Skip to contentMozilla Firefox vulnerabilities
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen an inner window is reused, it does not consider the use of document.domain for cross-origin...CVE-2019-11711Fix available8.8 High
- mozilla firefox, opensuse leap +1 moreMozilla developers and community members reported memory safety bugs present in Firefox 67. Some...CVE-2019-11710Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreMozilla developers and community members reported memory safety bugs present in Firefox 67 and...CVE-2019-11709Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreInsufficient vetting of parameters passed with the Prompt:Open IPC message between child and...CVE-2019-11708In KEVPublic exploitFix availableEPSS 55.9%10.0 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA type confusion vulnerability can occur when manipulating JavaScript objects due to issues in...CVE-2019-11707In KEVPublic exploitFix availableEPSS 38.0%8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA race condition is present in the crash generation server used to generate data for the crash...CVE-2019-9818Fix available8.3 High
- mozilla firefox, firefox esr, thunderbird +2 moreIf hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous...CVE-2019-9815Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +2 moreA vulnerability exists in the Windows sandbox where an uninitialized value in memory can be...CVE-2019-11694Fix available7.5 High
- mozilla firefoxA use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with...CVE-2019-9821Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +2 moreA use-after-free vulnerability can occur in the chrome event handler when it is freed while still...CVE-2019-9820Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA vulnerability where a JavaScript compartment mismatch can occur while working with the fetch...CVE-2019-9819Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreImages from a different domain can be read using a canvas object in some circumstances. This...CVE-2019-9817Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA possible vulnerability exists where type confusion can occur when manipulating JavaScript...CVE-2019-9816Public exploitFix available5.9 Medium
- mozilla firefoxMozilla developers and community members reported memory safety bugs present in Firefox 66. Some...CVE-2019-9814Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers and community members reported memory safety bugs present in Firefox 66,...CVE-2019-9800Fix available9.8 Critical
- mozilla firefoxThe default webcal: protocol handler will load a web site vulnerable to cross-site scripting (XSS...CVE-2019-11701Fix available6.1 Medium
- mozilla firefoxA malicious page can briefly cause the wrong name to be highlighted as the domain name in the...CVE-2019-11699Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIf a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting...CVE-2019-11698Fix available5.3 Medium
- mozilla firefoxIf the ALT and "a" keys are pressed when users receive an extension installation prompt, the...CVE-2019-11697Fix available6.5 Medium
- mozilla firefoxFiles with the .JNLP extension used for "Java web start" applications are not treated as...CVE-2019-11696Fix available7.8 High
- mozilla firefoxA custom cursor defined by scripting on a site can position itself over the addressbar to spoof...CVE-2019-11695Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreThe bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics...CVE-2019-11693Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA use-after-free vulnerability can occur when listeners are removed from the event listener...CVE-2019-11692Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop,...CVE-2019-11691Fix available9.8 Critical
- mozilla firefoxIn Firefox Developer Tools it is possible that pasting the result of the 'Copy as cURL' command...CVE-2019-98049.8 Critical
- mozilla firefoxOn Android systems, Firefox can load a library from APITRACE_LIB, which is writable by all users...CVE-2019-97987.4 High
- mozilla firefoxThe about:crashcontent and about:crashparent pages can be triggered by web content. These pages...CVE-2018-185106.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreFirefox will accept any registered Program ID as an external protocol handler and offer to launch...CVE-2019-9801Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA vulnerability was discovered where specific command line arguments are not properly discarded...CVE-2019-9794Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreIncorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and...CVE-2019-9813Public exploitFix available8.8 High
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreIncorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead...CVE-2019-9810Public exploitFix availableEPSS 27.2%8.8 High
- mozilla firefoxIf the source for resources on a page is through an FTP connection, it is possible to trigger a...CVE-2019-9809Fix available7.5 High
- mozilla firefoxIf WebRTC permission is requested from documents with data: or blob: URLs, the permission...CVE-2019-9808Fix available5.3 Medium
- mozilla firefoxWhen arbitrary text is sent over an FTP connection and a page reload is initiated, it is possible...CVE-2019-9807Fix available4.3 Medium
- mozilla firefoxA vulnerability exists during authorization prompting for FTP transaction where successive modal...CVE-2019-9806Fix available7.5 High
- mozilla firefoxA latent vulnerability exists in the Prio library where data may be read from uninitialized...CVE-2019-9805Fix available9.8 Critical
- mozilla firefoxThe Upgrade-Insecure-Requests (UIR) specification states that if UIR is enabled through Content...CVE-2019-9803Fix available7.4 High
- mozilla firefoxIf a Sandbox content process is compromised, it can initiate an FTP download which will then use...CVE-2019-9802Fix available7.5 High
- mozilla firefoxInsufficient bounds checking of data during inter-process communication might allow a compromised...CVE-2019-9799Fix available7.5 High
- mozilla firefoxCross-origin images can be read in violation of the same-origin policy by exporting an image...CVE-2019-9797Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers...CVE-2019-9796Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could...CVE-2019-9795Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA mechanism was discovered that removes some bounds checking for string, array, or typed array...CVE-2019-9793Fix available5.9 Medium
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreThe IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to...CVE-2019-9792Public exploitFix availableEPSS 13.3%9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreThe type inference system allows the compilation of functions that can cause type confusions...CVE-2019-9791Public exploitFix availableEPSS 19.9%9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is...CVE-2019-9790Fix available9.8 Critical
- mozilla firefoxMozilla developers and community members reported memory safety bugs present in Firefox 65. Some...CVE-2019-9789Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreMozilla developers and community members reported memory safety bugs present in Firefox 65,...CVE-2019-9788Fix available9.8 Critical
- mozilla firefoxWhen the RSS Feed preview about:feeds page is framed within another page, it can be used in...CVE-2018-184968.8 High
- mozilla firefoxIn private browsing mode on Firefox for Android, favicons are cached in the cache/icons folder as...CVE-2018-124005.3 Medium
- Show moreLoading…