Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Mozilla
Firefox

Mozilla Firefox vulnerabilities

Known exploitedIn KEVPublic exploitFix available

mozilla firefox, firefox esr, thunderbird +5 more +7 moreBuffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7,...CVE-2015-2716Fix available7.5 HighMay 13, 2015
mozilla firefox, opensuse +1 moreRace condition in the nsThreadManager::RegisterCurrentThread function in Mozilla Firefox before...CVE-2015-2715Fix available6.8 MediumMay 13, 2015
mozilla firefox, firefox esr, thunderbird +4 more +6 moreUse-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox...CVE-2015-2713Fix available6.8 MediumMay 13, 2015
mozilla firefox, opensuse +1 moreThe asm.js implementation in Mozilla Firefox before 38.0 does not properly determine heap lengths...CVE-2015-2712Fix available7.5 HighMay 13, 2015
mozilla firefox, opensuse +1 moreMozilla Firefox before 38.0 does not recognize a referrer policy delivered by a referrer META...CVE-2015-2711Fix available4.3 MediumMay 13, 2015
mozilla firefox, firefox esr, thunderbird +4 more +6 moreHeap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR...CVE-2015-2710Fix available6.8 MediumMay 13, 2015
mozilla firefox, novell suse linux enterprise desktop, suse linux enterprise server +2 more +4 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0 allow...CVE-2015-2709Fix available7.5 HighMay 13, 2015
mozilla firefox, firefox esr, thunderbird +4 more +6 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0,...CVE-2015-2708Fix available7.5 HighMay 13, 2015
mozilla firefoxRace condition in the AsyncPaintWaitEvent::AsyncPaintWaitEvent function in Mozilla Firefox before...CVE-2015-2706Fix available6.8 MediumApril 21, 2015
debian linux, gstreamer, mozilla firefox +11 more +13 moreGStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and...CVE-2015-0797Fix available6.8 MediumApril 15, 2015
mozilla firefox, oracle solaris +1 moreThe Reader mode feature in Mozilla Firefox before 37.0.1 on Android, and Desktop Firefox pre...CVE-2015-07985.0 MediumApril 8, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 allows man-in-the-middle...CVE-2015-0799Fix available4.3 MediumApril 6, 2015
mozilla firefoxMozilla Firefox before 37.0 on OS X does not ensure that the cursor is visible, which allows...CVE-2015-08104.3 MediumApril 1, 2015
mozilla firefoxThe PRNG implementation in the DNS resolver in Mozilla Firefox (aka Fennec) before 37.0 on...CVE-2015-08005.0 MediumApril 1, 2015
mozilla firefox, thunderbird +1 moreMozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 do not...CVE-2015-0816Public exploitFix availableEPSS 64.6%5.0 MediumApril 1, 2015
mozilla firefox, thunderbird +1 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 37.0,...CVE-2015-0815Fix available7.5 HighApril 1, 2015
mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 37.0 allow...CVE-2015-0814Fix available7.5 HighApril 1, 2015
mozilla firefox, thunderbird +1 moreUse-after-free vulnerability in the AppendElements function in Mozilla Firefox before 37.0,...CVE-2015-0813Fix available5.1 MediumApril 1, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 37.0 does not require an HTTPS session for lightweight theme add-on...CVE-2015-0812Fix available4.3 MediumApril 1, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe QCMS implementation in Mozilla Firefox before 37.0 allows remote attackers to obtain...CVE-2015-0811Fix available6.4 MediumApril 1, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe webrtc::VPMContentAnalysis::Release function in the WebRTC implementation in Mozilla Firefox...CVE-2015-0808Fix available5.0 MediumApril 1, 2015
mozilla firefox, firefox esr, thunderbird +2 moreThe navigator.sendBeacon implementation in Mozilla Firefox before 37.0, Firefox ESR 31.x before...CVE-2015-0807Fix available6.8 MediumApril 1, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 attempts to...CVE-2015-0806Fix available7.5 HighApril 1, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 makes an...CVE-2015-0805Fix available7.5 HighApril 1, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe HTMLSourceElement::BindToTree function in Mozilla Firefox before 37.0 does not properly...CVE-2015-0804Fix available7.5 HighApril 1, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe HTMLSourceElement::AfterSetAttr function in Mozilla Firefox before 37.0 does not properly...CVE-2015-0803Fix available7.5 HighApril 1, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 37.0 relies on docshell type information instead of page principal...CVE-2015-0802Public exploitFix availableEPSS 65.0%5.0 MediumApril 1, 2015
