CVE-2014-1574

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 33.0,...

7.5 HighFix available

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Exploit likelihood

3.97%Down 4.3 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2014-1574
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2014-1574
Updated: 2026-11-02

EUVDEUVD-2014-1650 No score

Record: EUVD-2014-1650
Updated: 2026-11-03

GitHub AdvisoriesGHSA-5q9j-23jq-wfr5 No score

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 33.0,...

Record: GHSA-5q9j-23jq-wfr5
Updated: 2026-11-02

OSVMGASA-2014-0419 No score

Updated iceape package fixes security vulnerabilities

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. (CVE-2014-1533)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. (CVE-2014-1534)

The PropertyProvider::FindJustificationRange function in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors. (CVE-2014-1536)

Use-after-free vulnerability in the mozilla::dom::workers::WorkerPrivateParent function in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. (CVE-2014-1537)

Use-after-free vulnerability in the nsTextEditRules::CreateMozBR function in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. (CVE-2014-1538)

Use-after-free vulnerability in the nsEventListenerManager::CompileEventHandlerInternal function in the Event Listener Manager in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted web content. (CVE-2014-1540)

Use-after-free vulnerability in the RefreshDriverTimer::Tick*Driver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted web content. (CVE-2014-1541)

Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate. (CVE-2014-1542)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. (CVE-2014-1547)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. (CVE-2014-1548)

The mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox before 31.0 and Thunderbird before 31.0 does not properly allocate Web Audio buffer memory, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via crafted audio content that is improperly handled during playback buffering. (CVE-2014-1549)

Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging incorrect Web Audio control-message ordering. (CVE-2014-1550)

Mozilla Firefox before 31.0 does not properly restrict use of drag-and-drop events to spoof customization events, which allows remote attackers to alter the placement of UI icons via crafted JavaScript code that is encountered during (1) page, (2) panel, or (3) toolbar customization. (CVE-2014-1561)

Use-after-free vulnerability in the nsDocLoader::OnProgress function in…

Record: MGASA-2014-0419
Updated: 2026-11-02

OSVMGASA-2014-0421 No score

Updated firefox and thunderbird packages fix security vulnerabilities

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox or Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running it (CVE-2014-1574, CVE-2014-1578, CVE-2014-1581, CVE-2014-1576, CVE-2014-1577).

A flaw was found in the Alarm API in Firefox, which allows applications to schedule actions to be run in the future. A malicious web application could use this flaw to bypass cross-origin restrictions (CVE-2014-1583).

This update provides Firefox and Thunderbird 31.2, which fixes these issues and other bugs, and also provides several new features, including WebRTC support. The thunderbird-lightning package has also been updated to version 3.3 which is compatible with the new Thunderbird version.

Also, Enigmail (part of the Thunderbird package) has been updated to version 1.7.2 which contains several bugfixes including mail with only Bcc recipients being sent in plain text unexpectedly (CVE-2014-5369).

Record: MGASA-2014-0421
Updated: 2026-11-02

Show 7 moreShow less

OSVopenSUSE-SU-2024:10071-1 No score

MozillaFirefox-50.1.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-50.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10071-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10218-1 No score

seamonkey-2.40-6.1 on GA media

These are all security issues fixed in the seamonkey-2.40-6.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10218-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10230-1 No score

MozillaThunderbird-45.5.1-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-45.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10230-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:14572-1 No score

firefox-esr-128.5.1-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:14572-1
Updated: 2026-11-02

OSVUBUNTU-CVE-2014-1574 No score

Record: UBUNTU-CVE-2014-1574
Updated: 2026-11-02

OSVUSN-2372-1 No score

firefox vulnerabilities

Bobby Holley, Christian Holler, David Bolter, Byron Campen, Jon Coppeard, Carsten Book, Martijn Wargers, Shih-Chiang Chien, Terrence Cole and Jeff Walden discovered multiple memory safety issues in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2014-1574, CVE-2014-1575)

Atte Kettunen discovered a buffer overflow during CSS manipulation. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2014-1576)

Holger Fuhrmannek discovered an out-of-bounds read with Web Audio. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to steal sensitive information. (CVE-2014-1577)

