Advisories · Technology
Mozilla Firefox.
Every CVE that names Mozilla Firefox among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
Mozilla Firefox: Cross-origin iframes that contained a login form could have been recognized by the login…
- Mozilla Firefox
-
Mozilla Firefox: When DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: If the Compact() method was called on an nsTArray…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: During browser shutdown, reference decrementing could have occured on a previously freed…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: Firefox did not block execution of scripts with incorrect MIME types when the response…
- Mozilla Firefox
- Mozilla Firefox ESR
-
OneCRL was non-functional in the new Firefox for Android due to a missing service initialization.
- Mozilla Firefox
-
Mozilla Firefox: In some cases, removing HTML elements during sanitization would keep existing SVG event…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: When a user downloaded a file in Firefox for Android, if a cookie is set…
- Mozilla Firefox
-
Mozilla Firefox: When accepting a malicious intent from other installed apps…
- Mozilla Firefox
-
Mozilla Firefox: It was possible to cause the browser to enter fullscreen mode without displaying the…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: Incorrect bookkeeping of functions inlined during JIT compilation could have led to…
- Mozilla Firefox
-
Mozilla Firefox: A parsing and event loading mismatch in Firefox's SVG code could have allowed load events…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: In certain circumstances, the MCallGetProperty opcode can be emitted with unmet…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: When performing EC scalar point multiplication…
- Mozilla Firefox
- Mozilla Firefox for Android
-
Mozilla Firefox: If a valid external protocol handler was referenced in an image tag…
- Mozilla Firefox
-
Mozilla Firefox: When multiple WASM threads had a reference to a module…
- Mozilla Firefox
-
Mozilla Firefox: When a link to an external protocol was clicked…
- Mozilla Firefox
-
Mozilla Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla developers reported memory safety bugs present in Firefox 81.
- Mozilla Firefox
-
Mozilla Firefox: During ECDSA signature generation, padding applied in the nonce designed to ensure…
- Mozilla Firefox
- Mozilla Firefox for Android
-
Mozilla Firefox: When converting coordinates from projective to affine…
- Mozilla Firefox
- Mozilla Firefox for Android
-
Mozilla Firefox: If Firefox is installed to a user-writable directory…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: By holding a reference to the eval() function from an about:blank window…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: Firefox did not reset the address bar after the beforeunload dialog was shown if the user…
- Mozilla Firefox
-
Mozilla Firefox: When trying to load a non-video in an audio/video context the exact status code (200…
- Mozilla Firefox
- Mozilla Firefox for Android
-
Mozilla Firefox: When processing a MAR update file, after the signature has been validated…
- Mozilla Firefox
-
Mozilla Firefox: A lock was missing when accessing a data structure and importing certificate information…
- Mozilla Firefox
- Mozilla Firefox for Android
-
Mozilla developers reported memory safety bugs present in Firefox for Android 79.
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2.
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla developers reported memory safety bugs present in Firefox 80.
- Mozilla Firefox
-
Mozilla Firefox: When processing surfaces, the lifetime may outlive a persistent buffer leading to memory…
- Mozilla Firefox
-
Mozilla Firefox: Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: By exploiting an Open Redirect vulnerability on a website…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: When recursing through graphical layers while scrolling…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox ESR: A redirected HTTP request which is observed or modified through a web extension could…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox ESR: When in an endless loop, a website specifying a custom cursor using CSS could make it…
- Mozilla Firefox ESR
- Mozilla Firefox
-
An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links.
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox: By observing the stack trace for JavaScript errors in web workers…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Thunderbird: Using object or embed tags, it was possible to frame other websites…
- Mozilla Thunderbird
- Mozilla Firefox
-
Mozilla Firefox: Mozilla developers and community members reported memory safety bugs present in Firefox…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox ESR: The code for downloading files did not properly take care of special characters…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Firefox could be made to load attacker-supplied DLL files from the installation directory.
- Mozilla Firefox ESR
- Mozilla Firefox
-
JIT optimizations involving the Javascript arguments object could confuse later optimizations.
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox: Mozilla Developer Nicolas Silva found that when using WebRender…
- Mozilla Firefox
-
Mozilla Firefox: During RSA key generation, bignum implementations used a variation of the Binary Extended…
- Mozilla Firefox
-
Mozilla Thunderbird: NSS has shown timing differences when performing DSA signatures…
- Mozilla Thunderbird
- Mozilla Firefox
-
Mozilla Firefox: By navigating a tab using the history API…
- Mozilla Firefox
-
Mozilla Firefox: When browsing a document hosted on an IP address…
- Mozilla Firefox
-
Mozilla developers reported memory safety bugs present in Firefox 76.
- Mozilla Firefox
-
Mozilla Firefox: When using certain blank characters in a URL…
- Mozilla Firefox
-
Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8.
- Mozilla Thunderbird
- Mozilla Firefox
-
Mozilla Thunderbird: When browsing a malicious page, a race condition in our SharedWorkerService could occur…
- Mozilla Thunderbird
- Mozilla Firefox
-
Mozilla Thunderbird: Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects…
- Mozilla Thunderbird
- Mozilla Firefox
-
Mozilla Firefox: A VideoStreamEncoder may have been freed in a race condition with…
- Mozilla Firefox
-
Mozilla Firefox: Due to confusion processing a hyphen character in Date.parse()…
- Mozilla Firefox
-
Mozilla Firefox: When the Windows DLL "webauthn.dll" was missing from the Operating System…
- Mozilla Firefox
-
Mozilla Firefox: In non-standard configurations, a JPEG image created by JavaScript could have caused an…
- Mozilla Firefox
-
Mozilla Firefox ESR: When performing add-on updates, certificate chains terminating in non-built-in-roots were…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox ESR: When trying to connect to a STUN server…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox ESR: When processing callbacks that occurred during window flushing in the parent process…
- Mozilla Firefox ESR
- Mozilla Firefox