Mozilla Firefox.

Mozilla Thunderbird: A use-after-free vulnerability can occur during mouse event handling due to issues with…

• Mozilla Thunderbird
• Mozilla Firefox ESR

Mozilla Thunderbird: A use-after-free vulnerability can occur when manipulating HTML media elements with media…

• Mozilla Thunderbird
• Mozilla Firefox ESR

Mozilla Firefox: A use-after-free vulnerability can occur when manipulating floating "first-letter" style…

• Mozilla Firefox

Mozilla Firefox: A use-after-free vulnerability can occur when arguments passed to the…

• Mozilla Firefox

Mozilla Thunderbird: A use-after-free vulnerability can occur when the widget listener is holding strong…

• Mozilla Thunderbird
• Mozilla Firefox ESR

Mozilla Thunderbird: A use-after-free vulnerability can occur when form input elements, focus…

• Mozilla Thunderbird
• Mozilla Firefox ESR

Mozilla Thunderbird: A use-after-free vulnerability can occur during XSL transformations when the source…

• Mozilla Thunderbird
• Mozilla Firefox ESR

Mozilla Thunderbird: An integer overflow vulnerability in the Skia library when allocating memory for edge…

• Mozilla Thunderbird
• Mozilla Firefox ESR

Mozilla Firefox: A heap buffer overflow vulnerability may occur in WebAssembly when "shrinkElements" is…

• Mozilla Firefox

Mozilla Firefox: A heap buffer overflow vulnerability may occur in WebAssembly during Memory/Table…

• Mozilla Firefox

Mozilla Firefox: A use-after-free vulnerability can occur when the thread for a Web Worker is freed from…

• Mozilla Firefox

Mozilla Firefox ESR: A use-after-free vulnerability can occur during WebRTC connections when interacting with…

• Mozilla Firefox ESR
• Mozilla Firefox

Memory safety bugs were reported in Firefox 57.

• Mozilla Firefox

Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5.

• Mozilla Thunderbird
• Mozilla Firefox ESR

Mozilla Thunderbird: A buffer overflow occurs when drawing and validating elements using Direct 3D 9 with the…

• Mozilla Thunderbird
• Mozilla Firefox ESR

Mozilla Firefox: A combination of an external SVG image referenced on a page and the coloring of anchor…

• Mozilla Firefox

Mozilla Firefox ESR: When Private Browsing mode is used, it is possible for a web worker to write persistent…

• Mozilla Firefox ESR
• Mozilla Firefox

Mozilla Firefox: If a document's Referrer Policy attribute is set to "no-referrer" sometimes two network…

• Mozilla Firefox

Mozilla Firefox: JavaScript can be injected into an exported bookmarks file by placing JavaScript code…

• Mozilla Firefox

Mozilla Firefox: Control characters prepended before "javascript:" URLs pasted in the addressbar can cause…

• Mozilla Firefox

Mozilla Firefox: Punycode format text will be displayed for entire qualified international domain names in…

• Mozilla Firefox

Mozilla Firefox: SVG loaded through "<img>" tags can use "<meta>" tags within the SVG data to set cookies…

• Mozilla Firefox

Mozilla Firefox: The "pingsender" executable used by the Firefox Health Report dynamically loads a system…

• Mozilla Firefox

Mozilla Firefox: Mixed content blocking of insecure (HTTP) sub-resources in a secure (HTTPS) document was…

• Mozilla Firefox

Mozilla Firefox: A "data:" URL loaded in a new tab did not inherit the Content Security Policy (CSP) of…

• Mozilla Firefox

Mozilla Firefox: Some Arabic and Indic vowel marker characters can be combined with Latin characters in a…

• Mozilla Firefox

Mozilla Firefox: The combined, single character, version of the letter 'i' with any of the potential…

• Mozilla Firefox

Mozilla Firefox: A vulnerability where the security wrapper does not deny access to some exposed…

• Mozilla Firefox

The Resource Timing API incorrectly revealed navigations in cross-origin iframes.

