Advisories · Technology

Mozilla Firefox.

Every CVE that names Mozilla Firefox among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-29531 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 19 Jun 2023
CVE-2023-32216 CVE record

Mozilla Firefox: Mozilla developers and community members Ronald Crane, Andrew McCreight…
- Mozilla Firefox
Not analysed yet 19 Jun 2023
CVE-2023-32214 CVE record

Mozilla Firefox: Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 19 Jun 2023
CVE-2023-32210 CVE record

Mozilla Firefox: Documents were incorrectly assuming an ordering of principal objects when ensuring we…
- Mozilla Firefox
Not analysed yet 19 Jun 2023
CVE-2023-32209 CVE record

A maliciously crafted favicon could have led to an out of memory crash.
- Mozilla Firefox
Not analysed yet 19 Jun 2023
CVE-2023-32208 CVE record

Service workers could reveal script base URL due to dynamic `import()`.
- Mozilla Firefox
Not analysed yet 19 Jun 2023
CVE-2023-32215 CVE record

Mozilla Firefox: Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 2 Jun 2023
CVE-2023-32213 CVE record

When reading a file, an uninitialized value could have been used as read limit.
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 2 Jun 2023
CVE-2023-32212 CVE record

An attacker could have positioned a `datalist` element to obscure the address bar.
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 2 Jun 2023
CVE-2023-32211 CVE record

A type checking bug would have led to invalid code being compiled.
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 2 Jun 2023
CVE-2023-32207 CVE record

CVSS 8.8 High

Authentication bypass by spoofing in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Authentication bypass
Not analysed yet 2 Jun 2023
CVE-2023-32206 CVE record

An out-of-bound read could have led to a crash in the RLBox Expat driver.
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 2 Jun 2023
CVE-2023-32205 CVE record

In multiple cases browser prompts could have been obscured by popups controlled by content.
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 2 Jun 2023
CVE-2023-29551 CVE record

CVSS 8.8 High

Out-of-bounds write in Mozilla Firefox for Android and others
- Mozilla Firefox for Android
- Mozilla Firefox
- Memory corruption
Not analysed yet 2 Jun 2023
CVE-2023-29550 CVE record

CVSS 8.8 High

Memory safety bugs present in Firefox 111 and Firefox ESR 102.9.
- Mozilla Firefox
- Mozilla Focus for Android
Not analysed yet 2 Jun 2023
CVE-2023-29549 CVE record

CVSS 6.5 Medium

Weak encryption in Mozilla Firefox for Android and others
- Mozilla Firefox for Android
- Mozilla Firefox
- Weak cryptography or TLS
Not analysed yet 2 Jun 2023
CVE-2023-29548 CVE record

CVSS 6.5 Medium

A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result.
- Mozilla Firefox
- Mozilla Focus for Android
Not analysed yet 2 Jun 2023
CVE-2023-29547 CVE record

CVSS 6.5 Medium

Mozilla Firefox for Android: When a secure cookie existed in the Firefox cookie jar an insecure cookie for the same…
- Mozilla Firefox for Android
- Mozilla Firefox
Not analysed yet 2 Jun 2023
CVE-2023-29544 CVE record

CVSS 6.5 Medium

Mozilla Firefox for Android: If multiple instances of resource exhaustion occurred at the incorrect time…
- Mozilla Firefox for Android
- Mozilla Firefox
Not analysed yet 2 Jun 2023
CVE-2023-29543 CVE record

CVSS 8.8 High

Improper output encoding in Mozilla Firefox for Android and others
- Mozilla Firefox for Android
- Mozilla Firefox
- CWE-116
Not analysed yet 2 Jun 2023
CVE-2023-29541 CVE record

CVSS 8.8 High

Improper output encoding in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Focus for Android
- CWE-116
Not analysed yet 2 Jun 2023
CVE-2023-29540 CVE record

Mozilla Firefox for Android: Using a redirect embedded into <code>sourceMappingUrls</code> could allow for navigation…
- Mozilla Firefox for Android
- Mozilla Firefox
Not analysed yet 2 Jun 2023
CVE-2023-29539 CVE record

Mozilla Firefox: When handling the filename directive in the Content-Disposition header…
- Mozilla Firefox
- Mozilla Focus for Android
Not analysed yet 2 Jun 2023
CVE-2023-29538 CVE record

Mozilla Firefox for Android: Under specific circumstances a WebExtension may have received a <code>jar:file:///</code>…
- Mozilla Firefox for Android
- Mozilla Firefox
Not analysed yet 2 Jun 2023
CVE-2023-29537 CVE record

Mozilla Firefox for Android: Multiple race conditions in the font initialization could have led to memory corruption…
- Mozilla Firefox for Android
- Mozilla Firefox
Not analysed yet 2 Jun 2023
CVE-2023-29536 CVE record

Mozilla Firefox: An attacker could cause the memory manager to incorrectly free a pointer that addresses…
- Mozilla Firefox
- Mozilla Focus for Android
Not analysed yet 2 Jun 2023
CVE-2023-29535 CVE record

Mozilla Firefox: Following a Garbage Collector compaction…
- Mozilla Firefox
- Mozilla Focus for Android
Not analysed yet 2 Jun 2023
CVE-2023-29533 CVE record