Abhishek Arya discovered an out-of-bounds write when buffering WebM video in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2014-1578)

Michal Zalewski discovered that memory may not be correctly initialized when rendering a malformed GIF in to a canvas in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to steal sensitive information. (CVE-2014-1580)

A use-after-free was discovered during text layout in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2014-1581)

Patrick McManus and David Keeler discovered 2 issues that could result in certificate pinning being bypassed in some circumstances. An attacker with a fraudulent certificate could potentially exploit this conduct a machine-in-the-middle attack. (CVE-2014-1582, CVE-2014-1584)

Eric Shepherd and Jan-Ivar Bruaroey discovered issues with video sharing via WebRTC in iframes, where video continues to be shared after being stopped and navigating to a new site doesn't turn off the camera. An attacker could potentially exploit this to access the camera without the user being aware. (CVE-2014-1585, CVE-2014-1586)

Boris Zbarsky discovered that webapps could use the Alarm API to read the values of cross-origin references. If a user were tricked in to installing a specially crafter webapp, an attacker could potentially exploit this to bypass same-origin restrictions. (CVE-2014-1583)

Record: USN-2372-1
Updated: 2026-11-02

OSVUSN-2373-1 No score

thunderbird vulnerabilities

Bobby Holley, Christian Holler, David Bolter, Byron Campen and Jon Coppeard discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Thunderbird. (CVE-2014-1574)

Atte Kettunen discovered a buffer overflow during CSS manipulation. If a user were tricked in to opening a specially crafted message, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the privileges of the user invoking Thunderbird. (CVE-2014-1576)

Holger Fuhrmannek discovered an out-of-bounds read with Web Audio. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker could potentially exploit this to steal sensitive information. (CVE-2014-1577)

Abhishek Arya discovered an out-of-bounds write when buffering WebM video in some circumstances. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the privileges of the user invoking Thunderbird. (CVE-2014-1578)

A use-after-free was discovered during text layout in some circumstances. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the privileges of the user invoking Thunderbird. (CVE-2014-1581)

Record: USN-2373-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`iceweasel` Debian:7 From an advisory covering 8 CVEs	before 31.2.0esr-2~deb7u1, plus listed versions 10.0.12esr-110.0.12esr-1+alpha10.0.12esr-1+nmu110.0.12esr-1+nmu1+alpha11.0-1 Show 45 moreShow less 11.0-211.0-311.0-411.0~b1-111.0~b1-211.0~b2-111.0~b3-111.0~b4-111.0~b5-111.0~b6-112.0-112.0-212.0-312.0-412.0-512.0-612.0-713.0-113.0.1-113.0.1-214.0.1-114.0.1-215.0-115.0.1-116.0-116.0.1-116.0.2-117.0-117.0.1-117.0.1-217.0.10esr-1~deb7u117.0.5esr-117.0.6esr-117.0.6esr-1~deb7u117.0.7esr-117.0.7esr-1~deb7u117.0.7esr-217.0.8esr-117.0.8esr-1~deb7u117.0.8esr-217.0.8esr-2~deb7u117.0.9esr-1~deb7u118.0-118.0.1-118.0.2-1	31.2.0esr-2~deb7u1
`icedove` Debian:7 From an advisory covering 7 CVEs	before 31.2.0-1~deb7u1, plus listed versions 10.0.12-111.0-116.0.2-117.0-117.0.10-1 Show 38 moreShow less 17.0.10-1+powerpcspe117.0.10-1+powerpcspe217.0.10-1~deb7u117.0.2-117.0.4-117.0.5-117.0.5-217.0.7-117.0.7-1~deb7u117.0.8-117.0.8-1~deb7u117.0.9-117.0.9-1~deb7u117.0.9-224.0-124.0~b3-224.1.1-124.2.0-124.2.0-1+alpha24.2.0-1+powerpcspe124.3.0-124.3.0-224.4.0-124.4.0-1~deb7u124.5.0-124.5.0-1~deb7u124.5.0-224.6.0-1~deb7u124.7.0-1~deb7u124.8.0-1~deb7u124.8.1-1~deb7u130.0~b1-131.0-131.0-231.0-331.0~b1-231.0~b2-131.1.2-1	31.2.0-1~deb7u1
`iceape` Mageia:3 From an advisory covering 39 CVEs	before 2.30-1.mga3	2.30-1.mga3
`iceape` Mageia:4 From an advisory covering 39 CVEs	before 2.30-1.mga4	2.30-1.mga4
`libvpx` Mageia:3 From an advisory covering 7 CVEs	before 1.3.0-1.mga3	1.3.0-1.mga3
`sqlite3` Mageia:3 From an advisory covering 7 CVEs	before 3.8.6-1.mga3	3.8.6-1.mga3
`nss` Mageia:3 From an advisory covering 7 CVEs	before 3.17.2-1.mga3	3.17.2-1.mga3
`firefox` Mageia:3 From an advisory covering 7 CVEs	before 31.2.0-1.mga3	31.2.0-1.mga3
`firefox-l10n` Mageia:3 From an advisory covering 7 CVEs	before 31.2.0-1.mga3	31.2.0-1.mga3
`thunderbird` Mageia:3 From an advisory covering 7 CVEs	before 31.2.0-1.mga3	31.2.0-1.mga3

