Skip to contentMozilla Firefox vulnerabilities
- mozilla firefox, seamonkey +1 moreMozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly initialize memory for BMP...CVE-2014-8637Fix available5.0 Medium
- mozilla firefox, seamonkey +1 moreThe XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not...CVE-2014-8636Public exploitFix availableEPSS 63.9%7.5 High
- mozilla firefox, seamonkey +1 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0 and...CVE-2014-8635Fix available7.5 High
- mozilla firefox, firefox esr, seamonkey +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0,...CVE-2014-8634Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunderbird before 31.3 on Apple...CVE-2014-15952.1 Low
- mozilla firefox, seamonkey +1 moreThe structured-clone implementation in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 does...CVE-2014-86324.3 Medium
- mozilla firefox, seamonkey +1 moreThe Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 34.0 and SeaMonkey...CVE-2014-86314.3 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey...CVE-2014-1594Fix available6.8 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreStack-based buffer overflow in the mozilla::FileBlockCache::Read function in Mozilla Firefox...CVE-2014-1593Fix available6.8 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreUse-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll in Mozilla Firefox...CVE-2014-1592Fix available6.8 Medium
- mozilla firefox, seamonkey +1 moreMozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in CSP violation reports,...CVE-2014-1591Fix available4.3 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreThe XMLHttpRequest.prototype.send method in Mozilla Firefox before 34.0, Firefox ESR 31.x before...CVE-2014-1590Fix available4.3 Medium
- mozilla firefox, seamonkey +1 moreMozilla Firefox before 34.0 and SeaMonkey before 2.31 provide stylesheets with an incorrect...CVE-2014-1589Fix available6.8 Medium
- mozilla firefox, seamonkey +1 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 34.0 and...CVE-2014-1588Fix available6.8 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 34.0,...CVE-2014-1587Fix available6.8 Medium
- mozilla firefox, oracle jdk, jre +2 moreUnspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, when running on Firefox, allows...CVE-2014-64927.6 High
- mozilla firefox, thunderbird +1 morecontent/base/src/nsDocument.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and...CVE-2014-1586Fix available5.0 Medium
- mozilla firefox, thunderbird +1 moreThe WebRTC video-sharing feature in dom/media/MediaManager.cpp in Mozilla Firefox before 33.0,...CVE-2014-1585Fix available5.0 Medium
- mozilla firefoxThe Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 skips pinning checks...CVE-2014-1584Fix available4.3 Medium
- mozilla firefoxThe Alarm API in Mozilla Firefox before 33.0 and Firefox ESR 31.x before 31.2 does not properly...CVE-2014-1583Fix available5.0 Medium
- mozilla firefoxThe Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 does not properly...CVE-2014-1582Fix available4.3 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 33.0, Firefox...CVE-2014-1581Fix available7.5 High
- mozilla firefoxMozilla Firefox before 33.0 does not properly initialize memory for GIF images, which allows...CVE-2014-1580Fix available5.0 Medium
- mozilla firefox, thunderbird +1 moreThe get_tile function in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and...CVE-2014-1578Fix available7.5 High
- mozilla firefox, thunderbird +1 moreThe mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in...CVE-2014-1577Fix available6.4 Medium
- mozilla firefox, thunderbird +1 moreHeap-based buffer overflow in the nsTransformedTextRun function in Mozilla Firefox before 33.0,...CVE-2014-1576Fix available7.5 High
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 33.0 allow...CVE-2014-1575Fix available7.5 High
- mozilla firefox, thunderbird +1 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 33.0,...CVE-2014-1574Fix available7.5 High
- google chrome, mozilla firefox, firefox esr +3 more +5 moreMozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before...CVE-2014-1568Fix availableEPSS 16.7%7.5 High
- mozilla firefoxMozilla Firefox before 31.1 on Android does not properly restrict copying of local files onto the...CVE-2014-15664.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreUse-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 32.0, Firefox...CVE-2014-1567Fix available9.3 High
- mozilla firefox, thunderbird +1 moreThe mozilla::dom::AudioEventTimeline function in the Web Audio API implementation in Mozilla...CVE-2014-1565Fix available5.0 Medium
- mozilla firefox, thunderbird, opensuse evergreen +1 more +3 moreMozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 do...CVE-2014-1564Public exploitFix available4.3 Medium
- mozilla firefox, thunderbird, opensuse evergreen +2 more +4 moreUse-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox...CVE-2014-1563Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +2 moreUnspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x...CVE-2014-1562Fix available10.0 High
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0 allow...CVE-2014-1554Fix available10.0 High
- mozilla firefox, thunderbird, opensuse evergreen +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0,...CVE-2014-1553Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +2 moreUse-after-free vulnerability in the FontTableRec destructor in Mozilla Firefox before 31.0,...CVE-2014-155110.0 High
- mozilla firefox, oracle solaris +1 moreMozilla Firefox before 31.0 does not properly restrict use of drag-and-drop events to spoof...CVE-2014-1561Fix available5.8 Medium
- mozilla firefox, thunderbird +1 moreMozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial...CVE-2014-1560Fix available4.3 Medium
- mozilla firefox, thunderbird +1 moreMozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial...CVE-2014-1559Fix available4.3 Medium
- mozilla firefox, thunderbird +1 moreMozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial...CVE-2014-1558Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreThe ConvolveHorizontally function in Skia, as used in Mozilla Firefox before 31.0, Firefox ESR 24...CVE-2014-1557Fix available9.3 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow...CVE-2014-1556Fix available9.3 High
- mozilla firefox, firefox esr, thunderbird +2 moreUse-after-free vulnerability in the nsDocLoader::OnProgress function in Mozilla Firefox before 31...CVE-2014-1555Fix available9.3 High
- mozilla firefox, thunderbird +1 moreMozilla Firefox before 31.0 and Thunderbird before 31.0 do not properly implement the sandbox...CVE-2014-1552Fix available5.8 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and...CVE-2014-1550Fix available10.0 High
- mozilla firefox, thunderbird +1 moreThe mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox...CVE-2014-1549Fix available9.3 High
- mozilla firefox, thunderbird +1 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0 and...CVE-2014-1548Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0,...CVE-2014-1547Fix available10.0 High
- Show moreLoading…