Advisories · Technology

Mozilla Firefox.

Every CVE that names Mozilla Firefox among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2019-17014 CVE record

Mozilla Firefox: If an image had not loaded correctly (such as when it is not actually an image)…
- Mozilla Firefox
Not analysed yet 8 Jan 2020
CVE-2019-17013 CVE record

Mozilla developers reported memory safety bugs present in Firefox 70.
- Mozilla Firefox
Not analysed yet 8 Jan 2020
CVE-2019-17012 CVE record

Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2.
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 8 Jan 2020
CVE-2019-17011 CVE record

Mozilla Thunderbird: Under certain conditions, when retrieving a document from a DocShell in the antitracking…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 8 Jan 2020
CVE-2019-17010 CVE record

Mozilla Thunderbird: Under certain conditions, when checking the Resist Fingerprinting preference during…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 8 Jan 2020
CVE-2019-17009 CVE record

Mozilla Thunderbird: When running, the updater service wrote status and log files to an unrestricted location…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 8 Jan 2020
CVE-2019-17008 CVE record

When using nested workers, a use-after-free could occur during worker destruction.
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 8 Jan 2020
CVE-2019-17005 CVE record

Mozilla Thunderbird: The plain text serializer used a fixed-size array for the number of <ol> elements it…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 8 Jan 2020
CVE-2019-17002 CVE record

Mozilla Firefox: If upgrade-insecure-requests was specified in the Content Security Policy…
- Mozilla Firefox
Not analysed yet 8 Jan 2020
CVE-2019-17000 CVE record

An object tag with a data URI did not correctly inherit the document's Content Security Policy.
- Mozilla Firefox
Not analysed yet 8 Jan 2020
CVE-2019-11765 CVE record

Mozilla Firefox: A compromised content process could send a message to the parent process that would cause…
- Mozilla Firefox
Not analysed yet 8 Jan 2020
CVE-2019-11764 CVE record

Mozilla Firefox: Mozilla developers and community members reported memory safety bugs present in Firefox…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 8 Jan 2020
CVE-2019-11763 CVE record

Mozilla Firefox: Failure to correctly handle null bytes when processing HTML entities resulted in Firefox…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 8 Jan 2020
CVE-2019-11762 CVE record

Mozilla Firefox: If two same-origin documents set document.domain differently to become cross-origin…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 8 Jan 2020
CVE-2019-11761 CVE record

Mozilla Firefox: By using a form with a data URI it was possible to gain access to the privileged JSONView…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 8 Jan 2020
CVE-2019-11760 CVE record

A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling.
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 8 Jan 2020
CVE-2019-11759 CVE record

Mozilla Firefox: An attacker could have caused 4 bytes of HMAC output to be written past the end of a…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 8 Jan 2020
CVE-2019-11758 CVE record

Mozilla Firefox: Mozilla community member Philipp reported a memory safety bug present in Firefox 68 when…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 8 Jan 2020
CVE-2019-11757 CVE record

Mozilla Firefox: When following the value's prototype chain…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 8 Jan 2020
CVE-2019-11756 CVE record

Mozilla Firefox: Improper refcounting of soft token session objects could cause a use-after-free and crash…
- Mozilla Firefox
Not analysed yet 8 Jan 2020
CVE-2019-11745 CVE record

Mozilla Thunderbird: When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 8 Jan 2020
CVE-2013-1689 CVE record

Mozilla Firefox: Mozilla Firefox 20.0a1 and earlier allows remote attackers to cause a denial of service…
- Mozilla Firefox
Not analysed yet 10 Dec 2019
CVE-2019-11754 CVE record

Mozilla Firefox: When the pointer lock is enabled by a website though requestPointerLock()…
- Mozilla Firefox
Not analysed yet 27 Sept 2019
CVE-2019-11733 CVE record

Mozilla Firefox: When a master password is set, it is required to be entered again before stored passwords…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 27 Sept 2019
CVE-2019-11734 CVE record

Mozilla developers and community members reported memory safety bugs present in Firefox 68.
- Mozilla Firefox
Not analysed yet 27 Sept 2019
CVE-2019-11735 CVE record

Mozilla Firefox: Mozilla developers and community members reported memory safety bugs present in Firefox…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 27 Sept 2019
CVE-2019-11736 CVE record

Mozilla Firefox: The Mozilla Maintenance Service does not guard against files being hardlinked to another…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 27 Sept 2019
CVE-2019-11737 CVE record

