Advisories · Technology
Mozilla Firefox.
Every CVE that names Mozilla Firefox among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Clickjacking in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- CWE-1021
- CVSS 5.3 Medium
Race condition in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Race condition
- CVSS 6.5 Medium
When visiting a website with an overly long URL, the user interface would start to hang.
- Mozilla Firefox
- CVSS 6.1 Medium
Open redirect in Mozilla Firefox
- Mozilla Firefox
- Open redirect
- CVSS 4.3 Medium
Insufficient verification of data authenticity in Mozilla Firefox
- Mozilla Firefox
- CWE-345
- CVSS 5.5 Medium
Uncontrolled search path in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- CWE-427
- CVSS 9.8 CriticalCritical · CVSS 9+
Out-of-bounds write in Mozilla Firefox
- Mozilla Firefox
- Memory corruption
- CVSS 8.8 High
Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 8.8 High
Unrestricted file upload in Mozilla Firefox
- Mozilla Firefox
- Unrestricted file upload
- CVSS 8.8 High
Unrestricted file upload in Mozilla Firefox
- Mozilla Firefox
- Unrestricted file upload
- CVSS 8.8 High
Integer overflow in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 8.8 High
Uninitialized pointer access in Mozilla Firefox
- Mozilla Firefox
- Memory corruption
- CVSS 6.5 Medium
Mozilla Firefox: A malicious website that could create a popup could have resized the popup to overlay the…
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-451
- CVSS 6.5 Medium
Open redirect in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Open redirect
- CVSS 7.5 High
Observable discrepancy in Mozilla Firefox
- Mozilla Firefox
- Information disclosure
- CVSS 9.8 CriticalCritical · CVSS 9+
Improper input validation in Mozilla Firefox
- Mozilla Firefox
- CWE-20
- CVSS 6.1 Medium
Cross-site scripting in Mozilla Firefox
- Mozilla Firefox
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Open redirect in Mozilla Firefox
- Mozilla Firefox
- Open redirect
- CVSS 6.1 Medium
Cross-site scripting in Mozilla Firefox
- Mozilla Firefox
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Mozilla Firefox: If there was a PAC URL set and the server that hosts the PAC was not reachable…
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-703
- CVSS 6.5 Medium
Insufficient verification of data authenticity in Mozilla Firefox
- Mozilla Firefox
- CWE-345
- CVSS 9.8 CriticalCritical · CVSS 9+
Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 8.8 High
Improper certificate validation in Mozilla Firefox
- Mozilla Firefox
- Weak cryptography or TLS
- CVSS 8.8 High
Mozilla Firefox: An iframe that was not permitted to run scripts could do so if the user clicked on a…
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-829
- CVSS 5.5 Medium
Out-of-bounds read in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Buffer overflow in Mozilla Firefox
- Mozilla Firefox
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Buffer overflow in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Memory corruption
- CVSS 4.3 Medium
Improper array index validation in Mozilla Firefox
- Mozilla Firefox
- CWE-129
- CVSS 6.5 Medium
Cross-site scripting in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Cross-site scripting in Mozilla Firefox
- Mozilla Firefox
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Observable discrepancy in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Information disclosure
- CVSS 8.8 High
Use of uninitialized resource in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Memory corruption
- CVSS 8.8 High
Buffer overflow in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Memory corruption
- CVSS 8.8 High
External control of a file path in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Path traversal
- CVSS 6.5 Medium
Authentication bypass by spoofing in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Authentication bypass
- CVSS 9.8 CriticalCritical · CVSS 9+
Out-of-bounds write in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Mozilla Thunderbird: A malicious website could have learned the size of a cross-origin resource that supported…
- Mozilla Thunderbird
- Mozilla Firefox
- CWE-942
- CVSS 8.8 High
Mozilla Firefox: Mozilla developers Gabriele Svelto, Randell Jesup and the Mozilla Fuzzing Team reported…
- Mozilla Firefox
- CVSS 9.8 CriticalCritical · CVSS 9+
Out-of-bounds write in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox ESR
- Memory corruption
- CVSS 6.5 Medium
Information disclosure in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox ESR
- Information disclosure
- CVSS 4.3 Medium
Origin validation error in Mozilla Firefox
- Mozilla Firefox
- CWE-346
- CVSS 6.5 Medium
Clickjacking in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox ESR
- CWE-1021
- CVSS 6.1 Medium
Open redirect in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox ESR
- Open redirect
- CVSS 6.1 Medium
Clickjacking in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox ESR
- CWE-1021
- CVSS 6.1 Medium
Open redirect in Mozilla Firefox
- Mozilla Firefox
- Open redirect
- CVSS 8.8 High
Incorrect default permissions in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox ESR
- Broken access control
- CVSS 8.8 High
Out-of-bounds write in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Memory corruption
- CVSS 8.8 High
Out-of-bounds write in Mozilla Firefox
- Mozilla Firefox
- Memory corruption
- CVSS 6.5 Medium
Mozilla Firefox: In unusual circumstances, selecting text could cause text selection caching to behave…
- Mozilla Firefox
- CWE-664
- CVSS 5.4 Medium
Clickjacking in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- CWE-1021
- CVSS 6.5 Medium
Out-of-bounds read in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Memory corruption
- CVSS 8.8 High
Improper output encoding in Mozilla Firefox
- Mozilla Firefox
- CWE-116
- CVSS 6.5 Medium
Files accessible to external parties in Mozilla Firefox
- Mozilla Firefox
- Information disclosure
- CVSS 6.5 Medium
Use after free in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Memory corruption
- CVSS 8.8 High
Out-of-bounds write in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Memory corruption
- CVSS 9.6 CriticalCritical · KEV, CVSS 9+KEV
Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV
Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 7.5 High
Time-of-check time-of-use race condition in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Race condition
- CVSS 6.5 Medium
Use after free in Mozilla Firefox
- Mozilla Firefox
- Memory corruption
- CVSS 9.6 CriticalCritical · CVSS 9+
Protection mechanism failure in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-693