• Mozilla Firefox
• Mozilla Firefox ESR

Mozilla Firefox: A use-after-free vulnerability can occur when flushing and resizing layout because the…

• Mozilla Firefox
• Mozilla Firefox ESR

Memory safety bugs were reported in Firefox 56.

• Mozilla Firefox

Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4.

• Mozilla Firefox
• Mozilla Firefox ESR

Several fonts on OS X display some Tibetan and Arabic characters as whitespace.

• Mozilla Firefox
• Mozilla Firefox ESR

Mozilla Firefox: A buffer overflow occurs when drawing and validating elements with the ANGLE graphics…

• Mozilla Firefox
• Mozilla Firefox ESR

Mozilla Firefox: The content security policy (CSP) "sandbox" directive did not create a unique origin for…

• Mozilla Firefox
• Mozilla Firefox ESR

Mozilla Firefox: The AES-GCM implementation in WebCrypto API accepts 0-length IV when it should require a…

• Mozilla Firefox

Mozilla Firefox: A vulnerability where WebExtensions can download and attempt to open a file of some…

• Mozilla Firefox

The "instanceof" operator can bypass the Xray wrapper mechanism.

• Mozilla Firefox

Mozilla Firefox: A use-after-free vulnerability can occur in design mode when image objects are resized if…

• Mozilla Firefox
• Mozilla Firefox ESR

Mozilla Firefox: A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich…

• Mozilla Firefox
• Mozilla Firefox ESR

Mozilla Firefox: A spoofing vulnerability can occur when a page switches to fullscreen mode without user…

• Mozilla Firefox

Mozilla Firefox: WebExtensions could use popups and panels in the extension UI to load an "about:"…

• Mozilla Firefox

Mozilla Firefox: On pages containing an iframe, the "data:" protocol can be used to create a modal dialog…

• Mozilla Firefox

Mozilla Firefox: File downloads encoded with "blob:" and "data:" URL elements bypassed normal file…

• Mozilla Firefox
• Mozilla Firefox ESR

Mozilla Firefox: Inside the JavaScript parser, a cast of an integer to a narrower type can result in data…

• Mozilla Firefox

Mozilla Firefox: If web content on a page is dragged onto portions of the browser UI, such as the tab bar…

• Mozilla Firefox

Memory safety bugs were reported in Firefox 55.

• Mozilla Firefox

Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3.

• Mozilla Firefox
• Mozilla Firefox ESR

Mozilla Firefox: A content security policy (CSP) "frame-ancestors" directive containing origins with paths…

• Mozilla Firefox

Mozilla Thunderbird: A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the…

• Mozilla Thunderbird
• Mozilla Firefox ESR

Mozilla Firefox: A use-after-free vulnerability can occur when the layer manager is freed too early when…

• Mozilla Firefox

During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer.

• Mozilla Firefox
• Mozilla Firefox ESR

Mozilla Thunderbird: The destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by…

• Mozilla Thunderbird
• Mozilla Firefox ESR

Mozilla Thunderbird: When a page's content security policy (CSP) header contains a "sandbox" directive…

• Mozilla Thunderbird
• Mozilla Firefox ESR

Mozilla Thunderbird: A use-after-free vulnerability can occur when manipulating the DOM during the resize…

• Mozilla Thunderbird
• Mozilla Firefox ESR

Mozilla Thunderbird: A use-after-free vulnerability can occur while re-computing layout for a "marquee"…

• Mozilla Thunderbird
• Mozilla Firefox ESR

Mozilla Thunderbird: A use-after-free vulnerability can occur in WebSockets when the object holding the…

• Mozilla Thunderbird
• Mozilla Firefox ESR

JavaScript in the "about:webrtc" page is not sanitized properly being assigned to "innerHTML".

• Mozilla Firefox

Mozilla Firefox ESR: The Developer Tools feature suffers from a XUL injection vulnerability due to improper…

• Mozilla Firefox ESR
• Mozilla Firefox

Mozilla Firefox: Response header name interning does not have same-origin protections and these headers…

• Mozilla Firefox