-2020-15678` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 1 Oct 2020
- [Mozilla Firefox ESR: A redirected HTTP request which is observed or modified through a web extension could…](https://agentprime.io/advisories/CVE-2020-15655.md)
  `CVE-2020-15655` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 10 Aug 2020
- [Mozilla Firefox ESR: When in an endless loop, a website specifying a custom cursor using CSS could make it…](https://agentprime.io/advisories/CVE-2020-15654.md)
  `CVE-2020-15654` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 10 Aug 2020
- [An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links.](https://agentprime.io/advisories/CVE-2020-15653.md)
  `CVE-2020-15653` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 10 Aug 2020
- [Mozilla Firefox: By observing the stack trace for JavaScript errors in web workers…](https://agentprime.io/advisories/CVE-2020-15652.md)
  `CVE-2020-15652` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 10 Aug 2020
- [Mozilla Thunderbird: Using object or embed tags, it was possible to frame other websites…](https://agentprime.io/advisories/CVE-2020-15648.md)
  `CVE-2020-15648` · CVE record: Mozilla Thunderbird and 1 more · No CVSS score · Not analysed yet · Published 10 Aug 2020
- [Mozilla Firefox: Mozilla developers and community members reported memory safety bugs present in Firefox…](https://agentprime.io/advisories/CVE-2020-15659.md)
  `CVE-2020-15659` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 10 Aug 2020
- [Mozilla Firefox ESR: The code for downloading files did not properly take care of special characters…](https://agentprime.io/advisories/CVE-2020-15658.md)
  `CVE-2020-15658` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 10 Aug 2020
- [Firefox could be made to load attacker-supplied DLL files from the installation directory.](https://agentprime.io/advisories/CVE-2020-15657.md)
  `CVE-2020-15657` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 10 Aug 2020
- [JIT optimizations involving the Javascript arguments object could confuse later optimizations.](https://agentprime.io/advisories/CVE-2020-15656.md)
  `CVE-2020-15656` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 10 Aug 2020
- [Mozilla Firefox: Mozilla Developer Nicolas Silva found that when using WebRender…](https://agentprime.io/advisories/CVE-2020-12407.md)
  `CVE-2020-12407` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 9 Jul 2020
- [Mozilla Firefox: During RSA key generation, bignum implementations used a variation of the Binary Extended…](https://agentprime.io/advisories/CVE-2020-12402.md)
  `CVE-2020-12402` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 9 Jul 2020
- [Mozilla Thunderbird: NSS has shown timing differences when performing DSA signatures…](https://agentprime.io/advisories/CVE-2020-12399.md)
  `CVE-2020-12399` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 9 Jul 2020
- [Mozilla Firefox: By navigating a tab using the history API…](https://agentprime.io/advisories/CVE-2020-12412.md)
  `CVE-2020-12412` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 9 Jul 2020
- [Mozilla Firefox: When browsing a document hosted on an IP address…](https://agentprime.io/advisories/CVE-2020-12408.md)
  `CVE-2020-12408` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 9 Jul 2020
- [Mozilla developers reported memory safety bugs present in Firefox 76.](https://agentprime.io/advisories/CVE-2020-12411.md)
  `CVE-2020-12411` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 9 Jul 2020
- [Mozilla Firefox: When using certain blank characters in a URL…](https://agentprime.io/advisories/CVE-2020-12409.md)
  `CVE-2020-12409` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 9 Jul 2020
- [Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8.](https://agentprime.io/advisories/CVE-2020-12410.md)
  `CVE-2020-12410` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 9 Jul 2020
- [Mozilla Thunderbird: When browsing a malicious page, a race condition in our SharedWorkerService could occur…](https://agentprime.io/advisories/CVE-2020-12405.md)
  `CVE-2020-12405` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 9 Jul 2020
- [Mozilla Thunderbird: Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects…](https://agentprime.io/advisories/CVE-2020-12406.md)
  `CVE-2020-12406` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 9 Jul 2020
- [Mozilla Firefox: A VideoStreamEncoder may have been freed in a race condition with…](https://agentprime.io/advisories/CVE-2020-12416.md)
  `CVE-2020-12416` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 9 Jul 2020
- [Mozilla Firefox: Due to confusion processing a hyphen character in Date.parse()…](https://agentprime.io/advisories/CVE-2020-12425.md)
  `CVE-2020-12425` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 9 Jul 2020
- [Mozilla Firefox: When the Windows DLL "webauthn.dll" was missing from the Operating System…](https://agentprime.io/advisories/CVE-2020-12423.md)
  `CVE-2020-12423` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 9 Jul 2020
- [Mozilla Firefox: In non-standard configurations, a JPEG image created by JavaScript could have caused an…](https://agentprime.io/advisories/CVE-2020-12422.md)
  `CVE-2020-12422` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 9 Jul 2020
- [Mozilla Firefox ESR: When performing add-on updates, certificate chains terminating in non-built-in-roots were…](https://agentprime.io/advisories/CVE-2020-12421.md)
  `CVE-2020-12421` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 9 Jul 2020
- [Mozilla Firefox ESR: When trying to connect to a STUN server…](https://agentprime.io/advisories/CVE-2020-12420.md)
  `CVE-2020-12420` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 9 Jul 2020
- [Mozilla Firefox ESR: When processing callbacks that occurred during window flushing in the parent process…](https://agentprime.io/advisories/CVE-2020-12419.md)
  `CVE-2020-12419` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 9 Jul 2020

Newest: <https://agentprime.io/advisories/technology/mozilla-firefox.md>
Older: <https://agentprime.io/advisories/technology/mozilla-firefox.md?cursor=WyIyMDIwLTA3LTA5VDE0OjM5OjM3LjAwMDAwMFoiLCJDVkUtMjAyMC0xMjQxOSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=mozilla-firefox&cursor=WyIyMDIwLTEyLTA5VDAwOjI0OjE5LjAwMDAwMFoiLCJDVkUtMjAyMC0yNjk2MyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/mozilla-firefox/?cursor=WyIyMDIwLTEyLTA5VDAwOjI0OjE5LjAwMDAwMFoiLCJDVkUtMjAyMC0yNjk2MyJd>. Everything for agents: <https://agentprime.io/llms.txt>.