# Mozilla Firefox. Every CVE that names Mozilla Firefox among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Mozilla Thunderbird: Failure to correctly record the location of live pointers across wasm instance calls…](https://agentprime.io/advisories/CVE-2021-43539.md) `CVE-2021-43539` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Dec 2021 - [Mozilla Firefox: WebExtensions with the correct permissions were able to create and install ServiceWorkers…](https://agentprime.io/advisories/CVE-2021-43540.md) `CVE-2021-43540` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 8 Dec 2021 - [Mozilla Thunderbird: When invoking protocol handlers for external protocols…](https://agentprime.io/advisories/CVE-2021-43541.md) `CVE-2021-43541` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Dec 2021 - [Mozilla Thunderbird: Using XMLHttpRequest, an attacker could have identified installed applications by probing…](https://agentprime.io/advisories/CVE-2021-43542.md) `CVE-2021-43542` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Dec 2021 - [Mozilla Thunderbird: Documents loaded with the CSP sandbox directive could have escaped the sandbox's script…](https://agentprime.io/advisories/CVE-2021-43543.md) `CVE-2021-43543` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Dec 2021 - [Mozilla Firefox: When receiving a URL through a SEND intent, Firefox would have searched for the text…](https://agentprime.io/advisories/CVE-2021-43544.md) `CVE-2021-43544` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 8 Dec 2021 - [Using the Location API in a loop could have caused severe application hangs and crashes.](https://agentprime.io/advisories/CVE-2021-43545.md) `CVE-2021-43545` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Dec 2021 - [Mozilla Thunderbird: It was possible to recreate previous cursor spoofing attacks against users with a zoomed…](https://agentprime.io/advisories/CVE-2021-43546.md) `CVE-2021-43546` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Dec 2021 - [Firefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate headers.](https://agentprime.io/advisories/CVE-2021-29991.md) `CVE-2021-29991` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 3 Nov 2021 - [Mozilla Firefox: Firefox for Android allowed navigations through the \`intent://\` protocol…](https://agentprime.io/advisories/CVE-2021-29993.md) `CVE-2021-29993` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 3 Nov 2021 - [Mozilla Firefox: Mixed-content checks were unable to analyze opaque origins which led to some mixed…](https://agentprime.io/advisories/CVE-2021-38491.md) `CVE-2021-38491` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 3 Nov 2021 - [Mozilla Firefox: When delegating navigations to the operating system…](https://agentprime.io/advisories/CVE-2021-38492.md) `CVE-2021-38492` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 3 Nov 2021 - [Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13.](https://agentprime.io/advisories/CVE-2021-38493.md) `CVE-2021-38493` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 3 Nov 2021 - [Mozilla developers reported memory safety bugs present in Firefox 91.](https://agentprime.io/advisories/CVE-2021-38494.md) `CVE-2021-38494` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 3 Nov 2021 - [Mozilla Thunderbird: During operations on MessageTasks, a task may have been removed while it was still…](https://agentprime.io/advisories/CVE-2021-38496.md) `CVE-2021-38496` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 3 Nov 2021 - [Mozilla Firefox: Through use of reportValidity() and window.open()…](https://agentprime.io/advisories/CVE-2021-38497.md) `CVE-2021-38497` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 3 Nov 2021 - [Mozilla Firefox: During process shutdown, a document could have caused a use-after-free of a languages…](https://agentprime.io/advisories/CVE-2021-38498.md) `CVE-2021-38498` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 3 Nov 2021 - [Mozilla developers reported memory safety bugs present in Firefox 92.](https://agentprime.io/advisories/CVE-2021-38499.md) `CVE-2021-38499` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 3 Nov 2021 - [Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1.](https://agentprime.io/advisories/CVE-2021-38500.md) `CVE-2021-38500` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 3 Nov 2021 - [Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1.](https://agentprime.io/advisories/CVE-2021-38501.md) `CVE-2021-38501` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 3 Nov 2021 - [Mozilla Thunderbird: Uninitialized memory in a canvas object could have caused an incorrect free() leading to…](https://agentprime.io/advisories/CVE-2021-29980.md) `CVE-2021-29980` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 17 Aug 2021 - [Mozilla Firefox: An issue present in lowering/register allocation could have led to obscure but…](https://agentprime.io/advisories/CVE-2021-29981.md) `CVE-2021-29981` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 17 Aug 2021 - [Mozilla Firefox: Due to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of…](https://agentprime.io/advisories/CVE-2021-29982.md) `CVE-2021-29982` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 17 Aug 2021 - [Mozilla Firefox: Firefox for Android could get stuck in fullscreen mode and not exit it even after normal…](https://agentprime.io/advisories/CVE-2021-29983.md) `CVE-2021-29983` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 17 Aug 2021 - [Mozilla Thunderbird: Instruction reordering resulted in a sequence of instructions that would cause an object…](https://agentprime.io/advisories/CVE-2021-29984.md) `CVE-2021-29984` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 17 Aug 2021 - [Mozilla Thunderbird: A use-after-free vulnerability in media channels could have led to memory corruption and…](https://agentprime.io/advisories/CVE-2021-29985.md) `CVE-2021-29985` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 17 Aug 2021 - [Mozilla Thunderbird: A suspected race condition when calling getaddrinfo led to memory corruption and a…](https://agentprime.io/advisories/CVE-2021-29986.md) `CVE-2021-29986` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 17 Aug 2021 - [Mozilla Firefox: After requesting multiple permissions, and closing the first permission panel…](https://agentprime.io/advisories/CVE-2021-29987.md) `CVE-2021-29987` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 17 Aug 2021 - [Mozilla Thunderbird: Firefox incorrectly treated an inline list-item element as a block element…](https://agentprime.io/advisories/CVE-2021-29988.md) `CVE-2021-29988` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 17 Aug 2021 - [Mozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12.](https://agentprime.io/advisories/CVE-2021-29989.md) `CVE-2021-29989` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 17 Aug 2021 - [Mozilla developers and community members reported memory safety bugs present in Firefox 90.](https://agentprime.io/advisories/CVE-2021-29990.md) `CVE-2021-29990` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 17 Aug 2021 - [Mozilla Thunderbird: A malicious webpage could have triggered a use-after-free, memory corruption…](https://agentprime.io/advisories/CVE-2021-29970.md) `CVE-2021-29970` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 5 Aug 2021 - [Mozilla Firefox: If a user had granted a permission to a webpage and saved that grant…](https://agentprime.io/advisories/CVE-2021-29971.md) `CVE-2021-29971` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 5 Aug 2021 - [A use-after-free vulnerability was found via testing, and traced to an out-of-date Cairo library.](https://agentprime.io/advisories/CVE-2021-29972.md) `CVE-2021-29972` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 5 Aug 2021 - [Password autofill was enabled without user interaction on insecure websites on Firefox for Android.](https://agentprime.io/advisories/CVE-2021-29973.md) `CVE-2021-29973` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 5 Aug 2021 - [Mozilla Firefox: When network partitioning was enabled…](https://agentprime.io/advisories/CVE-2021-29974.md) `CVE-2021-29974` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 5 Aug 2021 - [Mozilla Firefox: Through a series of DOM manipulations, a message…](https://agentprime.io/advisories/CVE-2021-29975.md) `CVE-2021-29975` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 5 Aug 2021 - [Mozilla Thunderbird: Mozilla developers reported memory safety bugs present in code shared between Firefox and…](https://agentprime.io/advisories/CVE-2021-29976.md) `CVE-2021-29976` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 5 Aug 2021 - [Mozilla developers reported memory safety bugs present in Firefox 89.](https://agentprime.io/advisories/CVE-2021-29977.md) `CVE-2021-29977` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 