Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Mozilla
Firefox

Mozilla Firefox vulnerabilities

Known exploitedIn KEVPublic exploitFix available

mozilla firefoxMozilla Firefox before 42.0 on Android does not ensure that the address bar is restored upon...CVE-2015-71854.3 MediumNovember 5, 2015
mozilla firefoxThe CryptoKey interface implementation in Mozilla Firefox before 42.0 and Firefox ESR 38.x before...CVE-2015-7200Fix available7.5 HighNovember 4, 2015
mozilla firefoxThe (1) AddWeightedPathSegLists and (2) SVGPathSegListSMILType::Interpolate functions in Mozilla...CVE-2015-7199Fix available7.5 HighNovember 4, 2015
mozilla firefoxBuffer overflow in the rx::TextureStorage11 class in ANGLE, as used in Mozilla Firefox before 42...CVE-2015-7198Fix available7.5 HighNovember 4, 2015
mozilla firefoxMozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly control the ability of a...CVE-2015-7197Fix available5.0 MediumNovember 4, 2015
mozilla firefoxMozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, when a Java plugin is enabled,...CVE-2015-7196Fix available6.8 MediumNovember 4, 2015
mozilla firefoxThe URL parsing implementation in Mozilla Firefox before 42.0 improperly recognizes escaped...CVE-2015-7195Fix available5.0 MediumNovember 4, 2015
mozilla firefoxBuffer underflow in libjar in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows...CVE-2015-7194Fix available7.5 HighNovember 4, 2015
mozilla firefoxMozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly follow the CORS cross...CVE-2015-7193Fix available7.5 HighNovember 4, 2015
mozilla firefoxRace condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x...CVE-2015-7189Fix available6.8 MediumNovember 4, 2015
mozilla firefoxMozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to bypass the...CVE-2015-7188Fix available7.5 HighNovember 4, 2015
mozilla firefoxThe Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting,...CVE-2015-7187Fix available4.3 MediumNovember 4, 2015
mozilla firefox, network security services +1 moreInteger overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in...CVE-2015-7183Fix available7.5 HighNovember 4, 2015
mozilla firefox, network security services, oracle glassfish server +4 more +6 moreHeap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before...CVE-2015-7182Fix availableEPSS 10.2%9.8 CriticalNovember 4, 2015
mozilla firefox, network security services +1 moreThe sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and...CVE-2015-7181Fix available7.5 HighNovember 4, 2015
mozilla firefoxThe Reader View implementation in Mozilla Firefox before 42.0 has an improper whitelist, which...CVE-2015-4518Fix available4.3 MediumNovember 4, 2015
mozilla firefoxMozilla Firefox before 42.0, when NTLM v1 is enabled for HTTP authentication, allows remote...CVE-2015-4515Fix available4.3 MediumNovember 4, 2015
mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 allow...CVE-2015-4514Fix available7.5 HighNovember 4, 2015
mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 and...CVE-2015-4513Fix available7.5 HighNovember 4, 2015
mozilla firefoxThe fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the...CVE-2015-7184Fix available6.8 MediumOctober 16, 2015
mozilla firefoxMozilla Firefox before 41.0 does not properly restrict the availability of High Resolution Time...CVE-2015-73274.3 MediumSeptember 24, 2015
mozilla firefoxThe VertexBufferInterface::reserveVertexSpace function in libGLES in ANGLE, as used in Mozilla...CVE-2015-71797.5 HighSeptember 24, 2015
mozilla firefoxThe ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox before...CVE-2015-71787.5 HighSeptember 24, 2015
mozilla firefoxupdater.exe in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows allows...CVE-2015-45056.6 MediumSeptember 24, 2015
mozilla firefoxThe TCP Socket API implementation in Mozilla Firefox before 41.0 mishandles array boundaries that...CVE-2015-45035.0 MediumSeptember 24, 2015
