Skip to contentMozilla Firefox vulnerabilities
- mozilla firefoxHeap-based buffer overflow in the nsCaseTransformTextRunFactory::TransformString function in...CVE-2016-5270Fix available9.8 Critical
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0,...CVE-2016-5257Fix available9.8 Critical
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0 allow...CVE-2016-5256Fix available9.8 Critical
- mozilla firefoxThe mozilla::net::IsValidReferrerPolicy function in Mozilla Firefox before 49.0 allows remote...CVE-2016-2827Fix available6.5 Medium
- opera browser, apple safari, google chrome +3 more +5 moreThe HTTP/2 protocol does not consider the role of the TCP congestion window in providing...CVE-2016-7153EPSS 12.8%5.3 Medium
- apple safari, google chrome, microsoft edge +3 more +5 moreThe HTTPS protocol does not consider the role of the TCP congestion window in providing...CVE-2016-7152EPSS 12.8%5.3 Medium
- mozilla firefoxMozilla Firefox before 48.0 on Android allows remote attackers to spoof the address bar via left...CVE-2016-52675.3 Medium
- mozilla firefoxThe Updater in Mozilla Firefox before 48.0 on Windows allows local users to write to arbitrary...CVE-2016-52534.7 Medium
- mozilla firefoxMozilla Firefox before 48.0 does not properly set the LINKABLE and URI_SAFE_FOR_UNTRUSTED_CONTENT...CVE-2016-5268Fix available4.3 Medium
- mozilla firefoxMozilla Firefox before 48.0 does not properly restrict drag-and-drop (aka dataTransfer) actions...CVE-2016-5266Fix available8.1 High
- mozilla firefox, oracle linux +1 moreMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers...CVE-2016-5265Fix available5.5 Medium
- mozilla firefox, oracle linux +1 moreUse-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in...CVE-2016-5264Fix available8.8 High
- mozilla firefox, oracle linux +1 moreThe nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45...CVE-2016-5263Fix available8.8 High
- mozilla firefox, oracle linux +1 moreMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler...CVE-2016-5262Fix available6.1 Medium
- mozilla firefoxInteger overflow in the WebSocketChannel class in the WebSockets subsystem in Mozilla Firefox...CVE-2016-5261Fix available8.8 High
- mozilla firefoxMozilla Firefox before 48.0 mishandles changes from 'INPUT type="password"' to 'INPUT type="text"...CVE-2016-5260Fix available6.5 Medium
- mozilla firefox, oracle linux +1 moreUse-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox...CVE-2016-5259Fix available8.8 High
- mozilla firefox, oracle linux +1 moreUse-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and...CVE-2016-5258Fix available8.8 High
- mozilla firefoxUse-after-free vulnerability in the js::PreliminaryObjectArray::sweep function in Mozilla Firefox...CVE-2016-5255Fix available8.8 High
- mozilla firefox, oracle linux +1 moreUse-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before...CVE-2016-5254Fix available9.8 Critical
- mozilla firefox, oracle linux +1 moreStack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before...CVE-2016-5252Fix available8.8 High
- mozilla firefoxMozilla Firefox before 48.0 allows remote attackers to spoof the location bar via crafted...CVE-2016-5251Fix available4.3 Medium
- mozilla firefoxMozilla Firefox before 48.0, Firefox ESR < 45.4 and Thunderbird < 45.4 allow remote attackers to...CVE-2016-5250Fix available4.3 Medium
- mozilla firefoxMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo...CVE-2016-2839Fix available6.5 Medium
- mozilla firefoxHeap-based buffer overflow in the nsBidi::BracketData::AddOpening function in Mozilla Firefox...CVE-2016-2838Fix available8.8 High
- mozilla firefox, oracle linux +1 moreHeap-based buffer overflow in the ClearKey Content Decryption Module (CDM) in the Encrypted Media...CVE-2016-2837Fix available6.3 Medium
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 and...CVE-2016-2836Fix available8.8 High
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 allow...CVE-2016-2835Fix available8.8 High
- mozilla firefoxMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve the network connection used...CVE-2016-2830Fix available4.3 Medium
- mozilla firefoxThe maintenance service in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 on...CVE-2016-28267.8 High
- mozilla firefox, opensuse leap, opensuse +2 moreThe TSymbolTableLevel class in ANGLE, as used in Mozilla Firefox before 47.0 and Firefox ESR 45.x...CVE-2016-28248.8 High
- mozilla firefox, network security services, canonical ubuntu linux +5 more +7 moreMozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0,...CVE-2016-2834Fix available8.8 High
- mozilla firefox, canonical ubuntu linux, opensuse leap +1 more +3 moreMozilla Firefox before 47.0 ignores Content Security Policy (CSP) directives for cross-domain...CVE-2016-2833Fix available6.1 Medium
- mozilla firefox, canonical ubuntu linux, opensuse leap +1 more +3 moreMozilla Firefox before 47.0 allows remote attackers to discover the list of disabled plugins via...CVE-2016-2832Fix available4.3 Medium
- mozilla firefox, canonical ubuntu linux, debian linux +2 more +4 moreMozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 do not ensure that the user approves...CVE-2016-2831Fix available8.8 High
- mozilla firefox, canonical ubuntu linux, opensuse leap +1 more +3 moreMozilla Firefox before 47.0 allows remote attackers to spoof permission notifications via a...CVE-2016-2829Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux, debian linux +2 more +4 moreUse-after-free vulnerability in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2...CVE-2016-2828Fix available8.8 High
- mozilla firefox, canonical ubuntu linux, opensuse leap +1 more +3 moreMozilla Firefox before 47.0 allows remote attackers to bypass the Same Origin Policy and modify...CVE-2016-2825Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux, debian linux +2 more +4 moreMozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to spoof the...CVE-2016-2822Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux, debian linux +2 more +4 moreUse-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0...CVE-2016-2821Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, debian linux +2 more +4 moreHeap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows...CVE-2016-2819Public exploitFix availableEPSS 24.0%8.8 High
- mozilla firefox, canonical ubuntu linux, debian linux +18 more +20 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and...CVE-2016-2818Fix available8.8 High
- mozilla firefox, canonical ubuntu linux, novell suse linux enterprise desktop +4 more +6 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 allow...CVE-2016-2815Fix available8.8 High
- apple mac os x, canonical ubuntu linux, debian linux +11 more +13 moreExpat allows context-dependent attackers to cause a denial of service (crash) or possibly execute...CVE-2016-0718Fix availableEPSS 13.3%9.8 Critical
- mozilla firefoxMozilla Firefox before 46.0 on Android does not properly restrict JavaScript access to...CVE-2016-28136.5 Medium
- mozilla firefoxMozilla Firefox before 46.0 on Android before 5.0 allows attackers to bypass intended Signature...CVE-2016-28105.0 Medium
- mozilla firefoxThe Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Windows allows user...CVE-2016-28095.5 Medium
- mozilla firefoxThe Firefox Health Reports (aka FHR or about:healthreport) feature in Mozilla Firefox before 46.0...CVE-2016-2820Fix available4.3 Medium
- mozilla firefoxThe WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox...CVE-2016-2817Fix available5.4 Medium
- mozilla firefoxMozilla Firefox before 46.0 allows remote attackers to bypass the Content Security Policy (CSP)...CVE-2016-2816Fix available6.5 Medium
- Show moreLoading…