Show 56 moreShow less

Affected packages
Package	Affected	Fixed
`thunderbird-l10n` Mageia:3 From an advisory covering 7 CVEs	before 31.2.0-1.mga3	31.2.0-1.mga3
`thunderbird-lightning` Mageia:3 From an advisory covering 7 CVEs	before 3.3-1.mga3	3.3-1.mga3
`libpng` Mageia:4 From an advisory covering 7 CVEs	before 1.6.13-1.mga4	1.6.13-1.mga4
`libvpx` Mageia:4 From an advisory covering 7 CVEs	before 1.3.0-1.mga4	1.3.0-1.mga4
`sqlite3` Mageia:4 From an advisory covering 7 CVEs	before 3.8.6-1.mga4	3.8.6-1.mga4
`nss` Mageia:4 From an advisory covering 7 CVEs	before 3.17.2-1.mga4	3.17.2-1.mga4
`firefox` Mageia:4 From an advisory covering 7 CVEs	before 31.2.0-1.mga4	31.2.0-1.mga4
`firefox-l10n` Mageia:4 From an advisory covering 7 CVEs	before 31.2.0-1.mga4	31.2.0-1.mga4
`thunderbird` Mageia:4 From an advisory covering 7 CVEs	before 31.2.0-1.mga4	31.2.0-1.mga4
`thunderbird-l10n` Mageia:4 From an advisory covering 7 CVEs	before 31.2.0-1.mga4	31.2.0-1.mga4
`thunderbird-lightning` Mageia:4 From an advisory covering 7 CVEs	before 3.3-1.mga4	3.3-1.mga4
`firefox` Red Hat:enterprise_linux:5::client From an advisory covering 6 CVEs	before 0:31.2.0-3.el5_11	0:31.2.0-3.el5_11
`firefox-debuginfo` Red Hat:enterprise_linux:5::client From an advisory covering 6 CVEs	before 0:31.2.0-3.el5_11	0:31.2.0-3.el5_11
`firefox` Red Hat:enterprise_linux:5::server From an advisory covering 6 CVEs	before 0:31.2.0-3.el5_11	0:31.2.0-3.el5_11
`firefox-debuginfo` Red Hat:enterprise_linux:5::server From an advisory covering 6 CVEs	before 0:31.2.0-3.el5_11	0:31.2.0-3.el5_11
`firefox` Red Hat:enterprise_linux:6::client From an advisory covering 6 CVEs	before 0:31.2.0-3.el6_6	0:31.2.0-3.el6_6
`firefox-debuginfo` Red Hat:enterprise_linux:6::client From an advisory covering 6 CVEs	before 0:31.2.0-3.el6_6	0:31.2.0-3.el6_6
`firefox` Red Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs	before 0:31.2.0-3.el6_6	0:31.2.0-3.el6_6
`firefox-debuginfo` Red Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs	before 0:31.2.0-3.el6_6	0:31.2.0-3.el6_6
`firefox` Red Hat:enterprise_linux:6::server From an advisory covering 6 CVEs	before 0:31.2.0-3.el6_6	0:31.2.0-3.el6_6
`firefox-debuginfo` Red Hat:enterprise_linux:6::server From an advisory covering 6 CVEs	before 0:31.2.0-3.el6_6	0:31.2.0-3.el6_6
`firefox` Red Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs	before 0:31.2.0-3.el6_6	0:31.2.0-3.el6_6
`firefox-debuginfo` Red Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs	before 0:31.2.0-3.el6_6	0:31.2.0-3.el6_6
`firefox` Red Hat:enterprise_linux:7::client From an advisory covering 6 CVEs	before 0:31.2.0-3.el7_0	0:31.2.0-3.el7_0
`firefox-debuginfo` Red Hat:enterprise_linux:7::client From an advisory covering 6 CVEs	before 0:31.2.0-3.el7_0	0:31.2.0-3.el7_0
