Advisories · Technology
Mozilla Firefox.
Every CVE that names Mozilla Firefox among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
Mozilla Firefox: When the RSS Feed preview about:feeds page is framed within another page…
- Mozilla Firefox
-
Mozilla Firefox: WebExtension content scripts can be loaded into about: pages in some circumstances…
- Mozilla Firefox
-
Mozilla Thunderbird: A same-origin policy violation allowing the theft of cross-origin URL entries when using…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A buffer overflow can occur in the Skia library during buffer offset calculations with…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A use-after-free vulnerability can occur after deleting a selection element due to a weak…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox: A buffer overflow occurs when drawing and validating elements with the ANGLE graphics…
- Mozilla Firefox
-
Mozilla developers and community members reported memory safety bugs present in Firefox 63.
- Mozilla Firefox
-
Mozilla Thunderbird: Mozilla developers and community members reported memory safety bugs present in Firefox…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox: If a site is loaded over a HTTPS connection but loads a favicon resource over HTTP…
- Mozilla Firefox
-
The internal WebBrowserPersist code does not use correct origin context for a resource being saved.
- Mozilla Firefox
-
Mozilla Firefox: Some special resource URIs will cause a non-exploitable crash if loaded with optional…
- Mozilla Firefox
-
Mozilla Firefox: In private browsing mode on Firefox for Android…
- Mozilla Firefox
-
Mozilla Firefox: When a new protocol handler is registered…
- Mozilla Firefox
-
Mozilla Firefox: By using the reflected URL in some special resource URIs, such as chrome…
- Mozilla Firefox
-
Mozilla Firefox ESR: A WebExtension can request access to local files without the warning prompt stating that…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox ESR: A vulnerability where a WebExtension can run content scripts in disallowed contexts…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox ESR: By rewriting the Host: request headers using the webRequest API…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox: A potential vulnerability was found in 32-bit builds where an integer overflow during the…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: When manipulating user events in nested loops while opening a document through script…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: During HTTP Live Stream playback on Firefox for Android…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: Mozilla developers and community members reported memory safety bugs present in Firefox…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla developers and community members reported memory safety bugs present in Firefox 62.
- Mozilla Firefox
-
Mozilla Firefox: When proxy auto-detection is enabled…
- Mozilla Firefox
-
Mozilla Thunderbird: An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox: When JavaScript is used to create and manipulate an audio buffer…
- Mozilla Firefox
-
Mozilla developers and community members reported memory safety bugs present in Firefox 64.
- Mozilla Firefox
-
Mozilla Thunderbird: Mozilla developers and community members reported memory safety bugs present in Firefox…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8.
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Memory safety bugs present in Firefox 60 and Firefox ESR 60.
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Memory safety bugs present in Firefox 60.
- Mozilla Firefox
-
Mozilla Thunderbird: A vulnerability can occur when capturing a media stream when the media source type is…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox ESR: A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox ESR: A vulnerability in register allocation in JavaScript can lead to type confusion…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Thunderbird: A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox: If a user saved passwords before Firefox 58 and then later set a master password…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: The displayed addressbar URL can be spoofed on Firefox for Android using a javascript…
- Mozilla Firefox
-
Mozilla Firefox ESR: Manually dragging and dropping an Outlook email message into the browser will trigger a…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox: When the Mozilla Updater opens a MAR format file which contains a very long item…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: A use-after-free vulnerability can occur when an IndexedDB index is deleted while still…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: A use-after-free vulnerability can occur when refresh driver timers are refreshed in some…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Memory safety bugs present in Firefox 61 and Firefox ESR 60.1.
- Mozilla Firefox
- Mozilla Firefox ESR
-
Memory safety bugs present in Firefox 61.
- Mozilla Firefox
-
In Reader View SameSite cookie protections are not checked on exiting.
- Mozilla Firefox
-
WebExtensions bundled with embedded experiments were not correctly checked for proper authorization.
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Thunderbird: Windows 10 does not warn users before opening executable files with the SettingContent-ms…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: In the previous mitigations for Spectre…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: An invalid grid size during QCMS (color profile) transformations can result in the…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A compromised IPC child process can escape the content sandbox and list the names of…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A use-after-free vulnerability can occur when script uses mutation events to move DOM…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: An integer overflow can occur during graphics operations done by the Supplemental…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
An integer overflow can occur in the SwizzleData code while calculating buffer sizes.
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A use-after-free vulnerability can occur when deleting an input element during a mutation…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A buffer overflow can occur when rendering canvas content while adjusting the height and…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox: Service workers can use redirection to avoid the tainting of cross-origin resources in…
- Mozilla Firefox
-
Mozilla Firefox: A use-after-free in nsINode::ReplaceOrInsertBefore during DOM operations resulting in…
- Mozilla Firefox
-
Mozilla Firefox: If a text string that happens to be a filename in the operating system's native format is…
- Mozilla Firefox
-
Mozilla Firefox: If a URL using the "file:" protocol is dragged and dropped onto an open tab that is…
- Mozilla Firefox
-
A use-after-free vulnerability can occur during WebGL operations.
- Mozilla Firefox
-
Mozilla Firefox: A vulnerability exists in XSLT during number formatting where a negative buffer size may…
- Mozilla Firefox