5 Aug 2021 - [Mozilla Firefox ESR: A WebGL framebuffer was not initialized early enough…](https://agentprime.io/advisories/CVE-2021-23994.md) `CVE-2021-23994` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 24 Jun 2021 - [When Responsive Design Mode was enabled, it used references to objects that were previously freed.](https://agentprime.io/advisories/CVE-2021-23995.md) `CVE-2021-23995` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 24 Jun 2021 - [Mozilla Firefox: By utilizing 3D CSS in conjunction with Javascript…](https://agentprime.io/advisories/CVE-2021-23996.md) `CVE-2021-23996` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 24 Jun 2021 - [Mozilla Firefox: Due to unexpected data type conversions…](https://agentprime.io/advisories/CVE-2021-23997.md) `CVE-2021-23997` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 24 Jun 2021 - [Mozilla Firefox ESR: Through complicated navigations with new windows…](https://agentprime.io/advisories/CVE-2021-23998.md) `CVE-2021-23998` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 24 Jun 2021 - [Mozilla Firefox ESR: If a Blob URL was loaded through some unusual user interaction…](https://agentprime.io/advisories/CVE-2021-23999.md) `CVE-2021-23999` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 24 Jun 2021 - [Mozilla Firefox: A race condition with requestPointerLock() and setTimeout() could have resulted in a user…](https://agentprime.io/advisories/CVE-2021-24000.md) `CVE-2021-24000` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 24 Jun 2021 - [Mozilla Firefox: A compromised content process could have performed session history manipulations it…](https://agentprime.io/advisories/CVE-2021-24001.md) `CVE-2021-24001` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 24 Jun 2021 - [Mozilla Firefox ESR: When a user clicked on an FTP URL containing encoded newline characters (%0A and %0D)…](https://agentprime.io/advisories/CVE-2021-24002.md) `CVE-2021-24002` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 24 Jun 2021 - [Lack of escaping allowed HTML injection when a webpage was viewed in Reader View.](https://agentprime.io/advisories/CVE-2021-29944.md) `CVE-2021-29944` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 24 Jun 2021 - [Mozilla Firefox ESR: The WebAssembly JIT could miscalculate the size of a return type…](https://agentprime.io/advisories/CVE-2021-29945.md) `CVE-2021-29945` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 24 Jun 2021 - [Mozilla Firefox ESR: Ports that were written as an integer overflow above the bounds of a 16-bit integer could…](https://agentprime.io/advisories/CVE-2021-29946.md) `CVE-2021-29946` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 24 Jun 2021 - [Mozilla developers and community members reported memory safety bugs present in Firefox 87.](https://agentprime.io/advisories/CVE-2021-29947.md) `CVE-2021-29947` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 24 Jun 2021 - [Mozilla Thunderbird: The Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which…](https://agentprime.io/advisories/CVE-2021-29951.md) `CVE-2021-29951` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 24 Jun 2021 - [Mozilla Firefox: When Web Render components were destructed…](https://agentprime.io/advisories/CVE-2021-29952.md) `CVE-2021-29952` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 24 Jun 2021 - [Mozilla Firefox: A malicious webpage could have forced a Firefox for Android user into executing…](https://agentprime.io/advisories/CVE-2021-29953.md) `CVE-2021-29953` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 24 Jun 2021 - [Mozilla Firefox ESR: A transient execution vulnerability, named Floating Point Value Injection (FPVI) allowed…](https://agentprime.io/advisories/CVE-2021-29955.md) `CVE-2021-29955` · CVE record: Mozilla Firefox ESR and 1 more · No CVSS score · Not analysed yet · Published 24 Jun 2021 - [Mozilla Firefox: When a user has already allowed a website to access microphone and camera…](https://agentprime.io/advisories/CVE-2021-29959.md) `CVE-2021-29959` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 24 Jun 2021 - [Firefox used to cache the last filename used for printing a file.](https://agentprime.io/advisories/CVE-2021-29960.md) `CVE-2021-29960` · CVE record: Mozilla Firefox · No CVSS score · Not analysed yet · Published 24 Jun 2021 - [Mozilla Firefox: When styling and rendering an oversized \`\