Advisories · Technology

Mozilla Firefox.

Every CVE that names Mozilla Firefox among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-5173 CVE record

Mozilla Firefox: In a non-standard configuration of Firefox…
- Mozilla Firefox
Not analysed yet 27 Sept 2023
CVE-2023-5172 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Use after free in Mozilla Firefox
- Mozilla Firefox
- Memory corruption
Not analysed yet 27 Sept 2023
CVE-2023-5170 CVE record

Mozilla Firefox: In canvas rendering, a compromised content process could have caused a surface to change…
- Mozilla Firefox
Not analysed yet 27 Sept 2023
CVE-2023-5176 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 27 Sept 2023
CVE-2023-5174 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 27 Sept 2023
CVE-2023-5171 CVE record

Mozilla Firefox: During Ion compilation, a Garbage Collection could have resulted in a use-after-free…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 27 Sept 2023
CVE-2023-5169 CVE record

Mozilla Firefox: A compromised content process could have provided malicious data in a `PathRecording`…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 27 Sept 2023
CVE-2023-5168 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 27 Sept 2023
CVE-2023-4585 CVE record

CVSS 8.8 High

Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 11 Sept 2023
CVE-2023-4584 CVE record

Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Sept 2023
CVE-2023-4583 CVE record

CVSS 7.5 High

Browsing Context potentially not cleared when closing Private Window
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-754
Not analysed yet 11 Sept 2023
CVE-2023-4582 CVE record

CVSS 8.8 High

Buffer Overflow in WebGL glGetProgramiv
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 11 Sept 2023
CVE-2023-4581 CVE record

XLL file extensions were downloadable without warnings
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Sept 2023
CVE-2023-4580 CVE record

Push notifications saved to disk unencrypted
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Sept 2023
CVE-2023-4579 CVE record

Persisted search terms were formatted as URLs
- Mozilla Firefox
Not analysed yet 11 Sept 2023
CVE-2023-4578 CVE record

Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Sept 2023
CVE-2023-4577 CVE record

Memory corruption in JIT UpdateRegExpStatics
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Sept 2023
CVE-2023-4576 CVE record

Integer Overflow in RecordedSourceSurfaceCreation
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Sept 2023
CVE-2023-4575 CVE record

Memory corruption in IPC FilePickerShownCallback
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Sept 2023
CVE-2023-4574 CVE record

Memory corruption in IPC ColorPickerShownCallback
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Sept 2023
CVE-2023-4573 CVE record

Memory corruption in IPC CanvasTranslator
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Sept 2023
CVE-2022-46884 CVE record

Mozilla Firefox: A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was…
- Mozilla Firefox
Not analysed yet 24 Aug 2023
CVE-2023-4058 CVE record

Memory safety bugs present in Firefox 115.
- Mozilla Firefox
Not analysed yet 1 Aug 2023
CVE-2023-4057 CVE record

Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0.
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 1 Aug 2023
CVE-2023-4056 CVE record

Mozilla Firefox: Memory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 1 Aug 2023
CVE-2023-4055 CVE record

Buffer overflow in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
Not analysed yet 1 Aug 2023
CVE-2023-4054 CVE record

Mozilla Firefox: When opening appref-ms files, Firefox did not warn the user that these files may contain…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 1 Aug 2023
CVE-2023-4053 CVE record

Full screen notification obscured by external program
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 1 Aug 2023
CVE-2023-4052 CVE record

The Firefox updater created a directory writable by non-privileged users.
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 1 Aug 2023
CVE-2023-4051 CVE record

Full screen notification obscured by file open dialog
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 1 Aug 2023
CVE-2023-4050 CVE record

In some cases, an untrusted input stream was copied to a stack buffer without checking its size.
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 1 Aug 2023
CVE-2023-4049 CVE record

Race conditions in reference counting code were found through code inspection.
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 1 Aug 2023
CVE-2023-4048 CVE record

Mozilla Firefox: An out-of-bounds read could have led to an exploitable crash when parsing HTML with…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 1 Aug 2023
CVE-2023-4047 CVE record

Cross-site request forgery in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Cross-site request forgery (CSRF)
Not analysed yet 1 Aug 2023
CVE-2023-4046 CVE record

Resource allocation without limits in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Denial of service
Not analysed yet 1 Aug 2023
CVE-2023-4045 CVE record