Mozilla Firefox: If a wildcard ('*') is specified for the host in Content Security Policy (CSP)…
- Mozilla Firefox
Not analysed yet 27 Sept 2019
CVE-2019-11738 CVE record

Mozilla Firefox: If a Content Security Policy (CSP) directive is defined that uses a hash-based source…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 27 Sept 2019
CVE-2019-11740 CVE record

Mozilla Firefox: Mozilla developers and community members reported memory safety bugs present in Firefox…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 27 Sept 2019
CVE-2019-11741 CVE record

Mozilla Firefox: A compromised sandboxed content process can perform a Universal Cross-site Scripting…
- Mozilla Firefox
Not analysed yet 27 Sept 2019
CVE-2019-11742 CVE record

Mozilla Firefox: A same-origin policy violation occurs allowing the theft of cross-origin images through a…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 27 Sept 2019
CVE-2019-11743 CVE record

Mozilla Firefox: Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 27 Sept 2019
CVE-2019-11744 CVE record

Mozilla Firefox: Some HTML elements, such as <title> and <textarea&gt…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 27 Sept 2019
CVE-2019-11746 CVE record

Mozilla Firefox: A use-after-free vulnerability can occur while manipulating video elements if the body is…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 27 Sept 2019
CVE-2019-11747 CVE record

Mozilla Firefox: The "Forget about this site" feature in the History pane is intended to remove all saved…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 27 Sept 2019
CVE-2019-11748 CVE record

Mozilla Firefox: WebRTC in Firefox will honor persisted permissions given to sites for access to…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 27 Sept 2019
CVE-2019-11749 CVE record

Mozilla Firefox: A vulnerability exists in WebRTC where malicious web content can use probing techniques…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 27 Sept 2019
CVE-2019-11750 CVE record

A type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash.
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 27 Sept 2019
CVE-2019-11751 CVE record

Mozilla Firefox: Logging-related command line parameters are not properly sanitized when Firefox is…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 27 Sept 2019
CVE-2019-11752 CVE record

Mozilla Firefox: It is possible to delete an IndexedDB key value and subsequently try to extract it during…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 27 Sept 2019
CVE-2019-11753 CVE record

Mozilla Firefox: The Firefox installer allows Firefox to be installed to a custom user writable location…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 27 Sept 2019
CVE-2019-9800 CVE record

Mozilla Thunderbird: Mozilla developers and community members reported memory safety bugs present in Firefox…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-9811 CVE record

Mozilla Firefox ESR: As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by…
- Mozilla Firefox ESR
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-9814 CVE record

Mozilla developers and community members reported memory safety bugs present in Firefox 66.
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-9815 CVE record

Mozilla Thunderbird: If hyperthreading is not disabled, a timing attack vulnerability exists…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-9816 CVE record

Mozilla Thunderbird: A possible vulnerability exists where type confusion can occur when manipulating…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-9817 CVE record

Images from a different domain can be read using a canvas object in some circumstances.
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-9818 CVE record

Mozilla Thunderbird: A race condition is present in the crash generation server used to generate data for the…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-9819 CVE record

Mozilla Thunderbird: A vulnerability where a JavaScript compartment mismatch can occur while working with the…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-9820 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur in the chrome event handler when it is freed…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-9821 CVE record

Mozilla Firefox: A use-after-free vulnerability can occur in AssertWorkerThread due to a race condition…
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-11691 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-11692 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur when listeners are removed from the event…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-11693 CVE record

Mozilla Thunderbird: The bufferdata function in WebGL is vulnerable to a buffer overflow with specific…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-11694 CVE record

Mozilla Thunderbird: A vulnerability exists in the Windows sandbox where an uninitialized value in memory can…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-11695 CVE record

Mozilla Firefox: A custom cursor defined by scripting on a site can position itself over the addressbar to…
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-11696 CVE record

Mozilla Firefox: Files with the .JNLP extension used for "Java web start" applications are not treated as…
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-11697 CVE record

Mozilla Firefox: If the ALT and "a" keys are pressed when users receive an extension installation prompt…
- Mozilla Firefox
Not analysed yet 23 Jul 2019
CVE-2019-11698 CVE record

Mozilla Thunderbird: If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the…
- Mozilla Thunderbird
- Mozilla Firefox
Not analysed yet 23 Jul 2019