Advisories · Technology

Mozilla Firefox.

Every CVE that names Mozilla Firefox among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-6436 CVE record

CVSS 8.1 High

Memory safety bugs fixed in Firefox 140 and Thunderbird 140
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 24 Jun 2025
CVE-2025-6435 CVE record

CVSS 8.1 High

Save as in Devtools could download files without sanitizing the extension
- Mozilla Firefox
- Mozilla Thunderbird
- Unrestricted file upload
Not analysed yet 24 Jun 2025
CVE-2025-6434 CVE record

CVSS 4.3 Medium

HTTPS-Only exception screen lacked anti-clickjacking delay
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-1021
Not analysed yet 24 Jun 2025
CVE-2025-6433 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificate
- Mozilla Firefox
- Mozilla Thunderbird
- Weak cryptography or TLS
Not analysed yet 24 Jun 2025
CVE-2025-6432 CVE record

CVSS 8.6 High

DNS Requests leaked outside of a configured SOCKS proxy
- Mozilla Firefox
- Mozilla Thunderbird
- Information disclosure
Not analysed yet 24 Jun 2025
CVE-2025-6431 CVE record

CVSS 6.5 Medium

The prompt in Firefox for Android that asks before opening a link in an external application could be bypassed
- Mozilla Firefox
- Broken access control
Not analysed yet 24 Jun 2025
CVE-2025-6428 CVE record

CVSS 4.3 Medium

Firefox for Android opened URLs specified in a link querystring parameter
- Mozilla Firefox
- Open redirect
Not analysed yet 24 Jun 2025
CVE-2025-6427 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

connect-src Content Security Policy restriction could be bypassed
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
Not analysed yet 24 Jun 2025
CVE-2025-6430 CVE record

CVSS 6.1 Medium

Content-Disposition header ignored when a file is included in an embed or object tag
- Mozilla Firefox
- Mozilla Thunderbird
- Cross-site scripting (XSS)
Not analysed yet 24 Jun 2025
CVE-2025-6429 CVE record

CVSS 6.5 Medium

Incorrect parsing of URLs could have allowed embedding of youtube.com
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-116
Not analysed yet 24 Jun 2025
CVE-2025-6426 CVE record

CVSS 8.8 High

No warning when opening executable terminal files on macOS
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-345
Not analysed yet 24 Jun 2025
CVE-2025-6425 CVE record

CVSS 4.3 Medium

The WebCompat WebExtension shipped with Firefox exposed a persistent UUID
- Mozilla Firefox
- Mozilla Thunderbird
- Information disclosure
Not analysed yet 24 Jun 2025
CVE-2025-6424 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Use-after-free in FontFaceSet
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 24 Jun 2025
CVE-2025-49710 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Integer overflow in OrderedHashTable
- Mozilla Firefox
- Memory corruption
Not analysed yet 11 Jun 2025
CVE-2025-49709 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Memory corruption in canvas surfaces
- Mozilla Firefox
- Memory corruption
Not analysed yet 11 Jun 2025
CVE-2025-5272 CVE record

CVSS 7.3 High

Memory safety bugs fixed in Firefox 139 and Thunderbird 139
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 May 2025
CVE-2025-5271 CVE record

CVSS 6.5 Medium

Devtools' preview ignored CSP headers
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-116
Not analysed yet 27 May 2025
CVE-2025-5270 CVE record

CVSS 7.5 High

SNI was sometimes unencrypted
- Mozilla Firefox
- Mozilla Thunderbird
- Weak cryptography or TLS
Not analysed yet 27 May 2025
CVE-2025-5269 CVE record

CVSS 8.1 High

Memory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.11
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 May 2025
CVE-2025-5268 CVE record

CVSS 8.1 High

Memory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.11
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 May 2025
CVE-2025-5267 CVE record

CVSS 5.4 Medium

Clickjacking vulnerability could have led to leaking saved payment card details
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-1021
Not analysed yet 27 May 2025
CVE-2025-5266 CVE record

CVSS 4.3 Medium

Script element events leaked cross-origin resource status
- Mozilla Firefox
- Mozilla Thunderbird
- Information disclosure
Not analysed yet 27 May 2025
CVE-2025-5265 CVE record

CVSS 4.8 Medium

Potential local code execution in “Copy as cURL” command
- Mozilla Firefox
- Mozilla Thunderbird
- Command injection
Not analysed yet 27 May 2025
CVE-2025-5264 CVE record

CVSS 4.8 Medium

Potential local code execution in “Copy as cURL” command
- Mozilla Firefox
- Mozilla Thunderbird
- Command injection
Not analysed yet 27 May 2025
CVE-2025-5263 CVE record

CVSS 4.3 Medium

Error handling for script execution was incorrectly isolated from web content
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-346
Not analysed yet 27 May 2025
CVE-2025-4919 CVE record

CVSS 8.8 High

Out-of-bounds access when optimizing linear sums
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 17 May 2025
CVE-2025-4918 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds access when resolving Promise objects
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 17 May 2025
CVE-2025-4093 CVE record

CVSS 8.1 High

Memory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.10
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 29 Apr 2025
CVE-2025-4092 CVE record

CVSS 6.5 Medium

Memory safety bugs fixed in Firefox 138 and Thunderbird 138
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 29 Apr 2025
CVE-2025-4091 CVE record

CVSS 8.1 High

Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 29 Apr 2025
CVE-2025-4090 CVE record

