Advisories · Technology

Mozilla Firefox.

Every CVE that names Mozilla Firefox among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-9391 CVE record

CVSS 6.5 Medium

Authentication bypass by spoofing in Mozilla Firefox
- Mozilla Firefox
- Authentication bypass
Not analysed yet 1 Oct 2024
CVE-2024-9402 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Buffer overflow in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 1 Oct 2024
CVE-2024-9401 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Buffer overflow in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 1 Oct 2024
CVE-2024-9400 CVE record

CVSS 8.8 High

Buffer overflow in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 1 Oct 2024
CVE-2024-9399 CVE record

CVSS 7.5 High

Improper resource shutdown in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Denial of service
Not analysed yet 1 Oct 2024
CVE-2024-9398 CVE record

CVSS 5.3 Medium

Observable discrepancy in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Information disclosure
Not analysed yet 1 Oct 2024
CVE-2024-9397 CVE record

CVSS 6.1 Medium

Clickjacking in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-1021
Not analysed yet 1 Oct 2024
CVE-2024-9396 CVE record

CVSS 8.8 High

Buffer overflow in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 1 Oct 2024
CVE-2024-9394 CVE record

CVSS 6.1 Medium

Cross-site scripting in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Cross-site scripting (XSS)
Not analysed yet 1 Oct 2024
CVE-2024-9393 CVE record

CVSS 7.5 High

Origin validation error in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-346
Not analysed yet 1 Oct 2024
CVE-2024-9392 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Origin validation error in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-346
Not analysed yet 1 Oct 2024
CVE-2024-8900 CVE record

CVSS 7.5 High

Incorrect permission assignment in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Broken access control
Not analysed yet 17 Sept 2024
CVE-2024-7652 CVE record

CVSS 7.5 High

Type Confusion in Async Generators in Javascript Engine
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 6 Sept 2024
CVE-2024-8389 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Buffer overflow in Mozilla Firefox
- Mozilla Firefox
- Memory corruption
Not analysed yet 3 Sept 2024
CVE-2024-8388 CVE record

CVSS 4.3 Medium

Clickjacking in Mozilla Firefox
- Mozilla Firefox
- CWE-1021
Not analysed yet 3 Sept 2024
CVE-2024-8387 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Buffer overflow in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 3 Sept 2024
CVE-2024-8386 CVE record

CVSS 6.1 Medium

Authentication bypass by spoofing in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Authentication bypass
Not analysed yet 3 Sept 2024
CVE-2024-8385 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Type confusion in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 3 Sept 2024
CVE-2024-8384 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 3 Sept 2024
CVE-2024-8383 CVE record

CVSS 7.5 High

Mozilla Firefox: Firefox normally asks for confirmation before asking the operating system to find an…
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-1188
Not analysed yet 3 Sept 2024
CVE-2024-8382 CVE record

CVSS 8.8 High

Mozilla Firefox: Internal browser event interfaces were exposed to web content when privileged…
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-273
Not analysed yet 3 Sept 2024
CVE-2024-8381 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Type confusion in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 3 Sept 2024
CVE-2024-7530 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Use after free in Mozilla Firefox
- Mozilla Firefox
- Memory corruption
Not analysed yet 6 Aug 2024
CVE-2024-7523 CVE record

CVSS 6.3 Medium

Clickjacking in Mozilla Firefox
- Mozilla Firefox
- CWE-1021
Not analysed yet 6 Aug 2024
CVE-2024-7531 CVE record

CVSS 6.3 Medium

Time-of-check time-of-use race condition in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Race condition
Not analysed yet 6 Aug 2024
CVE-2024-7529 CVE record

CVSS 8.1 High

The date picker could partially obscure security prompts.
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-451
Not analysed yet 6 Aug 2024
CVE-2024-7528 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 6 Aug 2024
CVE-2024-7527 CVE record

CVSS 8.8 High

Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 6 Aug 2024
CVE-2024-7526 CVE record

CVSS 7.5 High

Use of uninitialized resource in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 6 Aug 2024
CVE-2024-7525 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper access control in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Broken access control
Not analysed yet 6 Aug 2024
CVE-2024-7524 CVE record

CVSS 6.1 Medium

Cross-site scripting in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Cross-site scripting (XSS)
Not analysed yet 6 Aug 2024
CVE-2024-7522 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Out-of-bounds read in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 6 Aug 2024
CVE-2024-7521 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper handling of exceptional conditions in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-755
Not analysed yet 6 Aug 2024
CVE-2024-7520 CVE record

