# Mozilla Firefox.

Every CVE that names Mozilla Firefox among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Mozilla Firefox: Address bar search suggestions in private browsing mode were re-using session data from…](https://agentprime.io/advisories/CVE-2021-29963.md)
  `CVE-2021-29963` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 24 Jun 2021
- [Mozilla Thunderbird: A locally-installed hostile program could send \`WM_COPYDATA\` messages that Firefox would…](https://agentprime.io/advisories/CVE-2021-29964.md)
  `CVE-2021-29964` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 24 Jun 2021
- [Mozilla Firefox: A malicious website that causes an HTTP Authentication dialog to be spawned could trick…](https://agentprime.io/advisories/CVE-2021-29965.md)
  `CVE-2021-29965` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 24 Jun 2021
- [Mozilla developers reported memory safety bugs present in Firefox 88.](https://agentprime.io/advisories/CVE-2021-29966.md)
  `CVE-2021-29966` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 24 Jun 2021
- [Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11.](https://agentprime.io/advisories/CVE-2021-29967.md)
  `CVE-2021-29967` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 24 Jun 2021
- [Mozilla Firefox: When drawing text onto a canvas with WebRender disabled…](https://agentprime.io/advisories/CVE-2021-29968.md)
  `CVE-2021-29968` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 24 Jun 2021
- [Improper certificate validation in Mozilla Firefox](https://agentprime.io/advisories/CVE-2007-5967.md)
  `CVE-2007-5967` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 17 May 2021 · Tags: Weak cryptography or TLS
- [Mozilla Firefox ESR: A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip…](https://agentprime.io/advisories/CVE-2021-23981.md)
  `CVE-2021-23981` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 31 Mar 2021
- [Mozilla Firefox ESR: Using techniques that built on the slipstream research…](https://agentprime.io/advisories/CVE-2021-23982.md)
  `CVE-2021-23982` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 31 Mar 2021
- [Mozilla Firefox: By causing a transition on a parent node by removing a CSS rule…](https://agentprime.io/advisories/CVE-2021-23983.md)
  `CVE-2021-23983` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 31 Mar 2021
- [A malicious extension could have opened a popup window lacking an address bar.](https://agentprime.io/advisories/CVE-2021-23984.md)
  `CVE-2021-23984` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 31 Mar 2021
- [Mozilla Firefox: If an attacker is able to alter specific about:config values (for example malware running…](https://agentprime.io/advisories/CVE-2021-23985.md)
  `CVE-2021-23985` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 31 Mar 2021
- [Mozilla Firefox: A malicious extension with the 'search' permission could have installed a new search…](https://agentprime.io/advisories/CVE-2021-23986.md)
  `CVE-2021-23986` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 31 Mar 2021
- [Mozilla Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox…](https://agentprime.io/advisories/CVE-2021-23987.md)
  `CVE-2021-23987` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 31 Mar 2021
- [Mozilla developers reported memory safety bugs present in Firefox 86.](https://agentprime.io/advisories/CVE-2021-23988.md)
  `CVE-2021-23988` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 31 Mar 2021
- [Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6.](https://agentprime.io/advisories/CVE-2021-23964.md)
  `CVE-2021-23964` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 26 Feb 2021
- [Mozilla developers reported memory safety bugs present in Firefox 84.](https://agentprime.io/advisories/CVE-2021-23965.md)
  `CVE-2021-23965` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Feb 2021
- [Mozilla developers reported memory safety bugs present in Firefox 85.](https://agentprime.io/advisories/CVE-2021-23979.md)
  `CVE-2021-23979` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Feb 2021
- [Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7.](https://agentprime.io/advisories/CVE-2021-23978.md)
  `CVE-2021-23978` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 26 Feb 2021
- [Mozilla Firefox: Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed…](https://agentprime.io/advisories/CVE-2021-23977.md)
  `CVE-2021-23977` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Feb 2021
- [Mozilla Firefox: When sharing geolocation during an active WebRTC share…](https://agentprime.io/advisories/CVE-2021-23963.md)
  `CVE-2021-23963` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Feb 2021
