Skip to contentMozilla Firefox vulnerabilities
- mozilla firefoxHeap-based buffer overflow in the stagefright::SampleTable::parseSampleCencInfo function in...CVE-2016-2814Fix available8.8 High
- mozilla firefoxRace condition in the get implementation in the ServiceWorkerManager class in the Service Worker...CVE-2016-2812Fix available7.5 High
- mozilla firefoxUse-after-free vulnerability in the ServiceWorkerInfo class in the Service Worker subsystem in...CVE-2016-2811Fix available8.8 High
- mozilla firefoxThe watch implementation in the JavaScript engine in Mozilla Firefox before 46.0, Firefox ESR 38...CVE-2016-2808Fix available7.5 High
- mozilla firefox, opensuse leap, opensuse +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0,...CVE-2016-2807Fix available8.8 High
- mozilla firefox, debian linux, opensuse leap +2 more +4 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 and...CVE-2016-2806Fix available8.8 High
- mozilla firefoxUnspecified vulnerability in the browser engine in Mozilla Firefox ESR 38.x before 38.8 allows...CVE-2016-2805Fix available8.8 High
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 allow...CVE-2016-2804Fix available8.8 High
- mozilla firefox, webrtc project webrtc +1 moreUse-after-free vulnerability in the DesktopDisplayDevice class in the WebRTC implementation in...CVE-2016-19765.5 Medium
- mozilla firefox, webrtc project webrtc +1 moreMultiple race conditions in dom/media/systemservices/CamerasChild.cpp in the WebRTC...CVE-2016-19756.3 Medium
- mozilla firefoxRace condition in libvpx in Mozilla Firefox before 45.0 on Windows might allow remote attackers...CVE-2016-19728.8 High
- mozilla firefoxThe I420VideoFrame::CreateFrame function in the WebRTC implementation in Mozilla Firefox before...CVE-2016-19718.8 High
- mozilla firefoxInteger underflow in the srtp_unprotect function in the WebRTC implementation in Mozilla Firefox...CVE-2016-19708.8 High
- mozilla firefox, network security services +1 moreUse-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange function in Mozilla Network...CVE-2016-1978Fix available7.3 High
- mozilla firefox, network security services +1 moreUse-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla...CVE-2016-1979Fix available8.8 High
- mozilla firefox, thunderbird, opensuse leap +3 more +5 moreThe nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x...CVE-2016-1974Fix available8.8 High
- mozilla firefox, oracle linux +1 moreRace condition in the GetStaticInstance function in the WebRTC implementation in Mozilla Firefox...CVE-2016-1973Fix available8.8 High
- mozilla firefoxInteger underflow in Brotli, as used in Mozilla Firefox before 45.0, allows remote attackers to...CVE-2016-1968Fix available8.8 High
- mozilla firefoxMozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing...CVE-2016-1967Fix available6.5 Medium
- mozilla firefox, thunderbird, opensuse +1 more +3 moreThe nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla...CVE-2016-1966Fix available8.8 High
- mozilla firefox, opensuse, oracle linux +2 moreMozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that...CVE-2016-1965Fix available4.3 Medium
- mozilla firefox, thunderbird, opensuse leap +3 more +5 moreUse-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and...CVE-2016-1964Fix available8.8 High
- mozilla firefoxThe FileReader class in Mozilla Firefox before 45.0 allows local users to gain privileges or...CVE-2016-1963Fix available7.4 High
- mozilla firefox, opensuse, oracle linux +2 moreUse-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla...CVE-2016-1962Fix available9.8 Critical
- mozilla firefox, thunderbird, opensuse leap +3 more +5 moreUse-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument...CVE-2016-1961Fix available8.8 High
- mozilla firefox, thunderbird, opensuse leap +3 more +5 moreInteger underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox...CVE-2016-1960Public exploitFix availableEPSS 30.9%8.8 High
- mozilla firefoxThe ServiceWorkerManager class in Mozilla Firefox before 45.0 allows remote attackers to execute...CVE-2016-1959Fix available8.8 High
- mozilla firefox, opensuse, oracle linux +2 morebrowser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7...CVE-2016-1958Fix available4.3 Medium
- mozilla firefox, thunderbird, novell suse package hub for suse linux enterprise +3 more +5 moreMemory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7...CVE-2016-1957Fix available4.3 Medium
- mozilla firefox, novell suse package hub for suse linux enterprise, opensuse leap +1 more +3 moreMozilla Firefox before 45.0 on Linux, when an Intel video driver is used, allows remote attackers...CVE-2016-1956Fix available6.5 Medium
- mozilla firefox, novell suse package hub for suse linux enterprise, opensuse leap +1 more +3 moreMozilla Firefox before 45.0 allows remote attackers to bypass the Same Origin Policy and obtain...CVE-2016-1955Fix available4.3 Medium
- mozilla firefox, thunderbird, novell suse package hub for suse linux enterprise +3 more +5 moreThe nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox before...CVE-2016-1954Fix available8.8 High
- mozilla firefox, thunderbird, novell suse package hub for suse linux enterprise +2 more +4 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 allow...CVE-2016-1953Fix available8.8 High
- mozilla firefox, thunderbird, novell suse package hub for suse linux enterprise +3 more +5 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and...CVE-2016-1952Fix available8.8 High
- mozilla firefox, network security services, apple iphone os +9 more +11 moreHeap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x...CVE-2016-1950Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2 before 1.3.6, as used...CVE-2016-2802Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::TtfUtil::CmapSubtable12Lookup function in TtfUtil.cpp in Graphite 2 before 1.3.6,...CVE-2016-2801Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla...CVE-2016-2800Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreHeap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6,...CVE-2016-2799Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla...CVE-2016-2798Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, as used in...CVE-2016-2797Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreHeap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2...CVE-2016-2796Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::FileFace::get_table_fn function in Graphite 2 before 1.3.6, as used in Mozilla...CVE-2016-2795Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used...CVE-2016-2794Fix available8.8 High
- mozilla firefox, opensuse leap, opensuse +3 more +5 moreCachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR...CVE-2016-2793Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla...CVE-2016-2792Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox...CVE-2016-2791Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla...CVE-2016-2790Fix available8.8 High
- mozilla firefox, opensuse leap, opensuse +3 more +5 moreThe Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in...CVE-2016-1977Fix available8.8 High
- mozilla firefox, sil graphite2 +1 moreThe setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and...CVE-2016-1969Fix available8.8 High
- Show moreLoading…