CVSS 8.8 High

Code injection in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Code injection
Not analysed yet 6 Aug 2024
CVE-2024-7519 CVE record

CVSS 8.8 High

Out-of-bounds write in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 6 Aug 2024
CVE-2024-7518 CVE record

CVSS 6.5 Medium

Clickjacking in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-1021
Not analysed yet 6 Aug 2024
CVE-2024-6615 CVE record

CVSS 8.8 High

Memory safety bugs fixed in Firefox 128 and Thunderbird 128
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-6614 CVE record

CVSS 4.3 Medium

Incorrect listing of stack frames
- Mozilla Firefox
- Mozilla Thunderbird
- Denial of service
Not analysed yet 9 Jul 2024
CVE-2024-6613 CVE record

CVSS 5.5 Medium

Incorrect listing of stack frames
- Mozilla Firefox
- Mozilla Thunderbird
- Information disclosure
Not analysed yet 9 Jul 2024
CVE-2024-6612 CVE record

CVSS 5.3 Medium

CSP violation leakage when using devtools
- Mozilla Firefox
- Mozilla Thunderbird
- Information disclosure
Not analysed yet 9 Jul 2024
CVE-2024-6611 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Incorrect handling of SameSite cookies
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-1275
Not analysed yet 9 Jul 2024
CVE-2024-6610 CVE record

CVSS 6.3 Medium

Form validation popups could block exiting full-screen mode
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-451
Not analysed yet 9 Jul 2024
CVE-2024-6609 CVE record

CVSS 8.8 High

Memory corruption in NSS
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 9 Jul 2024
CVE-2024-6608 CVE record

CVSS 4.3 Medium

Cursor could be moved out of the viewport using pointerlock.
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 9 Jul 2024
CVE-2024-6607 CVE record

CVSS 8.8 High

Leaving pointerlock by pressing the escape key could be prevented
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-6606 CVE record

CVSS 8.2 High

Out-of-bounds read in clipboard component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-6605 CVE record

CVSS 8.8 High

Firefox Android missed activation delay to prevent tapjacking
- Mozilla Firefox
- CWE-277
Not analysed yet 9 Jul 2024
CVE-2024-6604 CVE record

CVSS 7.5 High

Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.13
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-6603 CVE record

CVSS 7.4 High

Memory corruption in thread creation
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-823
Not analysed yet 9 Jul 2024
CVE-2024-6602 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Memory corruption in NSS
- Mozilla Firefox
- Mozilla Firefox ESR
- Code injection
Not analysed yet 9 Jul 2024
CVE-2024-6601 CVE record

CVSS 4.7 Medium

Race condition in permission assignment
- Mozilla Firefox
- Mozilla Firefox ESR
- Race condition
Not analysed yet 9 Jul 2024
CVE-2024-6600 CVE record

CVSS 6.3 Medium

Memory corruption in WebGL API
- Mozilla Firefox
- Mozilla Firefox ESR
- Denial of service
Not analysed yet 9 Jul 2024
CVE-2024-5701 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Mozilla Firefox
- Mozilla Firefox
- Memory corruption
Not analysed yet 11 Jun 2024
CVE-2024-5699 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Mozilla Firefox: In violation of spec, cookie prefixes such as `__Secure` were being ignored if they were…
- Mozilla Firefox
- CWE-178
Not analysed yet 11 Jun 2024
CVE-2024-5698 CVE record

CVSS 5.4 Medium

Mozilla Firefox: By manipulating the fullscreen feature while opening a data-list…
- Mozilla Firefox
- CWE-451
Not analysed yet 11 Jun 2024
CVE-2024-5697 CVE record

CVSS 5.3 Medium

Observable discrepancy in Mozilla Firefox
- Mozilla Firefox
- Information disclosure
Not analysed yet 11 Jun 2024
CVE-2024-5695 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Mozilla Firefox
- Mozilla Firefox
- Memory corruption
Not analysed yet 11 Jun 2024
CVE-2024-5694 CVE record

CVSS 7.5 High

Use after free in Mozilla Firefox
- Mozilla Firefox
- Memory corruption
Not analysed yet 11 Jun 2024
CVE-2024-5689 CVE record

CVSS 4.3 Medium

Mozilla Firefox: In addition to detecting when a user was taking a screenshot (XXX)…
- Mozilla Firefox
Not analysed yet 11 Jun 2024
CVE-2024-5687 CVE record

CVSS 5.3 Medium

Improper access control in Mozilla Firefox
- Mozilla Firefox
- Broken access control
Not analysed yet 11 Jun 2024