`xulrunner` Red Hat:enterprise_linux:7::client From an advisory covering 6 CVEs	before 0:31.2.0-1.el7_0	0:31.2.0-1.el7_0
`xulrunner-debuginfo` Red Hat:enterprise_linux:7::client From an advisory covering 6 CVEs	before 0:31.2.0-1.el7_0	0:31.2.0-1.el7_0
`xulrunner-devel` Red Hat:enterprise_linux:7::client From an advisory covering 6 CVEs	before 0:31.2.0-1.el7_0	0:31.2.0-1.el7_0
`xulrunner` Red Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs	before 0:31.2.0-1.el7_0	0:31.2.0-1.el7_0
`xulrunner-debuginfo` Red Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs	before 0:31.2.0-1.el7_0	0:31.2.0-1.el7_0
`xulrunner-devel` Red Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs	before 0:31.2.0-1.el7_0	0:31.2.0-1.el7_0
`firefox` Red Hat:enterprise_linux:7::server From an advisory covering 6 CVEs	before 0:31.2.0-3.el7_0	0:31.2.0-3.el7_0
`firefox-debuginfo` Red Hat:enterprise_linux:7::server From an advisory covering 6 CVEs	before 0:31.2.0-3.el7_0	0:31.2.0-3.el7_0
`xulrunner` Red Hat:enterprise_linux:7::server From an advisory covering 6 CVEs	before 0:31.2.0-1.el7_0	0:31.2.0-1.el7_0
`xulrunner-debuginfo` Red Hat:enterprise_linux:7::server From an advisory covering 6 CVEs	before 0:31.2.0-1.el7_0	0:31.2.0-1.el7_0
`xulrunner-devel` Red Hat:enterprise_linux:7::server From an advisory covering 6 CVEs	before 0:31.2.0-1.el7_0	0:31.2.0-1.el7_0
`firefox` Red Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs	before 0:31.2.0-3.el7_0	0:31.2.0-3.el7_0
`firefox-debuginfo` Red Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs	before 0:31.2.0-3.el7_0	0:31.2.0-3.el7_0
`xulrunner` Red Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs	before 0:31.2.0-1.el7_0	0:31.2.0-1.el7_0
`xulrunner-debuginfo` Red Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs	before 0:31.2.0-1.el7_0	0:31.2.0-1.el7_0
`xulrunner-devel` Red Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs	before 0:31.2.0-1.el7_0	0:31.2.0-1.el7_0
`thunderbird` Red Hat:enterprise_linux:5::client From an advisory covering 4 CVEs	before 0:31.2.0-2.el5_11	0:31.2.0-2.el5_11
`thunderbird-debuginfo` Red Hat:enterprise_linux:5::client From an advisory covering 4 CVEs	before 0:31.2.0-2.el5_11	0:31.2.0-2.el5_11
`thunderbird` Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs	before 0:31.2.0-3.el6_6	0:31.2.0-3.el6_6
`thunderbird-debuginfo` Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs	before 0:31.2.0-3.el6_6	0:31.2.0-3.el6_6
`thunderbird` Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs	before 0:31.2.0-3.el6_6	0:31.2.0-3.el6_6
`thunderbird-debuginfo` Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs	before 0:31.2.0-3.el6_6	0:31.2.0-3.el6_6
