Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Mozilla
Firefox

Mozilla Firefox vulnerabilities

Known exploitedIn KEVPublic exploitFix available

mozilla firefox, canonical ubuntu linux, opensuse +4 more +6 moreMozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on...CVE-2014-14894.3 MediumFebruary 6, 2014
mozilla firefox, seamonkey, canonical ubuntu linux +5 more +7 moreThe Web workers implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allows...CVE-2014-148810.0 HighFebruary 6, 2014
mozilla firefox, seamonkey, thunderbird +14 more +16 moreThe Web workers implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3,...CVE-2014-14877.5 HighFebruary 6, 2014
mozilla firefox, seamonkey, thunderbird +13 more +15 moreUse-after-free vulnerability in the imgRequestProxy function in Mozilla Firefox before 27.0,...CVE-2014-14869.8 CriticalFebruary 6, 2014
mozilla firefox, seamonkey, canonical ubuntu linux +5 more +7 moreThe Content Security Policy (CSP) implementation in Mozilla Firefox before 27.0 and SeaMonkey...CVE-2014-14857.5 HighFebruary 6, 2014
mozilla firefox, opensuse, oracle solaris +3 more +5 moreMozilla Firefox before 27.0 on Android 4.2 and earlier creates system-log entries containing...CVE-2014-14845.0 MediumFebruary 6, 2014
mozilla firefox, seamonkey, canonical ubuntu linux +5 more +7 moreMozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to bypass the Same...CVE-2014-14835.0 MediumFebruary 6, 2014
mozilla firefox, seamonkey, thunderbird +14 more +16 moreRasterImage.cpp in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before...CVE-2014-14828.8 HighFebruary 6, 2014
mozilla firefox, seamonkey, thunderbird +14 more +16 moreMozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey...CVE-2014-14817.5 HighFebruary 6, 2014
mozilla firefox, seamonkey, canonical ubuntu linux +5 more +7 moreThe file-download implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 does...CVE-2014-14804.3 MediumFebruary 6, 2014
mozilla firefox, seamonkey, thunderbird +14 more +16 moreThe System Only Wrapper (SOW) implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x...CVE-2014-14797.5 HighFebruary 6, 2014
mozilla firefox, seamonkey, canonical ubuntu linux +2 more +4 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0 and...CVE-2014-147810.0 HighFebruary 6, 2014
mozilla firefox, seamonkey, thunderbird +14 more +16 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0,...CVE-2014-14779.8 CriticalFebruary 6, 2014
mozilla firefox, seamonkey, thunderbird +6 more +8 moreMozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey...CVE-2013-66735.9 MediumDecember 11, 2013
mozilla firefox, seamonkey, canonical ubuntu linux +6 more +8 moreMozilla Firefox before 26.0 and SeaMonkey before 2.23 on Linux allow user-assisted remote...CVE-2013-66724.3 MediumDecember 11, 2013
mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before...CVE-2013-6671EPSS 11.1%9.8 CriticalDecember 11, 2013
mozilla firefox, seamonkey, canonical ubuntu linux +6 more +8 moreMultiple integer overflows in the binary-search implementation in SpiderMonkey in Mozilla Firefox...CVE-2013-56197.5 HighDecember 11, 2013
mozilla firefox, seamonkey, thunderbird +13 more +15 moreUse-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user...CVE-2013-5618EPSS 10.4%9.8 CriticalDecember 11, 2013
mozilla firefox, seamonkey, thunderbird +13 more +15 moreUse-after-free vulnerability in the nsEventListenerManager::HandleEventSubType function in...CVE-2013-56169.8 CriticalDecember 11, 2013
mozilla firefox, seamonkey, thunderbird +6 more +8 moreThe JavaScript implementation in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2,...CVE-2013-56159.8 CriticalDecember 11, 2013
mozilla firefox, seamonkey, canonical ubuntu linux +13 more +15 moreMozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox...CVE-2013-56144.3 MediumDecember 11, 2013
mozilla firefox, seamonkey, thunderbird +13 more +15 moreUse-after-free vulnerability in the PresShell::DispatchSynthMouseMove function in Mozilla Firefox...CVE-2013-56139.8 CriticalDecember 11, 2013
mozilla firefox, seamonkey, canonical ubuntu linux +13 more +15 moreCross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23...CVE-2013-56124.3 MediumDecember 11, 2013
mozilla firefox, canonical ubuntu linux, fedoraproject fedora +5 more +7 moreMozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger,...CVE-2013-56115.8 MediumDecember 11, 2013
