Mozilla Firefox.

Mozilla Firefox: A malicious page can briefly cause the wrong name to be highlighted as the domain name in…

• Mozilla Firefox

Mozilla Firefox: A hyperlink using the res: protocol can be used to open local files at a known location…

• Mozilla Firefox

Mozilla Firefox: The default webcal: protocol handler will load a web site vulnerable to cross-site…

• Mozilla Firefox

Mozilla Firefox: A hyperlink using protocols associated with Internet Explorer, such as IE.HTTP…

• Mozilla Firefox

Type confusion in Mozilla Firefox ESR and others

• Mozilla Firefox ESR
• Mozilla Firefox
• Memory corruption

Improper input validation in Mozilla Firefox ESR and others

• Mozilla Firefox ESR
• Mozilla Firefox
• CWE-20

Mozilla Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox…

• Mozilla Firefox ESR
• Mozilla Firefox

Mozilla developers and community members reported memory safety bugs present in Firefox 67.

• Mozilla Firefox

Mozilla Firefox ESR: When an inner window is reused, it does not consider the use of document.domain for…

• Mozilla Firefox ESR
• Mozilla Firefox

Mozilla Firefox ESR: POST requests made by NPAPI plugins, such as Flash…

• Mozilla Firefox ESR
• Mozilla Firefox

Mozilla Firefox ESR: A use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed…

• Mozilla Firefox ESR
• Mozilla Firefox

Mozilla Firefox: Necko can access a child on the wrong thread during UDP connections…

• Mozilla Firefox

Mozilla Firefox ESR: Due to an error while parsing page content…

• Mozilla Firefox ESR
• Mozilla Firefox

Mozilla Firefox: Until explicitly accessed by script, window.globalThis is not enumerable and…

• Mozilla Firefox

Mozilla Firefox ESR: A vulnerability exists where the caret ("^") character is improperly escaped constructing…

• Mozilla Firefox ESR
• Mozilla Firefox

Activity Stream can display content from sent from the Snippet Service website.

• Mozilla Firefox

Mozilla Firefox ESR: When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes…

• Mozilla Firefox ESR
• Mozilla Firefox

Mozilla Firefox: Some unicode characters are incorrectly treated as whitespace during the parsing of web…

• Mozilla Firefox

The unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar.

• Mozilla Firefox

Mozilla Firefox: A vulnerability exists during the installation of add-ons where the initial fetch ignored…

• Mozilla Firefox

Mozilla Firefox: Application permissions give additional remote troubleshooting permission to the site…

• Mozilla Firefox

Mozilla Firefox: When a user navigates to site marked as unsafe by the Safebrowsing API…

• Mozilla Firefox

Mozilla Firefox: A vulnerability exists where it possible to force Network Security Services (NSS) to sign…

• Mozilla Firefox

Mozilla Firefox: The HTTP Alternative Services header, Alt-Svc…

• Mozilla Firefox

Mozilla Firefox ESR: Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values…

• Mozilla Firefox ESR
• Mozilla Firefox

Mozilla Firefox ESR: A vulnerability exists where if a user opens a locally saved HTML file…

• Mozilla Firefox ESR
• Mozilla Firefox

Mozilla Firefox: A vulnerability exists during authorization prompting for FTP transaction where…

• Mozilla Firefox

Mozilla Firefox: A latent vulnerability exists in the Prio library where data may be read from…

• Mozilla Firefox

Mozilla Firefox: In Firefox Developer Tools it is possible that pasting the result of the 'Copy as cURL'…

• Mozilla Firefox

Mozilla Firefox: The Upgrade-Insecure-Requests (UIR) specification states that if UIR is enabled through…

• Mozilla Firefox

Mozilla Firefox: If a Sandbox content process is compromised…

• Mozilla Firefox

Mozilla Thunderbird: Firefox will accept any registered Program ID as an external protocol handler and offer…

• Mozilla Thunderbird
• Mozilla Firefox ESR

Mozilla Firefox: Insufficient bounds checking of data during inter-process communication might allow a…

• Mozilla Firefox

Mozilla Firefox: On Android systems, Firefox can load a library from APITRACE_LIB…

• Mozilla Firefox

Mozilla Firefox: Cross-origin images can be read in violation of the same-origin policy by exporting an…

• Mozilla Firefox

Mozilla Thunderbird: A use-after-free vulnerability can occur when the SMIL animation controller incorrectly…

• Mozilla Thunderbird
• Mozilla Firefox ESR

Mozilla Thunderbird: A vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could…

• Mozilla Thunderbird
• Mozilla Firefox ESR

Mozilla Thunderbird: A vulnerability was discovered where specific command line arguments are not properly…

• Mozilla Thunderbird
• Mozilla Firefox ESR

Mozilla Thunderbird: A mechanism was discovered that removes some bounds checking for string, array…

• Mozilla Thunderbird
• Mozilla Firefox ESR

Mozilla Thunderbird: The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic…

• Mozilla Thunderbird
• Mozilla Firefox ESR

Mozilla Thunderbird: The type inference system allows the compilation of functions that can cause type…

• Mozilla Thunderbird
• Mozilla Firefox ESR

Mozilla Thunderbird: A use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is…

• Mozilla Thunderbird
• Mozilla Firefox ESR

Mozilla developers and community members reported memory safety bugs present in Firefox 65.

• Mozilla Firefox

Mozilla Thunderbird: Mozilla developers and community members reported memory safety bugs present in Firefox…

• Mozilla Thunderbird
• Mozilla Firefox ESR

Mozilla Firefox: Cross-origin images can be read from a canvas element in violation of the same-origin…

• Mozilla Firefox

The about:crashcontent and about:crashparent pages can be triggered by web content.

• Mozilla Firefox

Mozilla Firefox: When arbitrary text is sent over an FTP connection and a page reload is initiated…

• Mozilla Firefox

Mozilla Firefox: If WebRTC permission is requested from documents with data: or blob: URLs…

• Mozilla Firefox

Mozilla Firefox: If the source for resources on a page is through an FTP connection…

• Mozilla Firefox

Mozilla Firefox: Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method…

• Mozilla Firefox
• Mozilla Firefox ESR

Mozilla Firefox: Incorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT…

• Mozilla Firefox
• Mozilla Firefox ESR

Mozilla Firefox: Use of uninitialized memory in Graphite2 library in Firefox before 54 in…

• Mozilla Firefox

Mozilla Firefox: Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in…

• Mozilla Firefox

Mozilla Firefox: Out-of-bounds read in Graphite2 Library in Firefox before 54 in…

• Mozilla Firefox

Mozilla Firefox: Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in…

• Mozilla Firefox

Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.

• Mozilla Firefox

Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.

• Mozilla Firefox

Mozilla Firefox: A same-origin policy violation allowing the theft of cross-origin URL entries when using…

• Mozilla Firefox
• Mozilla Firefox ESR

Mozilla Thunderbird: A potential vulnerability leading to an integer overflow can occur during buffer size…

• Mozilla Thunderbird
• Mozilla Firefox ESR

Mozilla Firefox: Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be…

• Mozilla Firefox