mozilla firefox, firefox esr, thunderbird +2 moreMozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 allow...CVE-2015-0801Fix available7.5 HighApril 1, 2015
mozilla firefox, firefox esr, seamonkey +2 moreMozilla Firefox before 36.0.4, Firefox ESR 31.x before 31.5.3, and SeaMonkey before 2.33.1 allow...CVE-2015-0818Fix available7.5 HighMarch 22, 2015
mozilla firefox, firefox esr, seamonkey +2 moreThe asm.js implementation in Mozilla Firefox before 36.0.3, Firefox ESR 31.x before 31.5.2, and...CVE-2015-0817Fix available6.8 MediumMarch 22, 2015
mozilla firefox, firefox esr, thunderbird +2 more +4 moreMultiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0,...CVE-2015-08336.9 MediumFebruary 25, 2015
mozilla firefox, opensuse, oracle solaris +2 moreDouble free vulnerability in the nsXMLHttpRequest::GetResponse function in Mozilla Firefox before...CVE-2015-08286.8 MediumFebruary 25, 2015
mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0 allow...CVE-2015-0835Fix available7.5 HighFebruary 25, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe WebRTC subsystem in Mozilla Firefox before 36.0 recognizes turns: and stuns: URIs but...CVE-2015-0834Fix available4.3 MediumFebruary 25, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and...CVE-2015-0832Fix available5.0 MediumFebruary 25, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe WebGL implementation in Mozilla Firefox before 36.0 does not properly allocate memory for...CVE-2015-0830Fix available5.0 MediumFebruary 25, 2015
mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreBuffer overflow in libstagefright in Mozilla Firefox before 36.0 allows remote attackers to...CVE-2015-0829Fix available6.8 MediumFebruary 25, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe nsTransformedTextRun::SetCapitalization function in Mozilla Firefox before 36.0 allows remote...CVE-2015-0826Fix available6.8 MediumFebruary 25, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreStack-based buffer underflow in the mozilla::MP3FrameParser::ParseBuffer function in Mozilla...CVE-2015-0825Fix available4.3 MediumFebruary 25, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before...CVE-2015-0824Fix available5.0 MediumFebruary 25, 2015
mozilla firefox, opentype sanitiser project sanitiser, canonical ubuntu linux +1 more +3 moreMultiple use-after-free vulnerabilities in OpenType Sanitiser, as used in Mozilla Firefox before...CVE-2015-0823Fix available7.5 HighFebruary 25, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 36.0 allows user-assisted remote attackers to read arbitrary files or...CVE-2015-0821Fix available6.8 MediumFebruary 25, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 36.0 does not properly restrict transitions of JavaScript objects from a...CVE-2015-0820Fix available2.6 LowFebruary 25, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe UITour::onPageEvent function in Mozilla Firefox before 36.0 does not ensure that an API call...CVE-2015-0819Fix available4.3 MediumFebruary 25, 2015
mozilla firefox, opensuse +1 moreMozilla Firefox before 35.0 on Windows allows remote attackers to bypass the Gecko Media Plugin ...CVE-2014-86437.1 HighJanuary 14, 2015
mozilla firefox, seamonkey, opensuse +2 moreMozilla Firefox before 35.0 and SeaMonkey before 2.32 do not consider the id-pkix-ocsp-nocheck...CVE-2014-8642Fix available4.3 MediumJanuary 14, 2015
mozilla firefox, firefox esr, seamonkey +2 moreUse-after-free vulnerability in the WebRTC implementation in Mozilla Firefox before 35.0, Firefox...CVE-2014-8641Fix available7.5 HighJanuary 14, 2015
mozilla firefox, seamonkey, opensuse +2 moreThe mozilla::dom::AudioParamTimeline::AudioNodeInputValue function in the Web Audio API...CVE-2014-8640Fix available5.0 MediumJanuary 14, 2015
mozilla firefox, firefox esr, seamonkey +1 more +3 moreMozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey...CVE-2014-8639Fix available6.8 MediumJanuary 14, 2015
mozilla firefox, firefox esr, seamonkey +1 more +3 moreThe navigator.sendBeacon implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before...CVE-2014-8638Fix available6.8 MediumJanuary 14, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open