Skip to contentMozilla Firefox vulnerabilities
- mozilla firefox, firefox esr, network security services +1 more +3 moreUse-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla...CVE-2014-1544Fix available10.0 High
- mozilla firefoxMultiple heap-based buffer overflows in the navigator.getGamepads function in the Gamepad API in...CVE-2014-15437.5 High
- mozilla firefox, opensuse, oracle solaris +2 moreBuffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0...CVE-2014-1542Fix available6.8 Medium
- mozilla firefoxUse-after-free vulnerability in the nsEventListenerManager::CompileEventHandlerInternal function...CVE-2014-1540Fix available9.3 High
- mozilla firefox, thunderbird +1 moreMozilla Firefox before 30.0 and Thunderbird through 24.6 on OS X do not ensure visibility of the...CVE-2014-15395.0 Medium
- mozilla firefoxUse-after-free vulnerability in the mozilla::dom::workers::WorkerPrivateParent function in...CVE-2014-1537Fix available10.0 High
- mozilla firefoxThe PropertyProvider::FindJustificationRange function in Mozilla Firefox before 30.0 allows...CVE-2014-1536Fix available10.0 High
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0 allow...CVE-2014-1534Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +2 moreUse-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation...CVE-2014-1541Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +2 moreUse-after-free vulnerability in the nsTextEditRules::CreateMozBR function in Mozilla Firefox...CVE-2014-1538Fix available10.0 High
- mozilla firefox, firefox esr +1 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0,...CVE-2014-1533Fix available10.0 High
- mozilla firefox, fedoraproject fedora, oracle solaris +2 moreMozilla Firefox before 29.0 on Android allows remote attackers to spoof the address bar via...CVE-2014-15275.0 Medium
- mozilla firefox, fedoraproject fedora +1 moremaintenservice_installer.exe in the Maintenance Service Installer in Mozilla Firefox before 29.0...CVE-2014-15206.9 Medium
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreUse-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul...CVE-2014-1532Fix available9.8 Critical
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreUse-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function in...CVE-2014-1531Fix available8.8 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5,...CVE-2014-1530Fix available6.1 Medium
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe Web Notification API in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5,...CVE-2014-1529Fix available8.8 High
- mozilla firefox, seamonkey, canonical ubuntu linux +3 more +5 moreThe sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and...CVE-2014-1528Fix available10.0 High
- mozilla firefox, seamonkey, canonical ubuntu linux +2 more +4 moreThe XrayWrapper implementation in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows...CVE-2014-1526Fix available6.8 Medium
- mozilla firefox, seamonkey, canonical ubuntu linux +2 more +4 moreThe mozilla::dom::TextTrack::AddCue function in Mozilla Firefox before 29.0 and SeaMonkey before...CVE-2014-1525Fix available9.3 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24...CVE-2014-1524Fix available9.8 Critical
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreHeap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR...CVE-2014-1523Fix available6.5 Medium
- mozilla firefox, seamonkey, canonical ubuntu linux +2 more +4 moreThe mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in...CVE-2014-1522Fix available9.3 High
- mozilla firefox, seamonkey, canonical ubuntu linux +2 more +4 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0 and...CVE-2014-1519Fix available9.3 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0,...CVE-2014-1518Fix available8.8 High
- mozilla firefoxThe saltProfileName function in base/GeckoProfileDirectories.java in Mozilla Firefox through 28.0...CVE-2014-15165.0 Medium
- mozilla firefoxMozilla Firefox before 28.0.1 on Android processes a file: URL by copying a local file onto the...CVE-2014-15151.9 Low
- mozilla firefoxos, oracle solaris +1 moreDirectory traversal vulnerability in the DeviceStorage API in Mozilla FirefoxOS before 1.2.2...CVE-2014-15079.3 High
- mozilla firefox, oracle solaris +1 moreDirectory traversal vulnerability in Android Crash Reporter in Mozilla Firefox before 28.0 on...CVE-2014-15066.4 Medium
- mozilla firefox, seamonkey, opensuse +4 more +6 moreThe session-restore feature in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not...CVE-2014-15042.6 Low
- mozilla firefox, seamonkey, opensuse +4 more +6 moreThe (1) WebGL.compressedTexImage2D and (2) WebGL.compressedTexSubImage2D functions in Mozilla...CVE-2014-15026.8 Medium
- mozilla firefox, oracle solaris, suse linux enterprise desktop +2 more +4 moreMozilla Firefox before 28.0 on Android allows remote attackers to bypass the Same Origin Policy...CVE-2014-15015.8 Medium
- mozilla firefox, seamonkey, opensuse +4 more +6 moreMozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of...CVE-2014-15005.0 Medium
- mozilla firefox, seamonkey, opensuse +4 more +6 moreMozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain...CVE-2014-14994.3 Medium
- mozilla firefox, seamonkey, opensuse +4 more +6 moreThe crypto.generateCRMFRequest method in Mozilla Firefox before 28.0 and SeaMonkey before 2.25...CVE-2014-14985.0 Medium
- mozilla firefox, seamonkey, thunderbird +3 more +5 moreMozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey...CVE-2014-14965.5 Medium
- mozilla firefox, seamonkey, opensuse +4 more +6 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and...CVE-2014-14949.3 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 morevmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird...CVE-2014-15149.8 Critical
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreTypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird...CVE-2014-15138.8 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreUse-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox...CVE-2014-1512EPSS 29.1%10.0 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreMozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey...CVE-2014-1511Public exploitEPSS 83.5%9.8 Critical
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4,...CVE-2014-1510Public exploitEPSS 82.2%9.8 Critical
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreBuffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo, as used in Mozilla...CVE-2014-15098.8 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe libxul.so!gfxContext::Polygon function in Mozilla Firefox before 28.0, Firefox ESR 24.x...CVE-2014-15089.1 Critical
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe SVG filter implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4,...CVE-2014-15057.5 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe mozilla::WaveReader::DecodeAudioData function in Mozilla Firefox before 28.0, Firefox ESR 24...CVE-2014-14978.8 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0,...CVE-2014-14939.8 Critical
- mozilla firefoxMozilla Firefox through 27 sends HTTP Cookie headers without first validating that they have the...CVE-2013-6167Public exploit6.8 Medium
- mozilla firefox, network security services, seamonkey +10 more +12 moreMozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0,...CVE-2014-1491Fix available4.3 Medium
- mozilla firefox, network security services, seamonkey +10 more +12 moreRace condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in...CVE-2014-1490Fix available9.3 High
- Show moreLoading…