Advisories · Technology
Mozilla Firefox.
Every CVE that names Mozilla Firefox among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
Mozilla Firefox: Address bar search suggestions in private browsing mode were re-using session data from…
- Mozilla Firefox
-
Mozilla Thunderbird: A locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would…
- Mozilla Thunderbird
- Mozilla Firefox
-
Mozilla Firefox: A malicious website that causes an HTTP Authentication dialog to be spawned could trick…
- Mozilla Firefox
-
Mozilla developers reported memory safety bugs present in Firefox 88.
- Mozilla Firefox
-
Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11.
- Mozilla Thunderbird
- Mozilla Firefox
-
Mozilla Firefox: When drawing text onto a canvas with WebRender disabled…
- Mozilla Firefox
-
Improper certificate validation in Mozilla Firefox
- Mozilla Firefox
- Weak cryptography or TLS
-
Mozilla Firefox ESR: A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox ESR: Using techniques that built on the slipstream research…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox: By causing a transition on a parent node by removing a CSS rule…
- Mozilla Firefox
-
A malicious extension could have opened a popup window lacking an address bar.
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox: If an attacker is able to alter specific about:config values (for example malware running…
- Mozilla Firefox
-
Mozilla Firefox: A malicious extension with the 'search' permission could have installed a new search…
- Mozilla Firefox
-
Mozilla Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla developers reported memory safety bugs present in Firefox 86.
- Mozilla Firefox
-
Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6.
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla developers reported memory safety bugs present in Firefox 84.
- Mozilla Firefox
-
Mozilla developers reported memory safety bugs present in Firefox 85.
- Mozilla Firefox
-
Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7.
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed…
- Mozilla Firefox
-
Mozilla Firefox: When sharing geolocation during an active WebRTC share…
- Mozilla Firefox
-
Mozilla Firefox: If a user clicked into a specifically crafted PDF…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: Using the new logical assignment operators in a JavaScript switch statement could have…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: The browser could have been confused into transferring a pointer lock state into another…
- Mozilla Firefox
-
Mozilla Firefox: An ambiguous file picker design could have confused users who intended to select and…
- Mozilla Firefox
-
Mozilla Firefox: Navigations through the Android-specific `intent` URL scheme could have been misused to…
- Mozilla Firefox
-
Mozilla Firefox: The browser could have been confused into transferring a screen sharing state into…
- Mozilla Firefox
-
Mozilla Firefox: An XSS bug in internal error pages could have led to various spoofing attacks…
- Mozilla Firefox
-
Mozilla Firefox: Performing garbage collection on re-declared JavaScript variables resulted in a…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: Further techniques that built on the slipstream research combined with a malicious…
- Mozilla Firefox
-
Mozilla Firefox: Incorrect use of the '<RowCountChanged>' method could have led to a user-after-poison and…
- Mozilla Firefox
-
Mozilla Firefox: If Content Security Policy blocked frame navigation…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: As specified in the W3C Content Security Policy draft, when creating a violation report…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: Context-specific code was included in a shared jump table…
- Mozilla Firefox
-
Mozilla Firefox: When processing a redirect with a conflicting Referrer-Policy…
- Mozilla Firefox
-
One phishing tactic on the web is to provide a link with HTTP Auth.
- Mozilla Firefox
-
Mozilla Firefox: When trying to load a cross-origin resource in an audio/video context a decoding error…
- Mozilla Firefox
- Mozilla Thunderbird
-
The DOMParser API did not properly process '<noscript>' elements for escaping.
- Mozilla Firefox
-
Mozilla Firefox: The developer page about:memory has a Measure function for exploring what object types…
- Mozilla Firefox
-
Mozilla Firefox: When accepting a malicious intent from other installed apps…
- Mozilla Firefox
-
Mozilla Firefox: Certain blit values provided by the user were not properly constrained leading to a heap…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: The lifecycle of IPC Actors allows managed actors to outlive their manager actors…
- Mozilla Firefox
-
Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed.
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: When flex-basis was used on a table wrapper…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: When a malicious application installed on the user's device broadcast an Intent to…
- Mozilla Firefox
-
Mozilla Firefox: When a HTTPS pages was embedded in a HTTP page…
- Mozilla Firefox
-
Mozilla Firefox: By attempting to connect a website using an unresponsive port…
- Mozilla Firefox
-
Mozilla Firefox: Using techniques that built on the slipstream research…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: When a user typed a URL in the address bar or the search bar and quickly hit the enter…
- Mozilla Firefox
-
Mozilla Firefox: When an extension with the proxy permission registered to receive <all_urls>…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: If a user downloaded a file lacking an extension on Windows…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5.
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla developers reported memory safety bugs present in Firefox 83.
- Mozilla Firefox
-
Mozilla developers reported memory safety bugs present in Firefox 82.
- Mozilla Firefox
-
Mozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4.
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: When listening for page changes with a Mutation Observer…
- Mozilla Firefox
-
Mozilla Firefox: Searching for a single word from the address bar caused an mDNS request to be sent on the…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: Some websites have a feature "Show Password" where clicking a button will change a…
- Mozilla Firefox
- Mozilla Firefox ESR
-
Mozilla Firefox: If the Remote Debugging via USB feature was enabled in Firefox for Android on an Android…
- Mozilla Firefox
-
Repeated calls to the history and location interfaces could have been used to hang the browser.
- Mozilla Firefox