- [Mozilla Firefox: If a user clicked into a specifically crafted PDF…](https://agentprime.io/advisories/CVE-2021-23953.md)
  `CVE-2021-23953` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 26 Feb 2021
- [Mozilla Firefox: Using the new logical assignment operators in a JavaScript switch statement could have…](https://agentprime.io/advisories/CVE-2021-23954.md)
  `CVE-2021-23954` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 26 Feb 2021
- [Mozilla Firefox: The browser could have been confused into transferring a pointer lock state into another…](https://agentprime.io/advisories/CVE-2021-23955.md)
  `CVE-2021-23955` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Feb 2021
- [Mozilla Firefox: An ambiguous file picker design could have confused users who intended to select and…](https://agentprime.io/advisories/CVE-2021-23956.md)
  `CVE-2021-23956` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Feb 2021
- [Mozilla Firefox: Navigations through the Android-specific \`intent\` URL scheme could have been misused to…](https://agentprime.io/advisories/CVE-2021-23957.md)
  `CVE-2021-23957` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Feb 2021
- [Mozilla Firefox: The browser could have been confused into transferring a screen sharing state into…](https://agentprime.io/advisories/CVE-2021-23958.md)
  `CVE-2021-23958` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Feb 2021
- [Mozilla Firefox: An XSS bug in internal error pages could have led to various spoofing attacks…](https://agentprime.io/advisories/CVE-2021-23959.md)
  `CVE-2021-23959` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Feb 2021
- [Mozilla Firefox: Performing garbage collection on re-declared JavaScript variables resulted in a…](https://agentprime.io/advisories/CVE-2021-23960.md)
  `CVE-2021-23960` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 26 Feb 2021
- [Mozilla Firefox: Further techniques that built on the slipstream research combined with a malicious…](https://agentprime.io/advisories/CVE-2021-23961.md)
  `CVE-2021-23961` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Feb 2021
- [Mozilla Firefox: Incorrect use of the '\<RowCountChanged>' method could have led to a user-after-poison and…](https://agentprime.io/advisories/CVE-2021-23962.md)
  `CVE-2021-23962` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Feb 2021
- [Mozilla Firefox: If Content Security Policy blocked frame navigation…](https://agentprime.io/advisories/CVE-2021-23968.md)
  `CVE-2021-23968` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 26 Feb 2021
- [Mozilla Firefox: As specified in the W3C Content Security Policy draft, when creating a violation report…](https://agentprime.io/advisories/CVE-2021-23969.md)
  `CVE-2021-23969` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 26 Feb 2021
- [Mozilla Firefox: Context-specific code was included in a shared jump table…](https://agentprime.io/advisories/CVE-2021-23970.md)
  `CVE-2021-23970` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Feb 2021
- [Mozilla Firefox: When processing a redirect with a conflicting Referrer-Policy…](https://agentprime.io/advisories/CVE-2021-23971.md)
  `CVE-2021-23971` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Feb 2021
- [One phishing tactic on the web is to provide a link with HTTP Auth.](https://agentprime.io/advisories/CVE-2021-23972.md)
  `CVE-2021-23972` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Feb 2021
- [Mozilla Firefox: When trying to load a cross-origin resource in an audio/video context a decoding error…](https://agentprime.io/advisories/CVE-2021-23973.md)
  `CVE-2021-23973` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 26 Feb 2021
- [The DOMParser API did not properly process '\<noscript>' elements for escaping.](https://agentprime.io/advisories/CVE-2021-23974.md)
  `CVE-2021-23974` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Feb 2021
- [Mozilla Firefox: The developer page about:memory has a Measure function for exploring what object types…](https://agentprime.io/advisories/CVE-2021-23975.md)
  `CVE-2021-23975` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Feb 2021
- [Mozilla Firefox: When accepting a malicious intent from other installed apps…](https://agentprime.io/advisories/CVE-2021-23976.md)
  `CVE-2021-23976` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 26 Feb 2021
- [Mozilla Firefox: Certain blit values provided by the user were not properly constrained leading to a heap…](https://agentprime.io/advisories/CVE-2020-26971.md)
  `CVE-2020-26971` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 7 Jan 2021