Mozilla Firefox: Offscreen Canvas did not properly track cross-origin tainting…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 1 Aug 2023
CVE-2023-3600 CVE record

Use-after-free in workers
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 12 Jul 2023
CVE-2023-37212 CVE record

Memory safety bugs present in Firefox 114.
- Mozilla Firefox
Not analysed yet 5 Jul 2023
CVE-2023-37210 CVE record

Origin validation error in Mozilla Firefox
- Mozilla Firefox
- CWE-346
Not analysed yet 5 Jul 2023
CVE-2023-37209 CVE record

Mozilla Firefox: A use-after-free condition existed in `NotifyOnHistoryReload` where a…
- Mozilla Firefox
Not analysed yet 5 Jul 2023
CVE-2023-37206 CVE record

Mozilla Firefox: Uploading files which contain symlinks may have allowed an attacker to trick a user into…
- Mozilla Firefox
Not analysed yet 5 Jul 2023
CVE-2023-37205 CVE record

The use of RTL Arabic characters in the address bar may have allowed for URL spoofing.
- Mozilla Firefox
Not analysed yet 5 Jul 2023
CVE-2023-37204 CVE record

Mozilla Firefox: A website could have obscured the fullscreen notification by using an option element by…
- Mozilla Firefox
Not analysed yet 5 Jul 2023
CVE-2023-37203 CVE record

CVSS 7.8 High

Mozilla Firefox: Insufficient validation in the Drag and Drop API in conjunction with social engineering…
- Mozilla Firefox
Not analysed yet 5 Jul 2023
CVE-2023-3482 CVE record

Mozilla Firefox: When Firefox is configured to block storage of all cookies…
- Mozilla Firefox
Not analysed yet 5 Jul 2023
CVE-2023-37211 CVE record

Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12.
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 5 Jul 2023
CVE-2023-37208 CVE record

Unrestricted file upload in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Unrestricted file upload
Not analysed yet 5 Jul 2023
CVE-2023-37207 CVE record

Mozilla Firefox: A website could have obscured the fullscreen notification by using a URL with a scheme…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 5 Jul 2023
CVE-2023-37202 CVE record

Mozilla Firefox: Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 5 Jul 2023
CVE-2023-37201 CVE record

Mozilla Firefox: An attacker could have triggered a use-after-free condition when creating a WebRTC…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 5 Jul 2023
CVE-2019-25136 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Mozilla Firefox: A compromised child process could have injected XBL Bindings into privileged CSS rules…
- Mozilla Firefox
Not analysed yet 19 Jun 2023
CVE-2023-34417 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Mozilla Firefox
- Mozilla Firefox
- Memory corruption
Not analysed yet 19 Jun 2023
CVE-2023-34415 CVE record

Mozilla Firefox: When choosing a site-isolated process for a document loaded from a data: URL that was the…
- Mozilla Firefox
Not analysed yet 19 Jun 2023
CVE-2023-25736 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

An invalid downcast from `nsHTMLDocument` to `nsIContent` could have lead to undefined behavior.
- Mozilla Firefox
Not analysed yet 19 Jun 2023
CVE-2023-25733 CVE record

CVSS 7.5 High

Unchecked return value in Mozilla Firefox
- Mozilla Firefox
- CWE-252
Not analysed yet 19 Jun 2023
CVE-2023-34416 CVE record

Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12.
- Mozilla Firefox ESR
- Mozilla Firefox
Not analysed yet 19 Jun 2023
CVE-2023-34414 CVE record

Mozilla Firefox ESR: The error page for sites with invalid TLS certificates was missing the activation-delay…
- Mozilla Firefox ESR
- Mozilla Firefox
Not analysed yet 19 Jun 2023
CVE-2023-29545 CVE record

CVSS 6.5 Medium

Mozilla Firefox: Similar to CVE-2023-28163, this time when choosing 'Save Link As'…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 19 Jun 2023
CVE-2023-29542 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Mozilla Firefox: A newline in a filename could have been used to bypass the file extension security…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 19 Jun 2023
CVE-2023-29532 CVE record

CVSS 5.5 Medium

Mozilla Firefox: A local attacker can trick the Mozilla Maintenance Service into applying an unsigned…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 19 Jun 2023