mozilla firefox, seamonkey, canonical ubuntu linux +6 more +8 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0 and...CVE-2013-561010.0 HighDecember 11, 2013
mozilla firefox, seamonkey, thunderbird +13 more +15 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0,...CVE-2013-56099.8 CriticalDecember 11, 2013
mozilla firefox, netscape portable runtime, seamonkey +2 moreInteger overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR)...CVE-2013-5607Fix available7.5 HighNovember 20, 2013
google chrome, libjpeg-turbo, artifex gpl ghostscript +8 more +10 moreThe get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used...CVE-2013-6629Fix available5.0 MediumNovember 13, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreThe txXPathNodeUtils::getBaseURI function in the XSLT processor in Mozilla Firefox before 25.0,...CVE-2013-56049.3 HighOctober 30, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreUse-after-free vulnerability in the nsContentUtils::ContentIsHostIncludingDescendantOf function...CVE-2013-560310.0 HighOctober 30, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreThe Worker::SetEventListener function in the Web workers implementation in Mozilla Firefox before...CVE-2013-560210.0 HighOctober 30, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreUse-after-free vulnerability in the nsEventListenerManager::SetEventHandler function in Mozilla...CVE-2013-560110.0 HighOctober 30, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreUse-after-free vulnerability in the nsIOService::NewChannelFromURIWithProxyFlags function in...CVE-2013-560010.0 HighOctober 30, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreUse-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell (aka...CVE-2013-559910.0 HighOctober 30, 2013
mozilla firefoxPDF.js in Mozilla Firefox before 25.0 and Firefox ESR 24.x before 24.1 does not properly handle...CVE-2013-55988.3 HighOctober 30, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreUse-after-free vulnerability in the nsDocLoader::doStopDocumentLoad function in Mozilla Firefox...CVE-2013-559710.0 HighOctober 30, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreThe cycle collection (CC) implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before...CVE-2013-55966.8 MediumOctober 30, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreThe JavaScript engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x...CVE-2013-55954.3 MediumOctober 30, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreThe SELECT element implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1,...CVE-2013-55934.3 MediumOctober 30, 2013
mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 25.0 allow...CVE-2013-559210.0 HighOctober 30, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreUnspecified vulnerability in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 24.x...CVE-2013-559110.0 HighOctober 30, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 25.0,...CVE-2013-559010.0 HighOctober 30, 2013
mozilla firefox, firefox esr, thunderbird +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0,...CVE-2015-0836Fix available7.5 HighSeptember 19, 2013
mozilla firefox, firefox esr, thunderbird +2 more +4 moreUse-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function...CVE-2015-0831Fix available6.8 MediumSeptember 19, 2013
mozilla firefox, firefox esr, thunderbird +2 moreHeap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36.0,...CVE-2015-0827Fix available4.3 MediumSeptember 19, 2013
mozilla firefox, firefox esr, thunderbird +2 moreThe Form Autocompletion feature in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and...CVE-2015-0822Fix available4.3 MediumSeptember 19, 2013
mozilla firefox, seamonkey, thunderbird +2 moreUse-after-free vulnerability in the JS_GetGlobalForScopeChain function in Mozilla Firefox before...CVE-2013-17389.3 HighSeptember 18, 2013
mozilla firefoxUntrusted search path vulnerability in the GL tracing functionality in Mozilla Firefox before 24...CVE-2013-17316.8 MediumSeptember 18, 2013
mozilla firefoxThe WebGL implementation in Mozilla Firefox before 24.0, when NVIDIA graphics drivers are used on...CVE-2013-17292.6 LowSeptember 18, 2013
mozilla firefox, seamonkey, thunderbird +2 moreThe IonMonkey JavaScript engine in Mozilla Firefox before 24.0, Thunderbird before 24.0, and...CVE-2013-17284.3 MediumSeptember 18, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open