Skip to contentMozilla Firefox vulnerabilities
- mozilla firefoxIf web content on a page is dragged onto portions of the browser UI, such as the tab bar, links...CVE-2017-7812Fix available5.3 Medium
- mozilla firefoxMemory safety bugs were reported in Firefox 55. Some of these bugs showed evidence of memory...CVE-2017-7811Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA buffer overflow occurs when drawing and validating elements with the ANGLE graphics library,...CVE-2017-7824Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe content security policy (CSP) "sandbox" directive did not create a unique origin for the...CVE-2017-7823Fix available5.4 Medium
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA use-after-free vulnerability can occur in design mode when image objects are resized if objects...CVE-2017-7819Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet...CVE-2017-7818Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreFile downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks...CVE-2017-7814Fix available7.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMemory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed...CVE-2017-7810Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDuring TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This...CVE-2017-7805Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur in the Fetch API when the worker or the associated...CVE-2017-7793Fix available9.8 Critical
- mozilla firefoxRemote code execution in the Venkman script debugger in Mozilla Firefox before 2.0.0.8.CVE-2007-53419.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreThe destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by malicious...CVE-2017-78047.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreAn error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is...CVE-2017-77825.3 Medium
- mozilla firefox, thunderbird, debian linux +6 more +8 moreA use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during...CVE-2017-7809Fix available9.8 Critical
- mozilla firefoxA content security policy (CSP) "frame-ancestors" directive containing origins with paths allows...CVE-2017-7808Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files...CVE-2017-7807Fix available8.1 High
- mozilla firefoxA use-after-free vulnerability can occur when the layer manager is freed too early when rendering...CVE-2017-7806Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreWhen a page's content security policy (CSP) header contains a "sandbox" directive, other...CVE-2017-7803Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur when manipulating the DOM during the resize event of an...CVE-2017-7802Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur while re-computing layout for a "marquee" element during...CVE-2017-7801Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur in WebSockets when the object holding the connection is...CVE-2017-7800Fix available9.8 Critical
- mozilla firefoxJavaScript in the "about:webrtc" page is not sanitized properly being assigned to "innerHTML"....CVE-2017-7799Fix available6.1 Medium
- mozilla firefox, firefox esr, debian linux +6 more +8 moreThe Developer Tools feature suffers from a XUL injection vulnerability due to improper...CVE-2017-7798Fix available8.8 High
- mozilla firefoxResponse header name interning does not have same-origin protections and these headers are stored...CVE-2017-7797Fix available7.5 High
- mozilla firefoxOn Linux systems, if the content process is compromised, the sandbox broker will allow files to...CVE-2017-7794Fix available7.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA buffer overflow will occur when viewing a certificate in the certificate manager if the...CVE-2017-7792Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreOn pages containing an iframe, the "data:" protocol can be used to create a modal alert that will...CVE-2017-7791Fix available5.3 Medium
- mozilla firefoxWhen an "iframe" has a "sandbox" attribute and its content is specified using "srcdoc", that...CVE-2017-7788Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreSame-origin policy protections can be bypassed on pages with embedded iframes during page reloads...CVE-2017-7787Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA buffer overflow can occur when the image renderer attempts to paint non-displayable SVG...CVE-2017-7786Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA)...CVE-2017-7785Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur when reading an image observer during frame...CVE-2017-7784Fix available9.8 Critical
- mozilla firefoxIf a long user name is used in a username/password combination in a site URL (such as " http:/...CVE-2017-7783Public exploitFix availableEPSS 13.8%7.5 High
- mozilla firefoxAn error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine...CVE-2017-7781Fix available5.9 Medium
- mozilla firefoxMemory safety bugs were reported in Firefox 54. Some of these bugs showed evidence of memory...CVE-2017-7780Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreMemory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of...CVE-2017-7779Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line,...CVE-2017-7753Fix available9.1 Critical
- mozilla firefoxIf a server sends two Strict-Transport-Security (STS) headers for a single connection, they will...CVE-2017-7789Fix available5.3 Medium
- mozilla firefox, firefox esr +1 moreThe Mozilla Maintenance Service can be invoked by an unprivileged user to read 32 bytes of any...CVE-2017-77685.5 Medium
- mozilla firefox, firefox esr +1 moreThe Mozilla Maintenance Service "helper.exe" application creates a temporary directory writable...CVE-2017-77615.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreThe Firefox installer on Windows can be made to load malicious DLL files stored in the same...CVE-2017-77557.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreThe "Mark of the Web" was not correctly saved on Windows when files with very long names were...CVE-2017-77657.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDefault fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar...CVE-2017-77635.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreA number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads,...CVE-2017-7778Fix available9.8 Critical
- mozilla firefox, sil graphite2 +1 moreUse of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache:...CVE-2017-7777Fix available8.8 High
- mozilla firefox, sil graphite2 +1 moreHeap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf:...CVE-2017-7776Fix available8.1 High
- mozilla firefox, sil graphite2 +1 moreOut-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite...CVE-2017-7774Fix available9.1 Critical
- mozilla firefox, sil graphite2 +1 moreHeap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src...CVE-2017-7773Fix available8.8 High
- mozilla firefox, sil graphite2 +1 moreHeap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.CVE-2017-7772Fix available8.8 High
- mozilla firefox, sil graphite2 +1 moreOut-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.CVE-2017-7771Fix available8.1 High
- Show moreLoading…