`thunderbird` Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs	before 0:31.2.0-3.el6_6	0:31.2.0-3.el6_6
`thunderbird-debuginfo` Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs	before 0:31.2.0-3.el6_6	0:31.2.0-3.el6_6
`firefox` Ubuntu:14.04:LTS	before 33.0+build2-0ubuntu0.14.04.1, plus listed versions 24.0+build1-0ubuntu125.0+build3-0ubuntu0.13.10.128.0~b2+build1-0ubuntu228.0+build1-0ubuntu128.0+build2-0ubuntu1 Show 6 moreShow less 28.0+build2-0ubuntu229.0+build1-0ubuntu0.14.04.230.0+build1-0ubuntu0.14.04.331.0+build1-0ubuntu0.14.04.132.0+build1-0ubuntu0.14.04.132.0.3+build1-0ubuntu0.14.04.1	33.0+build2-0ubuntu0.14.04.1
`thunderbird` Ubuntu:14.04:LTS	before 1:31.2.0+build2-0ubuntu0.14.04.1, plus listed versions 1:24.0+build1-0ubuntu11:24.0+build1-0ubuntu21:24.1.1+build1-0ubuntu0.13.10.11:24.1.1+build1-0ubuntu11:24.2.0+build1-0ubuntu1 Show 6 moreShow less 1:24.4.0+build1-0ubuntu11:24.5.0+build1-0ubuntu0.14.04.11:24.6.0+build1-0ubuntu0.14.04.11:31.0+build1-0ubuntu0.14.04.11:31.1.1+build1-0ubuntu0.14.04.11:31.1.2+build1-0ubuntu0.14.04.1	1:31.2.0+build2-0ubuntu0.14.04.1
`firefox` Ubuntu:14.04:LTS From an advisory covering 12 CVEs	before 33.0+build2-0ubuntu0.14.04.1, plus listed versions 24.0+build1-0ubuntu125.0+build3-0ubuntu0.13.10.128.0~b2+build1-0ubuntu228.0+build1-0ubuntu128.0+build2-0ubuntu1 Show 6 moreShow less 28.0+build2-0ubuntu229.0+build1-0ubuntu0.14.04.230.0+build1-0ubuntu0.14.04.331.0+build1-0ubuntu0.14.04.132.0+build1-0ubuntu0.14.04.132.0.3+build1-0ubuntu0.14.04.1	33.0+build2-0ubuntu0.14.04.1
`thunderbird` Ubuntu:14.04:LTS From an advisory covering 7 CVEs	before 1:31.2.0+build2-0ubuntu0.14.04.1, plus listed versions 1:24.0+build1-0ubuntu11:24.0+build1-0ubuntu21:24.1.1+build1-0ubuntu0.13.10.11:24.1.1+build1-0ubuntu11:24.2.0+build1-0ubuntu1 Show 6 moreShow less 1:24.4.0+build1-0ubuntu11:24.5.0+build1-0ubuntu0.14.04.11:24.6.0+build1-0ubuntu0.14.04.11:31.0+build1-0ubuntu0.14.04.11:31.1.1+build1-0ubuntu0.14.04.11:31.1.2+build1-0ubuntu0.14.04.1	1:31.2.0+build2-0ubuntu0.14.04.1
`MozillaFirefox` openSUSE:Tumbleweed From an advisory covering 899 CVEs	before 50.1.0-1.1	50.1.0-1.1
`MozillaThunderbird` openSUSE:Tumbleweed From an advisory covering 560 CVEs	before 45.5.1-1.1	45.5.1-1.1
`firefox-esr` openSUSE:Tumbleweed From an advisory covering 1860 CVEs	before 128.5.1-1.1	128.5.1-1.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-1574 is a high vulnerability (CVSS 7.5) in Mozilla Firefox, published October 14, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.97%, the 90th percentile. Fixed in firefox 33.0+build2-0ubuntu0.14.04.1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 57 versions, 2,008 references and the rest of 1 source description. The JSON record has them.