- [Mozilla Firefox: The lifecycle of IPC Actors allows managed actors to outlive their manager actors…](https://agentprime.io/advisories/CVE-2020-26972.md)
  `CVE-2020-26972` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 7 Jan 2021
- [Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed.](https://agentprime.io/advisories/CVE-2020-26973.md)
  `CVE-2020-26973` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 7 Jan 2021
- [Mozilla Firefox: When flex-basis was used on a table wrapper…](https://agentprime.io/advisories/CVE-2020-26974.md)
  `CVE-2020-26974` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 7 Jan 2021
- [Mozilla Firefox: When a malicious application installed on the user's device broadcast an Intent to…](https://agentprime.io/advisories/CVE-2020-26975.md)
  `CVE-2020-26975` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 7 Jan 2021
- [Mozilla Firefox: When a HTTPS pages was embedded in a HTTP page…](https://agentprime.io/advisories/CVE-2020-26976.md)
  `CVE-2020-26976` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 7 Jan 2021
- [Mozilla Firefox: By attempting to connect a website using an unresponsive port…](https://agentprime.io/advisories/CVE-2020-26977.md)
  `CVE-2020-26977` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 7 Jan 2021
- [Mozilla Firefox: Using techniques that built on the slipstream research…](https://agentprime.io/advisories/CVE-2020-26978.md)
  `CVE-2020-26978` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 7 Jan 2021
- [Mozilla Firefox: When a user typed a URL in the address bar or the search bar and quickly hit the enter…](https://agentprime.io/advisories/CVE-2020-26979.md)
  `CVE-2020-26979` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 7 Jan 2021
- [Mozilla Firefox: When an extension with the proxy permission registered to receive \<all_urls>…](https://agentprime.io/advisories/CVE-2020-35111.md)
  `CVE-2020-35111` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 7 Jan 2021
- [Mozilla Firefox: If a user downloaded a file lacking an extension on Windows…](https://agentprime.io/advisories/CVE-2020-35112.md)
  `CVE-2020-35112` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 7 Jan 2021
- [Mozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5.](https://agentprime.io/advisories/CVE-2020-35113.md)
  `CVE-2020-35113` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 7 Jan 2021
- [Mozilla developers reported memory safety bugs present in Firefox 83.](https://agentprime.io/advisories/CVE-2020-35114.md)
  `CVE-2020-35114` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 7 Jan 2021
- [Mozilla developers reported memory safety bugs present in Firefox 82.](https://agentprime.io/advisories/CVE-2020-26969.md)
  `CVE-2020-26969` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 9 Dec 2020
- [Mozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4.](https://agentprime.io/advisories/CVE-2020-26968.md)
  `CVE-2020-26968` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 9 Dec 2020
- [Mozilla Firefox: When listening for page changes with a Mutation Observer…](https://agentprime.io/advisories/CVE-2020-26967.md)
  `CVE-2020-26967` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 9 Dec 2020
- [Mozilla Firefox: Searching for a single word from the address bar caused an mDNS request to be sent on the…](https://agentprime.io/advisories/CVE-2020-26966.md)
  `CVE-2020-26966` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 9 Dec 2020
- [Mozilla Firefox: Some websites have a feature "Show Password" where clicking a button will change a…](https://agentprime.io/advisories/CVE-2020-26965.md)
  `CVE-2020-26965` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 9 Dec 2020
- [Mozilla Firefox: If the Remote Debugging via USB feature was enabled in Firefox for Android on an Android…](https://agentprime.io/advisories/CVE-2020-26964.md)
  `CVE-2020-26964` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 9 Dec 2020
- [Repeated calls to the history and location interfaces could have been used to hang the browser.](https://agentprime.io/advisories/CVE-2020-26963.md)
  `CVE-2020-26963` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 9 Dec 2020

Newest: <https://agentprime.io/advisories/technology/mozilla-firefox.md>
Older: <https://agentprime.io/advisories/technology/mozilla-firefox.md?cursor=WyIyMDIwLTEyLTA5VDAwOjI0OjE5LjAwMDAwMFoiLCJDVkUtMjAyMC0yNjk2MyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=mozilla-firefox&cursor=WyIyMDIxLTA2LTI0VDEzOjE1OjQ5LjAwMDAwMFoiLCJDVkUtMjAyMS0yOTk2MiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/mozilla-firefox/?cursor=WyIyMDIxLTA2LTI0VDEzOjE1OjQ5LjAwMDAwMFoiLCJDVkUtMjAyMS0yOTk2MiJd>. Everything for agents: <https://agentprime.io/llms.txt>.