Advisories · Technology
Mozilla Firefox.
Every CVE that names Mozilla Firefox among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
Mozilla Firefox ESR: An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted…
- Mozilla Firefox ESR
- Mozilla Firefox
-
An out-of-bounds read during the processing of glyph widths during text layout.
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A vulnerability while parsing "application/http-index-format" format content where…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A buffer overflow vulnerability while parsing "application/http-index-format" format…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives.
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
A use-after-free vulnerability during changes in style when manipulating DOM elements.
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
A use-after-free vulnerability when holding a selection during scroll events.
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A use-after-free vulnerability during XSLT processing due to a failure to propagate error…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
A use-after-free vulnerability during XSLT processing due to poor handling of template parameters.
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A use-after-free vulnerability during XSLT processing due to the result handler being…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font.
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A use-after-free vulnerability occurs during transaction processing in the editor during…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A use-after-free vulnerability occurs when redirecting focus handling which results in a…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A use-after-free vulnerability in SMIL animation functions occurs when pointers to…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A use-after-free vulnerability occurs during certain text input selection resulting in a…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Memory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52.
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
An integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest.
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox: A non-existent chrome.manifest file will attempt to be loaded during startup from the…
- Mozilla Firefox
-
Mozilla Firefox: On Linux, if the secure computing mode BPF (seccomp-bpf) filter is running when the Gecko…
- Mozilla Firefox
- Mozilla Thunderbird
-
The Gecko Media Plugin sandbox allows access to local files that match specific regular expressions.
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: If a malicious site uses the "view-source:" protocol in a series within a single…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: A malicious site could spoof the contents of the print preview window if popup windows…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: A "javascript:" url loaded by a malicious page can obfuscate its location by blanking the…
- Mozilla Firefox
-
Mozilla Firefox: If a malicious site repeatedly triggers a modal authentication prompt…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: An out of bounds read error occurs when parsing some HTTP digest authorization responses…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: When dragging content from the primary browser pane to the addressbar on a malicious…
- Mozilla Firefox
-
In certain circumstances a networking event listener can be prematurely released.
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: An attack can use a blob URL and script to spoof an arbitrary addressbar URL prefaced by…
- Mozilla Firefox
-
The file picker dialog can choose and display the wrong local default directory when instantiated.
- Mozilla Firefox
- Mozilla Thunderbird
-
A segmentation fault can occur during some bidirectional layout operations.
- Mozilla Firefox
- Mozilla Thunderbird
-
A buffer overflow read during SVG filter color value operations, resulting in data exposure.
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: A use-after-free can occur during buffer storage operations within the ANGLE graphics…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: Memory corruption resulting in a potentially exploitable crash during garbage collection…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox ESR: The Mozilla Windows updater can be called by a non-privileged user to delete an arbitrary…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox: Video files loaded video captions cross-origin without checking for the presence of CORS…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: Using SVG filters that don't use the fixed point math implementation on a target iframe…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: A segmentation fault can occur in the Skia graphics library during some canvas operations…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: Certain response codes in FTP connections can result in the use of uninitialized values…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: A use-after-free error can occur when manipulating ranges in selections with one node…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: When adding a range to an object in the DOM…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: A use-after-free can occur when events are fired for a "FontFace" object after the object…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: A crash triggerable by web content in which an "ErrorResult" references unassigned memory…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Memory safety bugs were reported in Firefox 51.
- Mozilla Firefox
- Mozilla Thunderbird
-
Memory safety bugs were reported in Thunderbird 45.7.
- Mozilla Firefox
- Mozilla Firefox ESR
-
The cache directory on the local file system is set to be world writable.
- Mozilla Firefox
-
Mozilla Thunderbird: A use-after-free vulnerability in the Media Decoder when working with media files when…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox: A location bar spoofing attack where the location bar of loaded page will be shown over…
- Mozilla Firefox
-
Mozilla Firefox: The "mozAddonManager" allows for the installation of extensions from the CDN for…
- Mozilla Firefox
-
Mozilla Firefox: Weak proxy objects have weak references on multiple threads when they should only have…
- Mozilla Firefox
-
Mozilla Firefox: Special "about:" pages used by web content, such as RSS feeds…
- Mozilla Firefox
-
Mozilla Thunderbird: The JSON viewer in the Developer Tools uses insecure methods to create a communication…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox: WebExtensions could use the "mozAddonManager" API by modifying the CSP headers on sites…
- Mozilla Firefox
-
Mozilla Firefox: A STUN server in conjunction with a large number of "webkitRTCPeerConnection" objects can…
- Mozilla Firefox
-
Mozilla Firefox: The existence of a specifically requested local file can be found due to the double…
- Mozilla Firefox
-
Mozilla Firefox ESR: WebExtension scripts can use the "data:" protocol to affect pages loaded by other web…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox: Data sent with in multipart channels, such as the multipart/x-mixed-replace MIME type…
- Mozilla Firefox
-
Mozilla Firefox: Proxy Auto-Config (PAC) files can specify a JavaScript function called for all URL…
- Mozilla Firefox