Skip to contentMozilla Firefox vulnerabilities
- mozilla firefox, canonical ubuntu linux +1 moreThe web console and JavaScript debugger do not sanitize all output that can be hyperlinked. Both...CVE-2018-5167Fix available4.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreWebExtensions can use request redirection and a "filterReponseData" filter to bypass host...CVE-2018-5166Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreContent Security Policy (CSP) is not applied correctly to all parts of multipart content sent...CVE-2018-5164Fix available6.1 Medium
- mozilla firefox, canonical ubuntu linux +1 moreIf a malicious attacker has used another vulnerability to gain full control over a content...CVE-2018-5163Fix available8.1 High
- mozilla firefox, canonical ubuntu linux +1 moreWebRTC can use a "WrappedI420Buffer" pixel buffer but the owning image object can be freed while...CVE-2018-5160Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreIf websocket data is sent with mixed text and binary in a single message, the binary data can be...CVE-2018-5153Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreWebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such...CVE-2018-5152Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux +1 moreMemory safety bugs were reported in Firefox 59. Some of these bugs showed evidence of memory...CVE-2018-5151Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreMozilla developers backported selected changes in the Skia library. These changes correct memory...CVE-2018-5183Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreA buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with...CVE-2018-5178Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreSites can bypass security checks on permissions to install lightweight themes by manipulating the...CVE-2018-5168Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreAn integer overflow can occur in the Skia library due to 32-bit integer use in an array without...CVE-2018-5159Public exploitFix availableEPSS 20.6%9.8 Critical
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreMalicious PDF can inject JavaScript into PDF ViewerCVE-2018-5158Public exploitFix availableEPSS 10.3%8.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreSame-origin protections for the PDF viewer can be bypassed, allowing a malicious site to...CVE-2018-5157Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreA use-after-free vulnerability can occur while adjusting layout during SVG animations with text...CVE-2018-5155Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreA use-after-free vulnerability can occur while enumerating attributes during SVG animations with...CVE-2018-5154Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreMemory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of...CVE-2018-5150Fix available9.8 Critical
- google chrome, lg nexus 5, mozilla firefox +2 moreA hardware vulnerability in GPU memory modules allows attackers to accelerate micro-architectural...CVE-2018-102294.8 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +5 more +7 moreA use-after-free vulnerability can occur in the compositor during certain graphics operations...CVE-2018-5148Fix available9.8 Critical
- mozilla firefox, firefox esr, debian linux +2 moreThe libtremor library has the same flaw as CVE-2018-5146. This library is used by Firefox in...CVE-2018-5147Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own...CVE-2018-5146Public exploitFix availableEPSS 11.9%8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMemory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory...CVE-2018-5145Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn integer overflow can occur during conversion of text to some Unicode character sets due to an...CVE-2018-5144Fix available7.3 High
- mozilla firefox, canonical ubuntu linux +1 moreURLs using "javascript:" have the protocol removed when pasted into the addressbar to protect...CVE-2018-5143Fix available6.1 Medium
- mozilla firefox, canonical ubuntu linux +1 moreIf Media Capture and Streams API permission is requested from documents with "data:" or "blob:"...CVE-2018-5142Fix available5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreA vulnerability in the notifications Push API where notifications can be sent through service...CVE-2018-5141Fix available8.2 High
- mozilla firefox, canonical ubuntu linux +1 moreImage for moz-icons can be accessed through the "moz-icon:" protocol through script in web...CVE-2018-5140Fix available5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreA legacy extension's non-contentaccessible, defined resources can be loaded by an arbitrary web...CVE-2018-5137Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreA shared worker created from a "data:" URL in one tab can be shared by another tab with a...CVE-2018-5136Fix available7.5 High
- mozilla firefoxWebExtensions can bypass normal restrictions in some circumstances and use "browser.tabs...CVE-2018-5135Fix available7.5 High
- mozilla firefoxWebExtensions may use "view-source:" URLs to view local "file:" URL content, as well as content...CVE-2018-5134Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreIf the "app.support.baseURL" preference is changed by a malicious local program to contain HTML...CVE-2018-5133Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux +1 moreThe Find API for WebExtensions can search some privileged pages, such as "about:debugging", if...CVE-2018-5132Fix available6.5 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +6 more +8 moreUnder certain circumstances the "fetch()" API can return transient local copies of resources that...CVE-2018-5131Fix available5.9 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +6 more +8 moreWhen packets with a mismatched RTP payload type are sent in WebRTC connections, in some...CVE-2018-5130Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA lack of parameter validation on IPC messages results in a potential out-of-bounds write through...CVE-2018-5129Fix available8.6 High
- mozilla firefox, canonical ubuntu linux +1 moreA use-after-free vulnerability can occur when manipulating elements, events, and selection ranges...CVE-2018-5128Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This...CVE-2018-5127Fix available8.8 High
- mozilla firefox, canonical ubuntu linux +1 moreMemory safety bugs were reported in Firefox 58. Some of these bugs showed evidence of memory...CVE-2018-5126Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +5 more +7 moreMemory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed...CVE-2018-5125Fix available8.8 High
- mozilla firefoxUnsanitized output in the browser UI leaves HTML tags in place and can result in arbitrary code...CVE-2018-5124Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur while editing events in form elements on a page,...CVE-2018-5096Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreA potential integer overflow in the "DoCrypt" function of WebCrypto was identified. If a means...CVE-2018-5122Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreThe reader view will display cross-origin content when CORS headers are set to prohibit the...CVE-2018-5119Fix available5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreThe screenshot images displayed in the Activity Stream page displayed when a new tab is opened is...CVE-2018-5118Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreIf right-to-left text is used in the addressbar with left-to-right alignment, it is possible in...CVE-2018-5117Fix available5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreWebExtensions with the "ActiveTab" permission are able to access frames hosted within the active...CVE-2018-5116Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreIf an HTTP authentication prompt is triggered by a background network request from a page or...CVE-2018-5115Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreIf an existing cookie is changed to be "HttpOnly" while a document is open, the original value...CVE-2018-5114Fix available5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreThe "browser.identity.launchWebAuthFlow" function of WebExtensions is only allowed to load...CVE-2018-5113Fix available7.5 High
- Show moreLoading…