CVSS 5.3 Medium

Leaked library paths in Thunderbird for Android
- Mozilla Firefox
- Mozilla Thunderbird
- Information disclosure
Not analysed yet 29 Apr 2025
CVE-2025-4089 CVE record

CVSS 5.1 Medium

Potential local code execution in "copy as cURL" command
- Mozilla Firefox
- Mozilla Thunderbird
- Command injection
Not analysed yet 29 Apr 2025
CVE-2025-4088 CVE record

CVSS 6.5 Medium

Cross-site request forgery via storage access API redirects
- Mozilla Firefox
- Mozilla Thunderbird
- Cross-site request forgery (CSRF)
Not analysed yet 29 Apr 2025
CVE-2025-4087 CVE record

CVSS 4.8 Medium

Unsafe attribute access during XPath parsing
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 29 Apr 2025
CVE-2025-4086 CVE record

CVSS 6.5 Medium

Specially crafted filename could be used to obscure download type
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-451
Not analysed yet 29 Apr 2025
CVE-2025-4085 CVE record

CVSS 7.1 High

Potential information leakage and privilege escalation in UITour actor
- Mozilla Firefox
- Mozilla Thunderbird
- Privilege escalation
Not analysed yet 29 Apr 2025
CVE-2025-4084 CVE record

CVSS 5.7 Medium

Potential local code execution in "copy as cURL" command
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-116
Not analysed yet 29 Apr 2025
CVE-2025-4083 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Process isolation bypass using "javascript:" URI links in cross-origin frames
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-653
Not analysed yet 29 Apr 2025
CVE-2025-4082 CVE record

CVSS 5.9 Medium

WebGL shader attribute memory corruption in Thunderbird for macOS
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 29 Apr 2025
CVE-2025-2817 CVE record

CVSS 8.8 High

Privilege escalation in Thunderbird Updater
- Mozilla Firefox
- Mozilla Thunderbird
- Path traversal
Not analysed yet 29 Apr 2025
CVE-2025-3608 CVE record

CVSS 6.5 Medium

Race condition in nsHttpTransaction could lead to memory corruption
- Mozilla Firefox
- Race condition
Not analysed yet 15 Apr 2025
CVE-2025-3035 CVE record

CVSS 5.3 Medium

Tab title disclosure across pages when using AI chatbot
- Mozilla Firefox
- Information disclosure
Not analysed yet 1 Apr 2025
CVE-2025-3034 CVE record

CVSS 8.1 High

Memory safety bugs fixed in Firefox 137 and Thunderbird 137
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 1 Apr 2025
CVE-2025-3033 CVE record

CVSS 7.7 High

Opening local .url files could lead to another file being opened
- Mozilla Firefox
- Mozilla Thunderbird
- Path traversal
Not analysed yet 1 Apr 2025
CVE-2025-3032 CVE record

CVSS 7.4 High

Leaking file descriptors from the fork server
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-403
Not analysed yet 1 Apr 2025
CVE-2025-3031 CVE record

CVSS 6.5 Medium

JIT optimization bug with different stack slot sizes
- Mozilla Firefox
- Mozilla Thunderbird
- Information disclosure
Not analysed yet 1 Apr 2025
CVE-2025-3030 CVE record

CVSS 8.1 High

Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 1 Apr 2025
CVE-2025-3029 CVE record

CVSS 7.3 High

URL Bar Spoofing via non-BMP Unicode characters
- Mozilla Firefox
- Mozilla Thunderbird
- Authentication bypass
Not analysed yet 1 Apr 2025
CVE-2025-3028 CVE record

CVSS 6.5 Medium

Use-after-free triggered by XSLTProcessor
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 1 Apr 2025
CVE-2025-2857 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Incorrect handle could lead to sandbox escapes
- Mozilla Firefox
- Information disclosure
Not analysed yet 27 Mar 2025
CVE-2025-1943 CVE record

CVSS 8.2 High

Memory safety bugs fixed in Firefox 136 and Thunderbird 136
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 4 Mar 2025
CVE-2025-1938 CVE record

CVSS 6.5 Medium

Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 4 Mar 2025
CVE-2025-1937 CVE record

CVSS 7.5 High

Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.8
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-1260
Not analysed yet 4 Mar 2025
CVE-2025-1936 CVE record

CVSS 7.3 High

Adding %00 and a fake extension to a jar: URL changed the interpretation of the contents
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-158
Not analysed yet 4 Mar 2025
CVE-2025-1935 CVE record

CVSS 4.3 Medium

Clickjacking the registerProtocolHandler info-bar
- Mozilla Firefox
- Mozilla Thunderbird
- Cross-site scripting (XSS)
Not analysed yet 4 Mar 2025
CVE-2025-1942 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Disclosure of uninitialized memory when .toUpperCase() causes string to get longer
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 4 Mar 2025
CVE-2025-1941 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Lock screen setting bypass in Firefox Focus for Android
- Mozilla Firefox
- Broken access control
Not analysed yet 4 Mar 2025
CVE-2025-1934 CVE record

CVSS 6.5 Medium

Unexpected GC during RegExp bailout processing
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 4 Mar 2025
CVE-2025-1940 CVE record

CVSS 7.1 High

Android Intent confirmation prompt tapjacking using Select options
- Mozilla Firefox
- CWE-1021
Not analysed yet 4 Mar 2025
CVE-2025-1933 CVE record

CVSS 7.6 High

JIT corruption of WASM i32 return values on 64-bit CPUs
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 4 Mar 2025