Skip to contentMozilla Firefox vulnerabilities
- mozilla firefox, oracle solaris +1 moreMultiple integer overflows in libstagefright in Mozilla Firefox before 38.0 allow remote...CVE-2015-4496Fix available9.3 High
- mozilla firefox, opensuse, oracle solaris +2 moreMozilla Firefox before 40.0 allows man-in-the-middle attackers to bypass a mixed-content...CVE-2015-4483Fix available4.3 Medium
- mozilla firefox, opensuse, oracle solaris +2 moremar_read.c in the Updater in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows...CVE-2015-44824.6 Medium
- mozilla firefox, opensuse, oracle solaris +2 moreRace condition in the Mozilla Maintenance Service in Mozilla Firefox before 40.0 and Firefox ESR...CVE-2015-4481Public exploit3.3 Low
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreHeap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright...CVE-2015-4493Fix available9.3 High
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreUse-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before...CVE-2015-4492Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreThe nsCSPHostSrc::permits function in dom/security/nsCSPUtils.cpp in Mozilla Firefox before 40.0...CVE-2015-4490Fix available4.3 Medium
- mozilla firefox, firefox os, canonical ubuntu linux +2 more +4 moreThe nsTArray_Impl class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox...CVE-2015-4489Fix available7.5 High
- mozilla firefox, firefox os, canonical ubuntu linux +2 more +4 moreUse-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0,...CVE-2015-4488Fix available7.5 High
- mozilla firefox, firefox os, canonical ubuntu linux +2 more +4 moreThe nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38...CVE-2015-4487Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreThe decrease_ref_count function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x...CVE-2015-4486Fix available10.0 High
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreHeap-based buffer overflow in the resize_context_buffers function in libvpx in Mozilla Firefox...CVE-2015-4485Fix available10.0 High
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreThe js::jit::AssemblerX86Shared::lock_addl function in the JavaScript implementation in Mozilla...CVE-2015-4484Fix available5.0 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreInteger overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla...CVE-2015-4480Fix available9.3 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMultiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x...CVE-2015-4479Fix available10.0 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 do not impose certain ECMAScript 6...CVE-2015-4478Fix available5.0 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreUse-after-free vulnerability in the MediaStream playback feature in Mozilla Firefox before 40.0...CVE-2015-4477Fix available10.0 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2...CVE-2015-4475Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 allow...CVE-2015-4474Fix available10.0 High
- mozilla firefox, canonical ubuntu linux, debian linux +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and...CVE-2015-4473Fix available10.0 High
- mozilla firefox osInteger signedness error in the SharedBufferManagerParent::RecvAllocateGrallocBuffer function in...CVE-2015-59625.0 Medium
- mozilla firefox osThe COPPA error page in the Accounts setup dialog in Mozilla Firefox OS before 2.2 embeds content...CVE-2015-59613.3 Low
- mozilla firefox osMozilla Firefox OS before 2.2 allows physically proximate attackers to bypass the pass-code...CVE-2015-59601.9 Low
- mozilla firefox osMozilla Firefox OS before 2.2 does not require the wifi-manage privilege for reading a Wi-Fi...CVE-2015-44944.3 Medium
- mozilla firefox osMultiple cross-site scripting (XSS) vulnerabilities in the Search app in Gaia in Mozilla Firefox...CVE-2015-27454.3 Medium
- mozilla firefox osCross-site scripting (XSS) vulnerability in the Search app in Gaia in Mozilla Firefox OS before 2...CVE-2015-27444.3 Medium
- mozilla firefox, firefox os, canonical ubuntu linux +12 more +14 moreThe PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS...CVE-2015-4495In KEVPublic exploitFix availableEPSS 68.6%8.8 High
- mozilla firefox, oracle solaris +1 moreMozilla Firefox before 39.0 on OS X includes native key press information during the logging of...CVE-2015-27424.3 Medium
- mozilla firefox, firefox esr, oracle solaris +2 moreMozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 do not...CVE-2015-2741Fix available4.3 Medium
- mozilla firefox, firefox esr, novell suse linux enterprise desktop +2 more +4 moreUse-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox...CVE-2015-2733Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe AudioParamTimeline::AudioNodeInputValue function in the Web Audio implementation in Mozilla...CVE-2015-2729Fix available5.0 Medium
- mozilla firefoxMozilla Firefox 38.0 and Firefox ESR 38.0 allow user-assisted remote attackers to read arbitrary...CVE-2015-2727Fix available6.8 Medium
- mozilla firefox, novell suse linux enterprise desktop, suse linux enterprise server +2 more +4 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0 allow...CVE-2015-2726Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0,...CVE-2015-2725Fix available10.0 High
- mozilla firefox, firefox esr, novell suse linux enterprise desktop +3 more +5 moreUse-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox...CVE-2015-2722Fix available10.0 High
- mozilla firefox, firefox esr, novell suse linux enterprise desktop +3 more +5 morePDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1...CVE-2015-2743Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreBuffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before...CVE-2015-2740Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before...CVE-2015-2739Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in...CVE-2015-2738Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before...CVE-2015-2737Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before...CVE-2015-2736Fix available9.3 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 morensZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38...CVE-2015-2735Fix available9.3 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla...CVE-2015-2734Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreUse-after-free vulnerability in the CSPService::ShouldLoad function in the microtask...CVE-2015-2731Fix available10.0 High
- mozilla firefox, firefox esr, novell suse linux enterprise desktop +2 more +4 moreThe IndexedDatabaseManager class in the IndexedDB implementation in Mozilla Firefox before 39.0...CVE-2015-2728Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0,...CVE-2015-2724Fix available10.0 High
- mozilla firefoxThe update implementation in Mozilla Firefox before 38.0 on Windows does not ensure that the...CVE-2015-27204.4 Medium
- mozilla firefoxMozilla Firefox before 38.0 on Android does not properly restrict writing URL data to the Android...CVE-2015-27142.1 Low
- mozilla firefox, opensuse +1 moreThe WebChannel.jsm module in Mozilla Firefox before 38.0 allows remote attackers to bypass the...CVE-2015-2718Fix available4.3 Medium
- mozilla firefox, opensuse +1 moreInteger overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to...CVE-2015-2717Fix available6.8 Medium
- Show moreLoading…