Advisories · Technology

Mozilla Firefox.

Every CVE that names Mozilla Firefox among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-5700 CVE record

CVSS 7.0 High

Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11.
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CWE-786
Not analysed yet 11 Jun 2024
CVE-2024-5696 CVE record

CVSS 8.6 High

Out-of-bounds write in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 11 Jun 2024
CVE-2024-5693 CVE record

CVSS 6.1 Medium

Mozilla Firefox: Offscreen Canvas did not properly track cross-origin tainting…
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-829
Not analysed yet 11 Jun 2024
CVE-2024-5692 CVE record

CVSS 6.5 Medium

Mozilla Firefox: On Windows 10, when using the 'Save As' functionality…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2024
CVE-2024-5691 CVE record

CVSS 4.7 Medium

Protection mechanism failure in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-693
Not analysed yet 11 Jun 2024
CVE-2024-5690 CVE record

CVSS 4.3 Medium

Observable discrepancy in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Information disclosure
Not analysed yet 11 Jun 2024
CVE-2024-5688 CVE record

CVSS 8.1 High

Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 11 Jun 2024
CVE-2024-5702 CVE record

CVSS 7.5 High

Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 11 Jun 2024
CVE-2024-4778 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Memory safety bugs present in Firefox 125.
- Mozilla Firefox
- CWE-1260
Not analysed yet 14 May 2024
CVE-2024-4776 CVE record

CVSS 8.2 High

Cross-site scripting in Mozilla Firefox
- Mozilla Firefox
- Cross-site scripting (XSS)
Not analysed yet 14 May 2024
CVE-2024-4775 CVE record

CVSS 5.9 Medium

Mozilla Firefox: An iterator stop condition was missing when handling WASM code in the built-in profiler…
- Mozilla Firefox
- CWE-431
Not analysed yet 14 May 2024
CVE-2024-4774 CVE record

CVSS 6.5 Medium

Mozilla Firefox: The `ShmemCharMapHashEntry()` code was susceptible to potentially undefined behavior by…
- Mozilla Firefox
- CWE-758
Not analysed yet 14 May 2024
CVE-2024-4773 CVE record

CVSS 7.5 High

Open redirect in Mozilla Firefox
- Mozilla Firefox
- Open redirect
Not analysed yet 14 May 2024
CVE-2024-4772 CVE record

CVSS 5.9 Medium

Weak random number generator in Mozilla Firefox
- Mozilla Firefox
- Weak cryptography or TLS
Not analysed yet 14 May 2024
CVE-2024-4771 CVE record

CVSS 8.6 High

Use after free in Mozilla Firefox
- Mozilla Firefox
- Memory corruption
Not analysed yet 14 May 2024
CVE-2024-4766 CVE record

CVSS 4.3 Medium

Different techniques existed to obscure the fullscreen notification in Firefox for Android.
- Mozilla Firefox
Not analysed yet 14 May 2024
CVE-2024-4765 CVE record

CVSS 8.1 High

Broken or risky cryptographic algorithm in Mozilla Firefox
- Mozilla Firefox
- Weak cryptography or TLS
Not analysed yet 14 May 2024
CVE-2024-4764 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Use after free in Mozilla Firefox
- Mozilla Firefox
- Memory corruption
Not analysed yet 14 May 2024
CVE-2024-4777 CVE record

CVSS 7.5 High

Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 14 May 2024
CVE-2024-4770 CVE record

CVSS 8.8 High

Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 14 May 2024
CVE-2024-4769 CVE record

CVSS 5.9 Medium

Mozilla Firefox: When importing resources using Web Workers…
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-351
Not analysed yet 14 May 2024
CVE-2024-4768 CVE record

CVSS 6.1 Medium

Mozilla Firefox: A bug in popup notifications' interaction with WebAuthn made it easier for an attacker to…
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-281
Not analysed yet 14 May 2024
CVE-2024-4767 CVE record

CVSS 4.3 Medium

Exposure of personal information in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Information disclosure
Not analysed yet 14 May 2024
CVE-2024-3865 CVE record

CVSS 8.1 High

Buffer overflow in Mozilla Firefox
- Mozilla Firefox
- Memory corruption
Not analysed yet 16 Apr 2024
CVE-2024-3864 CVE record

CVSS 8.1 High

Buffer overflow in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 16 Apr 2024
CVE-2024-3302 CVE record

CVSS 3.7 Low

Resource allocation without limits in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Denial of service
Not analysed yet 16 Apr 2024
CVE-2024-3863 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Unrestricted file upload in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Unrestricted file upload
Not analysed yet 16 Apr 2024
CVE-2024-3862 CVE record

CVSS 5.3 Medium

Use of uninitialized resource in Mozilla Firefox
- Mozilla Firefox
- Memory corruption
Not analysed yet 16 Apr 2024
CVE-2024-3861 CVE record

CVSS 4.0 Medium

Mozilla Firefox: If an AlignedBuffer were assigned to itself…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 16 Apr 2024
CVE-2024-3860 CVE record

CVSS 6.2 Medium

Memory leak in Mozilla Firefox
- Mozilla Firefox
- Denial of service
Not analysed yet 16 Apr 2024
CVE-2024-3859 CVE record

