Advisories · Technology
Mozilla Firefox.
Every CVE that names Mozilla Firefox among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
Mozilla Thunderbird: Failure to correctly record the location of live pointers across wasm instance calls…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox: WebExtensions with the correct permissions were able to create and install ServiceWorkers…
- Mozilla Firefox
-
Mozilla Thunderbird: When invoking protocol handlers for external protocols…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: Using XMLHttpRequest, an attacker could have identified installed applications by probing…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: Documents loaded with the CSP sandbox directive could have escaped the sandbox's script…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox: When receiving a URL through a SEND intent, Firefox would have searched for the text…
- Mozilla Firefox
-
Using the Location API in a loop could have caused severe application hangs and crashes.
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: It was possible to recreate previous cursor spoofing attacks against users with a zoomed…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Firefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate headers.
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: Firefox for Android allowed navigations through the `intent://` protocol…
- Mozilla Firefox
-
Mozilla Firefox: Mixed-content checks were unable to analyze opaque origins which led to some mixed…
- Mozilla Firefox
-
Mozilla Firefox: When delegating navigations to the operating system…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13.
- Mozilla Firefox ESR
- Mozilla Thunderbird
-
Mozilla developers reported memory safety bugs present in Firefox 91.
- Mozilla Firefox
-
Mozilla Thunderbird: During operations on MessageTasks, a task may have been removed while it was still…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox: Through use of reportValidity() and window.open()…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: During process shutdown, a document could have caused a use-after-free of a languages…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla developers reported memory safety bugs present in Firefox 92.
- Mozilla Firefox
-
Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1.
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1.
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Thunderbird: Uninitialized memory in a canvas object could have caused an incorrect free() leading to…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox: An issue present in lowering/register allocation could have led to obscure but…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: Due to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: Firefox for Android could get stuck in fullscreen mode and not exit it even after normal…
- Mozilla Firefox
-
Mozilla Thunderbird: Instruction reordering resulted in a sequence of instructions that would cause an object…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A use-after-free vulnerability in media channels could have led to memory corruption and…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: A suspected race condition when calling getaddrinfo led to memory corruption and a…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox: After requesting multiple permissions, and closing the first permission panel…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Thunderbird: Firefox incorrectly treated an inline list-item element as a block element…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12.
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla developers and community members reported memory safety bugs present in Firefox 90.
- Mozilla Firefox
-
Mozilla Thunderbird: A malicious webpage could have triggered a use-after-free, memory corruption…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Firefox: If a user had granted a permission to a webpage and saved that grant…
- Mozilla Firefox
-
A use-after-free vulnerability was found via testing, and traced to an out-of-date Cairo library.
- Mozilla Firefox
-
Password autofill was enabled without user interaction on insecure websites on Firefox for Android.
- Mozilla Firefox
-
Mozilla Firefox: When network partitioning was enabled…
- Mozilla Firefox
-
Mozilla Firefox: Through a series of DOM manipulations, a message…
- Mozilla Firefox
-
Mozilla Thunderbird: Mozilla developers reported memory safety bugs present in code shared between Firefox and…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla developers reported memory safety bugs present in Firefox 89.
- Mozilla Firefox
-
Mozilla Firefox ESR: A WebGL framebuffer was not initialized early enough…
- Mozilla Firefox ESR
- Mozilla Thunderbird
-
When Responsive Design Mode was enabled, it used references to objects that were previously freed.
- Mozilla Firefox ESR
- Mozilla Thunderbird
-
Mozilla Firefox: By utilizing 3D CSS in conjunction with Javascript…
- Mozilla Firefox
-
Mozilla Firefox: Due to unexpected data type conversions…
- Mozilla Firefox
-
Mozilla Firefox ESR: Through complicated navigations with new windows…
- Mozilla Firefox ESR
- Mozilla Thunderbird
-
Mozilla Firefox ESR: If a Blob URL was loaded through some unusual user interaction…
- Mozilla Firefox ESR
- Mozilla Thunderbird
-
Mozilla Firefox: A race condition with requestPointerLock() and setTimeout() could have resulted in a user…
- Mozilla Firefox
-
Mozilla Firefox: A compromised content process could have performed session history manipulations it…
- Mozilla Firefox
-
Mozilla Firefox ESR: When a user clicked on an FTP URL containing encoded newline characters (%0A and %0D)…
- Mozilla Firefox ESR
- Mozilla Thunderbird
-
Lack of escaping allowed HTML injection when a webpage was viewed in Reader View.
- Mozilla Firefox
-
Mozilla Firefox ESR: The WebAssembly JIT could miscalculate the size of a return type…
- Mozilla Firefox ESR
- Mozilla Thunderbird
-
Mozilla Firefox ESR: Ports that were written as an integer overflow above the bounds of a 16-bit integer could…
- Mozilla Firefox ESR
- Mozilla Thunderbird
-
Mozilla developers and community members reported memory safety bugs present in Firefox 87.
- Mozilla Firefox
-
Mozilla Thunderbird: The Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which…
- Mozilla Thunderbird
- Mozilla Firefox
-
Mozilla Firefox: When Web Render components were destructed…
- Mozilla Firefox
- Mozilla Firefox for Android
-
Mozilla Firefox: A malicious webpage could have forced a Firefox for Android user into executing…
- Mozilla Firefox
- Mozilla Firefox for Android
-
Mozilla Firefox ESR: A transient execution vulnerability, named Floating Point Value Injection (FPVI) allowed…
- Mozilla Firefox ESR
- Mozilla Firefox
-
Mozilla Firefox: When a user has already allowed a website to access microphone and camera…
- Mozilla Firefox
-
Firefox used to cache the last filename used for printing a file.
- Mozilla Firefox
-
Mozilla Firefox: When styling and rendering an oversized `<select>` element…
- Mozilla Firefox
-
Mozilla Firefox: Firefox for Android would become unstable and hard-to-recover when a website opened too…
- Mozilla Firefox