Skip to contentMozilla Firefox vulnerabilities
- mozilla firefoxMozilla Firefox before 44.0.2 does not properly restrict the interaction between Service Workers...CVE-2016-1949Fix available8.8 High
- mozilla firefox, debian linux, fedoraproject fedora +2 more +4 moreThe TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite in Graphite 2 1.2.4, as used in...CVE-2016-1526Fix available8.1 High
- mozilla firefox, debian linux, fedoraproject fedora +2 more +4 moreThe SillMap::readFace function in FeatureMap.cpp in Libgraphite in Graphite 2 1.2.4, as used in...CVE-2016-1523Fix available6.5 Medium
- mozilla firefox, debian linux, fedoraproject fedora +2 more +4 moreCode.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox...CVE-2016-1522Fix available8.8 High
- mozilla firefox, debian linux, fedoraproject fedora +2 more +4 moreThe directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in...CVE-2016-1521Fix available8.8 High
- google android, mozilla firefox +1 moreMozilla Firefox before 44.0 on Android does not ensure that HTTPS is used for a lightweight-theme...CVE-2016-19485.3 Medium
- google android, mozilla firefox, opensuse leap +1 more +3 moreMozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via the...CVE-2016-19434.7 Medium
- mozilla firefox, apple mac os x +1 moreThe file-download dialog in Mozilla Firefox before 44.0 on OS X enables a certain button too...CVE-2016-19416.1 Medium
- google android, mozilla firefox +1 moreMozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via a...CVE-2016-19405.3 Medium
- mozilla firefox, canonical ubuntu linux, opensuse leap +1 more +3 moreMozilla Firefox 43.x mishandles attempts to connect to the Application Reputation service, which...CVE-2016-1947Fix available4.7 Medium
- mozilla firefox, opensuse leap, opensuse +2 moreThe MoofParser::Metadata function in binding/MoofParser.cpp in libstagefright in Mozilla Firefox...CVE-2016-1946Fix available9.8 Critical
- mozilla firefox, opensuse leap, opensuse +2 moreThe nsZipArchive function in Mozilla Firefox before 44.0 might allow remote attackers to cause a...CVE-2016-1945Fix available8.8 High
- mozilla firefox, opensuse leap, opensuse +2 moreThe Buffer11::NativeBuffer11::map function in ANGLE, as used in Mozilla Firefox before 44.0,...CVE-2016-1944Fix available9.8 Critical
- mozilla firefox, opensuse leap, opensuse +2 moreMozilla Firefox before 44.0 allows user-assisted remote attackers to spoof a trailing substring...CVE-2016-1942Fix available7.4 High
- mozilla firefox, opensuse leap, opensuse +2 moreMozilla Firefox before 44.0 stores cookies with names containing vertical tab characters, which...CVE-2016-1939Fix available5.3 Medium
- mozilla firefox, nss, opensuse leap +1 more +3 moreThe s_mp_div function in lib/freebl/mpi/mpi.c in Mozilla Network Security Services (NSS) before 3...CVE-2016-1938Fix available6.5 Medium
- mozilla firefox, opensuse leap, opensuse +2 moreThe protocol-handler dialog in Mozilla Firefox before 44.0 allows remote attackers to conduct...CVE-2016-1937Fix available6.1 Medium
- mozilla firefox, opensuse leap, opensuse +1 more +3 moreBuffer overflow in the BufferSubData function in Mozilla Firefox before 44.0 and Firefox ESR 38.x...CVE-2016-1935Fix available8.8 High
- mozilla firefox, opensuse leap, opensuse +2 moreInteger overflow in the image-deinterlacing functionality in Mozilla Firefox before 44.0 allows...CVE-2016-1933Fix available6.5 Medium
- mozilla firefox, opensuse leap, opensuse +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 allow...CVE-2016-1931Fix available10.0 Critical
- mozilla firefox, opensuse leap, opensuse +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 and...CVE-2016-1930Fix available9.8 Critical
- mozilla firefox osThe lockscreen feature in Mozilla Firefox OS before 2.5 does not properly restrict failed...CVE-2015-85124.6 Medium
- mozilla firefox osRace condition in the lockscreen feature in Mozilla Firefox OS before 2.5 allows physically...CVE-2015-85116.4 Medium
- mozilla firefox osCross-site scripting (XSS) vulnerability in the internationalization feature in the default...CVE-2015-85106.1 Medium
- mozilla firefox, network security services, canonical ubuntu linux +2 more +4 moreMozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2...CVE-2015-7575Fix available5.9 Medium
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreThe WebExtension APIs in Mozilla Firefox before 43.0 allow remote attackers to gain privileges,...CVE-2015-7223Fix available4.0 Medium
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreInteger underflow in the Metadata::setData function in MetaData.cpp in libstagefright in Mozilla...CVE-2015-7222Fix available6.8 Medium
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreBuffer overflow in the nsDeque::GrowCapacity function in xpcom/glue/nsDeque.cpp in Mozilla...CVE-2015-7221Fix available10.0 High
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreBuffer overflow in the XDRBuffer::grow function in js/src/vm/Xdr.cpp in Mozilla Firefox before 43...CVE-2015-7220Fix available10.0 High
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreThe HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a...CVE-2015-7219Fix available5.0 Medium
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreThe HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a...CVE-2015-7218Fix available5.0 Medium
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreThe gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly...CVE-2015-7217Fix available4.3 Medium
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreThe gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly...CVE-2015-7216Fix available6.8 Medium
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreThe importScripts function in the Web Workers API implementation in Mozilla Firefox before 43.0...CVE-2015-7215Fix available5.0 Medium
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreMozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to bypass the...CVE-2015-7214Public exploitFix available5.0 Medium
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreInteger overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in...CVE-2015-7213Fix available6.8 Medium
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreInteger overflow in the mozilla::layers::BufferTextureClient::AllocateForSurface function in...CVE-2015-7212Fix available7.5 High
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreMozilla Firefox before 43.0 mishandles the # (number sign) character in a data: URI, which allows...CVE-2015-7211Fix available5.0 Medium
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreUse-after-free vulnerability in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5...CVE-2015-7210Fix available7.5 High
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreMozilla Firefox before 43.0 stores cookies containing vertical tab characters, which allows...CVE-2015-7208Fix available5.0 Medium
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreMozilla Firefox before 43.0 does not properly restrict the availability of IFRAME Resource Timing...CVE-2015-7207Fix available5.0 Medium
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreInteger underflow in the RTPReceiverVideo::ParseRtpPacket function in Mozilla Firefox before 43.0...CVE-2015-7205Fix available10.0 High
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreMozilla Firefox before 43.0 does not properly store the properties of unboxed objects, which...CVE-2015-7204Fix available6.8 Medium
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreBuffer overflow in the DirectWriteFontInfo::LoadFontFamilyData function in gfx/thebes...CVE-2015-7203Fix available10.0 High
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 allow...CVE-2015-7202Fix available10.0 High
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 and...CVE-2015-7201Fix available10.0 High
- mozilla firefoxThe accessibility-tools feature in Mozilla Firefox before 42.0 on OS X improperly interacts with...CVE-2015-71927.5 High
- mozilla firefoxMozilla Firefox before 42.0 on Android improperly restricts URL strings in intents, which allows...CVE-2015-71914.3 Medium
- mozilla firefoxThe Search feature in Mozilla Firefox before 42.0 on Android through 4.4 supports search-engine...CVE-2015-71905.0 Medium
- mozilla firefoxMozilla Firefox before 42.0 on Android allows user-assisted remote attackers to bypass the Same...CVE-2015-71864.3 Medium
- Show moreLoading…