Mozilla Firefox: A website could have obscured the fullscreen notification by using a combination of…
- Mozilla Firefox
- Mozilla Focus for Android
Not analysed yet 2 Jun 2023
CVE-2023-28177 CVE record

CVSS 8.8 High

Out-of-bounds write in Mozilla Firefox
- Mozilla Firefox
- Memory corruption
Not analysed yet 2 Jun 2023
CVE-2023-28176 CVE record

CVSS 8.8 High

Out-of-bounds write in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 2 Jun 2023
CVE-2023-28164 CVE record

CVSS 6.5 Medium

Origin validation error in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-346
Not analysed yet 2 Jun 2023
CVE-2023-28163 CVE record

CVSS 6.5 Medium

Path traversal in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Path traversal
Not analysed yet 2 Jun 2023
CVE-2023-28162 CVE record

CVSS 8.8 High

Type confusion in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 2 Jun 2023
CVE-2023-28161 CVE record

CVSS 8.8 High

Mozilla Firefox: If temporary "one-time" permissions, such as the ability to use the Camera…
- Mozilla Firefox
- CWE-281
Not analysed yet 2 Jun 2023
CVE-2023-28160 CVE record

CVSS 6.5 Medium

Forced browsing in Mozilla Firefox
- Mozilla Firefox
- Broken access control
Not analysed yet 2 Jun 2023
CVE-2023-28159 CVE record

CVSS 4.3 Medium

Clickjacking in Mozilla Firefox
- Mozilla Firefox
- CWE-1021
Not analysed yet 2 Jun 2023
CVE-2023-25752 CVE record

Mozilla Firefox: When accessing throttled streams, the count of available bytes needed to be checked in…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 2 Jun 2023
CVE-2023-25751 CVE record

Mozilla Firefox: Sometimes, when invalidating JIT code while following an iterator…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 2 Jun 2023
CVE-2023-25750 CVE record

CVSS 4.3 Medium

Path traversal in Mozilla Firefox
- Mozilla Firefox
- Path traversal
Not analysed yet 2 Jun 2023
CVE-2023-25749 CVE record

CVSS 4.3 Medium

Incorrect authorization in Mozilla Firefox
- Mozilla Firefox
- Broken access control
Not analysed yet 2 Jun 2023
CVE-2023-25748 CVE record

CVSS 4.3 Medium

Clickjacking in Mozilla Firefox
- Mozilla Firefox
- CWE-1021
Not analysed yet 2 Jun 2023
CVE-2023-25745 CVE record

CVSS 8.8 High

Out-of-bounds write in Mozilla Firefox
- Mozilla Firefox
- Memory corruption
Not analysed yet 2 Jun 2023
CVE-2023-25744 CVE record

Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7.
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 2 Jun 2023
CVE-2023-25743 CVE record

Mozilla Firefox: A lack of in app notification for entering fullscreen mode could have lead to a malicious…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 2 Jun 2023
CVE-2023-25742 CVE record

Mozilla Firefox: When importing a SPKI RSA public key as ECDSA P-256…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 2 Jun 2023
CVE-2023-25741 CVE record

CVSS 6.5 Medium

Observable discrepancy in Mozilla Firefox
- Mozilla Firefox
- Information disclosure
Not analysed yet 2 Jun 2023
CVE-2023-25740 CVE record

CVSS 8.8 High

Insufficiently protected credentials in Mozilla Firefox
- Mozilla Firefox
- Hard-coded credentials
Not analysed yet 2 Jun 2023
CVE-2023-25739 CVE record

CVSS 8.8 High

Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 2 Jun 2023
CVE-2023-25738 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 2 Jun 2023
CVE-2023-25737 CVE record

CVSS 8.8 High

Incorrect type conversion in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-704
Not analysed yet 2 Jun 2023
CVE-2023-25735 CVE record

CVSS 8.8 High

Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 2 Jun 2023
CVE-2023-25734 CVE record

CVSS 8.1 High

Open redirect in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- Open redirect
Not analysed yet 2 Jun 2023
CVE-2023-25732 CVE record

CVSS 8.8 High

Out-of-bounds write in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 2 Jun 2023
CVE-2023-25731 CVE record

CVSS 8.8 High

Mozilla Firefox: Due to URL previews in the network panel of developer tools improperly storing URLs…
- Mozilla Firefox
- CWE-1284
Not analysed yet 2 Jun 2023
CVE-2023-25730 CVE record

CVSS 5.4 Medium

Clickjacking in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-1021
Not analysed yet 2 Jun 2023
CVE-2023-25729 CVE record

CVSS 8.8 High

Incorrect authorization in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- Broken access control
Not analysed yet 2 Jun 2023
CVE-2023-25728 CVE record

CVSS 6.5 Medium

Observable discrepancy in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- Information disclosure
Not analysed yet 2 Jun 2023
CVE-2023-23606 CVE record

CVSS 8.8 High

Memory safety bugs fixed in Firefox 109
- Mozilla Firefox
- Memory corruption
Not analysed yet 2 Jun 2023
CVE-2023-23605 CVE record

CVSS 8.8 High

Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 2 Jun 2023
CVE-2023-23604 CVE record

CVSS 6.5 Medium

Creation of duplicate SystemPrincipal from less secure contexts
- Mozilla Firefox
- Broken access control
Not analysed yet 2 Jun 2023