CVSS 5.9 Medium

Integer overflow in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 16 Apr 2024
CVE-2024-3858 CVE record

CVSS 7.5 High

NULL pointer dereference in Mozilla Firefox
- Mozilla Firefox
- Memory corruption
Not analysed yet 16 Apr 2024
CVE-2024-3857 CVE record

CVSS 7.8 High

Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 16 Apr 2024
CVE-2024-3856 CVE record

CVSS 8.8 High

Use after free in Mozilla Firefox
- Mozilla Firefox
- Memory corruption
Not analysed yet 16 Apr 2024
CVE-2024-3855 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Mozilla Firefox
- Mozilla Firefox
- Memory corruption
Not analysed yet 16 Apr 2024
CVE-2024-3854 CVE record

CVSS 8.8 High

Out-of-bounds read in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 16 Apr 2024
CVE-2024-3853 CVE record

CVSS 7.5 High

Mozilla Firefox: A use-after-free could result if a JavaScript realm was in the process of being…
- Mozilla Firefox
Not analysed yet 16 Apr 2024
CVE-2024-3852 CVE record

CVSS 7.5 High

GetBoundName could return the wrong version of an object when JIT optimizations were applied.
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-386
Not analysed yet 16 Apr 2024
CVE-2024-29944 CVE record

CVSS 8.4 High

Mozilla Firefox: An attacker was able to inject an event handler into a privileged object that would allow…
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-830
Not analysed yet 22 Mar 2024
CVE-2024-29943 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Out-of-bounds read in Mozilla Firefox
- Mozilla Firefox
- Memory corruption
Not analysed yet 22 Mar 2024
CVE-2024-2615 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Mozilla Firefox
- Mozilla Firefox
- Memory corruption
Not analysed yet 19 Mar 2024
CVE-2024-2614 CVE record

CVSS 8.8 High

Out-of-bounds write in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 19 Mar 2024
CVE-2024-2613 CVE record

CVSS 7.5 High

Clickjacking in Mozilla Firefox
- Mozilla Firefox
- CWE-1021
Not analysed yet 19 Mar 2024
CVE-2024-2612 CVE record

CVSS 8.1 High

Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 19 Mar 2024
CVE-2024-2611 CVE record

CVSS 5.5 Medium

Mozilla Firefox: A missing delay on when pointer lock was used could have allowed a malicious page to…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 19 Mar 2024
CVE-2024-2610 CVE record

CVSS 6.1 Medium

Code injection in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Code injection
Not analysed yet 19 Mar 2024
CVE-2024-2609 CVE record

CVSS 6.1 Medium

The permission prompt input delay could expire while the window is not in focus.
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-356
Not analysed yet 19 Mar 2024
CVE-2023-5388 CVE record

CVSS 6.5 Medium

NSS was susceptible to a timing side-channel attack when performing RSA decryption.
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 19 Mar 2024
CVE-2024-2608 CVE record

CVSS 8.4 High

Mozilla Firefox: `AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and…
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 19 Mar 2024
CVE-2024-2607 CVE record

CVSS 8.1 High

Mozilla Firefox: Return registers were overwritten which could have allowed an attacker to execute…
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-123
Not analysed yet 19 Mar 2024
CVE-2024-2606 CVE record

CVSS 3.7 Low

Mozilla Firefox: Passing invalid data could have led to invalid wasm values being created…
- Mozilla Firefox
Not analysed yet 19 Mar 2024
CVE-2024-2605 CVE record

CVSS 5.9 Medium

Mozilla Firefox: An attacker could have leveraged the Windows Error Reporter to run arbitrary code on the…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 19 Mar 2024
CVE-2024-1557 CVE record

CVSS 8.1 High

Out-of-bounds write in Mozilla Firefox
- Mozilla Firefox
- Memory corruption
Not analysed yet 20 Feb 2024
CVE-2024-1556 CVE record

CVSS 6.5 Medium

Improper check for unusual conditions in Mozilla Firefox
- Mozilla Firefox
- CWE-754
Not analysed yet 20 Feb 2024
CVE-2024-1555 CVE record

CVSS 8.3 High

Authentication bypass by spoofing in Mozilla Firefox
- Mozilla Firefox
- Authentication bypass
Not analysed yet 20 Feb 2024
CVE-2024-1554 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Insufficient verification of data authenticity in Mozilla Firefox
- Mozilla Firefox
- CWE-345
Not analysed yet 20 Feb 2024
CVE-2024-1553 CVE record

CVSS 8.1 High

Buffer overflow in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 20 Feb 2024
CVE-2024-1552 CVE record

CVSS 7.5 High

Incorrect numeric conversion in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-681
Not analysed yet 20 Feb 2024
CVE-2024-1551 CVE record

CVSS 6.1 Medium

Set-Cookie response headers were being incorrectly honored in multipart HTTP responses.
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-565
Not analysed yet 20 Feb 2024
CVE-2024-1550 CVE record

CVSS 6.1 Medium

Clickjacking in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-1021
Not analysed yet 20 Feb 2024