mozilla firefoxMozilla Firefox before 41.0 on Android allows user-assisted remote attackers to spoof address-bar...CVE-2015-44764.3 MediumSeptember 24, 2015
mozilla firefoxHeap-based buffer overflow in the nestegg_track_codec_data function in Mozilla Firefox before 41...CVE-2015-4511Fix available6.8 MediumSeptember 23, 2015
mozilla firefoxThe ReadbackResultWriterD3D11::Run function in Mozilla Firefox before 41.0 and Firefox ESR 38.x...CVE-2015-7180Fix available7.5 HighSeptember 22, 2015
mozilla firefoxThe InitTextures function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might...CVE-2015-7177Fix available7.5 HighSeptember 22, 2015
mozilla firefoxThe AnimationThread function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 uses...CVE-2015-7176Fix available7.5 HighSeptember 22, 2015
mozilla firefoxThe XULContentSinkImpl::AddText function in Mozilla Firefox before 41.0 and Firefox ESR 38.x...CVE-2015-7175Fix available7.5 HighSeptember 22, 2015
mozilla firefoxThe nsAttrAndChildArray::GrowBy function in Mozilla Firefox before 41.0 and Firefox ESR 38.x...CVE-2015-7174Fix available7.5 HighSeptember 22, 2015
mozilla firefoxThe nsUnicodeToUTF8::GetMaxLength function in Mozilla Firefox before 41.0 and Firefox ESR 38.x...CVE-2015-4522Fix available7.5 HighSeptember 22, 2015
mozilla firefoxThe ConvertDialogOptions function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3...CVE-2015-4521Fix available7.5 HighSeptember 22, 2015
mozilla firefoxMozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attackers to bypass...CVE-2015-4520Fix available6.4 MediumSeptember 22, 2015
mozilla firefoxMozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow user-assisted remote attackers...CVE-2015-4519Fix available4.3 MediumSeptember 22, 2015
mozilla firefoxNetworkUtils.cpp in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow...CVE-2015-4517Fix available7.5 HighSeptember 22, 2015
mozilla firefoxMozilla Firefox before 41.0 allows remote attackers to bypass certain ECMAScript 5 (aka ES5) API...CVE-2015-4516Fix available9.3 HighSeptember 22, 2015
mozilla firefoxgfx/2d/DataSurfaceHelpers.cpp in Mozilla Firefox before 41.0 on Linux improperly attempts to use...CVE-2015-4512Fix available6.4 MediumSeptember 22, 2015
mozilla firefoxRace condition in the WorkerPrivate::NotifyFeatures function in Mozilla Firefox before 41.0...CVE-2015-4510Fix available6.8 MediumSeptember 22, 2015
mozilla firefoxUse-after-free vulnerability in the HTMLVideoElement interface in Mozilla Firefox before 41.0 and...CVE-2015-4509Fix available7.5 HighSeptember 22, 2015
mozilla firefoxMozilla Firefox before 41.0, when reader mode is enabled, allows remote attackers to spoof the...CVE-2015-4508Fix available2.6 LowSeptember 22, 2015
mozilla firefoxThe SavedStacks class in the JavaScript implementation in Mozilla Firefox before 41.0, when the...CVE-2015-4507Fix available5.1 MediumSeptember 22, 2015
mozilla firefoxBuffer overflow in the vp9_init_context_buffers function in libvpx, as used in Mozilla Firefox...CVE-2015-4506Fix available6.8 MediumSeptember 22, 2015
mozilla firefoxThe lut_inverse_interp16 function in the QCMS library in Mozilla Firefox before 41.0 allows...CVE-2015-4504Fix available6.4 MediumSeptember 22, 2015
mozilla firefoxjs/src/proxy/Proxy.cpp in Mozilla Firefox before 41.0 mishandles certain receiver arguments,...CVE-2015-4502Fix available4.3 MediumSeptember 22, 2015
mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 allow...CVE-2015-4501Fix available7.5 HighSeptember 22, 2015
mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 and...CVE-2015-4500Fix available7.5 HighSeptember 22, 2015
mozilla firefoxThe add-on installation feature in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2...CVE-2015-4498Fix available7.5 HighAugust 27, 2015
mozilla firefoxUse-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox...CVE-2015-4497Fix available10.0 HighAugust 27, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open