Advisories · Technology
Mozilla Firefox.
Every CVE that names Mozilla Firefox among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
Mozilla Firefox: On Windows systems, the logger run by the Windows updater deletes the file "update.log"…
- Mozilla Firefox
-
Mozilla Firefox: On Linux systems, if the content process is compromised…
- Mozilla Firefox
-
Mozilla Firefox: A use-after-free vulnerability can occur in the Fetch API when the worker or the…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A buffer overflow will occur when viewing a certificate in the certificate manager if the…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: On pages containing an iframe, the "data:" protocol can be used to create a modal alert…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox: On Windows systems, if non-null-terminated strings are copied into the crash reporter for…
- Mozilla Firefox
-
Mozilla Firefox: If a server sends two Strict-Transport-Security (STS) headers for a single connection…
- Mozilla Firefox
-
Mozilla Firefox: When an "iframe" has a "sandbox" attribute and its content is specified using "srcdoc"…
- Mozilla Firefox
-
Mozilla Thunderbird: Same-origin policy protections can be bypassed on pages with embedded iframes during page…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements.
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A buffer overflow can occur when manipulating Accessible Rich Internet Applications…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox: If a long user name is used in a username/password combination in a site URL (such as "…
- Mozilla Firefox
-
Mozilla Thunderbird: An error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox: An error occurs in the elliptic curve point addition algorithm that uses mixed…
- Mozilla Firefox
-
Memory safety bugs were reported in Firefox 54.
- Mozilla Firefox
-
Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2.
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox: A number of security vulnerabilities in the Graphite 2 library including out-of-bounds…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: A mechanism where when a new tab is loaded through JavaScript events…
- Mozilla Firefox
-
Mozilla Firefox ESR: The Mozilla Maintenance Service can be invoked by an unprivileged user to read 32 bytes…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox ESR: The Mozilla Maintenance Service can be invoked by an unprivileged user to overwrite…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox ESR: An attack using manipulation of "updater.ini" contents…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox: The "Mark of the Web" was not correctly saved on Windows when files with very long names…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: Characters from the "Canadian Syllabics" unicode block can be mixed with characters from…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Default fonts on OS X display some Tibetan characters as whitespace.
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: When entered directly, Reader Mode did not strip the username and password section of…
- Mozilla Firefox
-
Mozilla Firefox ESR: The Mozilla Maintenance Service "helper.exe" application creates a temporary directory…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox ESR: The Mozilla Windows updater modifies some files to be updated by reading the original…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox: Android intent URLs given to Firefox for Android can be used to navigate from HTTP or…
- Mozilla Firefox
-
Mozilla Firefox: An out-of-bounds read vulnerability with the Opus encoder when the number of channels in…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: A use-after-free and use-after-scope vulnerability when logging errors from headers for…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: The Firefox installer on Windows can be made to load malicious DLL files stored in the…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: An out-of-bounds read in WebGL with a maliciously crafted "ImageInfo" object during WebGL…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Thunderbird: An out-of-bounds read occurs when applying style rules to pseudo-elements…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox: A use-after-free vulnerability during specific user interactions with the input method…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: A use-after-free vulnerability with content viewer listeners that results in a…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: A use-after-free vulnerability during video control operations when a "<track>" element…
- Mozilla Firefox
- Mozilla Firefox ESR
-
A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell.
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: A use-after-free vulnerability with the frameloader during tree reconstruction while…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Memory safety bugs were reported in Firefox 53.
- Mozilla Firefox
-
Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1.
- Mozilla Firefox
- Mozilla Firefox ESR
-
Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex.
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox: An issue with incorrect ownership model of "privateBrowsing" information exposed through…
- Mozilla Firefox
-
Mozilla Thunderbird: A potential memory corruption and crash when using Skia content when drawing content…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: If a page is loaded from an original site through a hyperlink and contains a redirect to…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
An out-of-bounds read while processing SVG content in "ConvolvePixel".
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: During DOM manipulations of the accessibility tree through script…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Android intents can be used to launch Firefox for Android in reader mode with a user specified URL.
- Mozilla Firefox
-
Mozilla Thunderbird: A flaw in DRBG number generation within the Network Security Services (NSS) library where…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A use-after-free vulnerability in frame selection triggered by a combination of malicious…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash.
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox: When a "javascript:" URL is drag and dropped by a user into the addressbar…
- Mozilla Firefox
-
Mozilla Firefox ESR: A mechanism to bypass file system access protections in the sandbox using the file system…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox ESR: The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Thunderbird: A mechanism to bypass file system access protections in the sandbox to use the file…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox: A mechanism to inject static HTML into the RSS reader preview page due to a failure to…
- Mozilla Firefox
-
Mozilla Firefox: Malicious sites can display a spoofed addressbar on a page when the existing location bar…
- Mozilla Firefox
-
Mozilla Thunderbird: A mechanism to spoof the addressbar through the user interaction on the addressbar and…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
A mechanism to spoof the Firefox for Android addressbar using a "javascript:" URI.
- Mozilla Firefox
-
Mozilla Thunderbird: A possibly exploitable crash triggered during layout and manipulation of bidirectional…
- Mozilla Thunderbird
- Mozilla Firefox ESR