Advisories · Technology
Mozilla Firefox.
Every CVE that names Mozilla Firefox among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Mozilla Firefox: When resizing a popup after requesting fullscreen access…
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-451
- CVSS 4.3 Medium
Observable discrepancy in Mozilla Firefox
- Mozilla Firefox
- Information disclosure
- CVSS 8.8 High
Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 8.8 High
Out-of-bounds write in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Memory corruption
- CVSS 8.8 High
Out-of-bounds write in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
- CVSS 8.8 High
Race condition in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- Race condition
- CVSS 4.3 Medium
Mozilla Firefox: Under certain circumstances, a JavaScript alert (or prompt) could have been shown while…
- Mozilla Firefox
- CWE-451
- CVSS 8.8 High
Protection mechanism failure in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
- CVSS 6.5 Medium
Sensitive information in error messages in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- Information disclosure
- CVSS 9.6 CriticalCritical · CVSS 9+
Protection mechanism failure in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
- CVSS 8.8 High
Cleartext transmission of sensitive information in Mozilla Firefox
- Mozilla Firefox
- Weak cryptography or TLS
- CVSS 6.5 Medium
Insufficient verification of data authenticity in Mozilla Firefox
- Mozilla Firefox
- CWE-345
- CVSS 8.8 High
Code injection in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- Code injection
- CVSS 8.8 High
Mozilla Firefox: By using XSL Transforms, a malicious webserver could have served a user an XSL document…
- Mozilla Firefox
- CWE-672
- CVSS 6.5 Medium
Incorrect authorization in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- Broken access control
- CVSS 7.1 High
Time-of-check time-of-use race condition in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- Race condition
- CVSS 8.8 High
Out-of-bounds write in Mozilla Firefox
- Mozilla Firefox
- Memory corruption
- CVSS 8.8 High
Out-of-bounds write in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Memory corruption
- CVSS 6.5 Medium
Mozilla Firefox: By generally accepting and passing resource handles across processes…
- Mozilla Firefox
- CVSS 4.3 Medium
Improper input validation in Mozilla Firefox
- Mozilla Firefox
- CWE-20
- CVSS 6.5 Medium
Cross-site scripting in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Improper certificate validation in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Weak cryptography or TLS
- CVSS 5.9 Medium
Race condition in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Race condition
- CVSS 6.5 Medium
Information disclosure in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Information disclosure
- CVSS 8.8 High
Improper output encoding in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- CWE-116
- CVSS 4.3 Medium
Mozilla Firefox ESR: When navigating from inside an iframe while requesting fullscreen access…
- Mozilla Firefox ESR
- Mozilla Firefox
- CVSS 6.5 Medium
Out-of-bounds read in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Memory corruption
- CVSS 7.5 High
Mozilla Firefox ESR: When resizing a popup while requesting fullscreen access…
- Mozilla Firefox ESR
- Mozilla Firefox
- CVSS 8.8 High
Use after free in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Memory corruption
- CVSS 6.5 Medium
Mozilla Firefox ESR: Malicious websites could have tricked users into accepting launching a program to handle…
- Mozilla Firefox ESR
- Mozilla Firefox
- CVSS 8.8 High
Out-of-bounds write in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Memory corruption
- CVSS 7.5 High
Race condition in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Race condition
- CVSS 7.0 High
Uncontrolled search path in Mozilla Firefox
- Mozilla Firefox
- CWE-427
- CVSS 8.8 HighCritical · CVSS 7+ and EPSS
Prototype pollution in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Prototype pollution
- CVSS 8.8 HighCritical · CVSS 7+ and EPSS
Prototype pollution in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Prototype pollution
- CVSS 8.8 HighCritical · CVSS 7+ and EPSS
Prototype pollution in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Prototype pollution
- CVSS 6.5 Medium
Use after free in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Memory corruption
- CVSS 8.8 High
Out-of-bounds write in Mozilla Firefox
- Mozilla Firefox
- Memory corruption
- CVSS 8.8 High
Out-of-bounds write in Mozilla Firefox
- Mozilla Firefox
- Memory corruption
- CVSS 4.3 Medium
Mozilla Firefox: If a domain name contained a RTL character…
- Mozilla Firefox
- CWE-1007
- CVSS 9.8 CriticalCritical · CVSS 9+
XML injection in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Other injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Out-of-bounds write in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 6.5 Medium
Use after free in Mozilla Firefox
- Mozilla Firefox
- Memory corruption
-
Mozilla Firefox: The iframe sandbox rules were not correctly applied to XSLT stylesheets…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: When interacting with an HTML input element's file picker dialog with webkitdirectory…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: Microsoft introduced a new feature in Windows 10 known as Cloud Clipboard which…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: Through a series of navigations, Firefox could have entered fullscreen mode without…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: The Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: By displaying a form validity message in the correct location at the same time as a…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: Due to an unusual sequence of attacker-controlled events…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: The executable file warning was not presented when downloading .inetloc files, which…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: A Universal XSS vulnerability was present in Firefox for Android resulting from improper…
- Mozilla Firefox
-
Mozilla Firefox: When a user loaded a Web Extensions context menu…
- Mozilla Firefox
-
The 'Copy Image Link' context menu action would copy the final image URL after redirects.
- Mozilla Firefox
-
Mozilla Firefox: When parsing internationalized domain names…
- Mozilla Firefox
-
Mozilla Firefox: Mozilla developers and community members reported memory safety bugs present in Firefox…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Firefox: A use-after-free could have occured when an HTTP2 session object was released on a…
- Mozilla Firefox
- Mozilla Thunderbird
-
Mozilla Thunderbird: Under certain circumstances, asynchronous functions could have caused a navigation to…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: An incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to…
- Mozilla Thunderbird
- Mozilla Firefox ESR
-
Mozilla Thunderbird: By misusing a race in our notification code…
- Mozilla Thunderbird
- Mozilla Firefox ESR