Skip to contentMozilla Firefox vulnerabilities
- mozilla firefox, firefox esr, thunderbird +2 moreWhen reading from areas partially or fully outside the source resource with WebGL's <code...CVE-2020-6821Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreUnder certain conditions, when handling a ReadableStream, a race condition can cause a use-after...CVE-2020-6820In KEVFix available8.1 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreUnder certain conditions, when running the nsDocShell destructor, a race condition can cause a...CVE-2020-6819In KEVFix available8.1 High
- mozilla firefoxMozilla developers reported memory safety and script safety bugs present in Firefox 73. Some of...CVE-2020-6815Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of...CVE-2020-6814Fix available9.8 Critical
- mozilla firefoxWhen protecting CSS blocks with the nonce feature of Content Security Policy, the @import...CVE-2020-6813Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe first time AirPods are connected to an iPhone, they become named after the user's name by...CVE-2020-6812Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...CVE-2020-6811Fix available8.8 High
- mozilla firefoxAfter a website had entered fullscreen mode, it could have used a previously opened popup to...CVE-2020-6810Fix available4.3 Medium
- mozilla firefoxWhen a JavaScript URL (javascript:) is evaluated and the result is a string, this string is...CVE-2020-6808Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code...CVE-2020-6807Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the...CVE-2020-6806Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen removing data about an origin whose tab was recently closed, a use-after-free could occur in...CVE-2020-6805Fix available8.8 High
- mozilla firefoxWhen a Web Extension had the all-urls permission and made a fetch request with a mode set to ...CVE-2020-6809Fix available7.5 High
- mozilla firefoxMozilla Firefox before 25 allows modification of anonymous content of pluginProblem.xml bindingCVE-2013-55944.3 Medium
- mozilla firefox, firefox esr +1 moreCommand line arguments could have been injected during Firefox invocation as a shell handler for...CVE-2020-6799Fix available8.8 High
- mozilla firefox, thunderbird, firefox esr +2 moreBy downloading a file with the .fileloc extension, a semi-privileged extension could launch an...CVE-2020-6797Fix available4.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreMozilla developers reported memory safety bugs present in Firefox 72. Some of these bugs showed...CVE-2020-6801Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers and community members reported memory safety bugs present in Firefox 72 and...CVE-2020-6800Fix available8.8 High
- mozilla firefox, thunderbird, firefox esr +2 moreIf a template tag was used in a select tag, the parser could be confused and allow JavaScript...CVE-2020-6798Fix available6.1 Medium
- mozilla firefox, firefox esr +1 moreA content process could have modified shared memory relating to crash reporting information,...CVE-2020-6796Fix available8.8 High
- mozilla firefoxMozilla Firefox prior to 3.6 has a DoS vulnerability due to an issue in the validation of...CVE-2011-26696.5 Medium
- mozilla firefoxMozilla Firefox through 1.5.0.3 has a vulnerability in processing the content-length headerCVE-2011-26688.8 High
- mozilla firefoxMozilla Firefox before 3.6 is vulnerable to XSS via the rendering of Cascading Style SheetsCVE-2011-26706.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreIncorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a...CVE-2019-17026In KEVPublic exploitFix availableEPSS 46.3%8.8 High
- mozilla firefox, canonical ubuntu linux +1 moreMozilla developers reported memory safety bugs present in Firefox 71. Some of these bugs showed...CVE-2019-17025Fix available8.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +9 more +11 moreMozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some...CVE-2019-17024Fix available8.8 High
- mozilla firefox, canonical ubuntu linux, debian linux +2 moreAfter a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3,...CVE-2019-17023Fix available6.5 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +6 more +8 moreWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...CVE-2019-17022Fix available6.1 Medium
- mozilla firefox, firefox esr, opensuse leap +2 moreDuring the initialization of a new content process, a race condition occurs that can allow a...CVE-2019-170215.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreIf an XML file is served with a Content Security Policy and the XML file includes an XSL...CVE-2019-17020Fix available6.5 Medium
- mozilla firefoxWhen Python was installed on Windows, a python file being served with the MIME type of text/plain...CVE-2019-170198.8 High
- mozilla firefoxWhen in Private Browsing Mode on Windows 10, the Windows keyboard may retain word suggestions to...CVE-2019-170185.3 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +6 more +8 moreDue to a missing case handling object types, a type confusion vulnerability could occur,...CVE-2019-17017Fix available8.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +6 more +8 moreWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...CVE-2019-17016Fix available6.1 Medium
- mozilla firefox, firefox esr +1 moreDuring the initialization of a new content process, a pointer offset can be manipulated leading...CVE-2019-170158.8 High
- mozilla firefoxMozilla Firefox 20.0a1 and earlier allows remote attackers to cause a denial of service (crash),...CVE-2013-16896.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen running, the updater service wrote status and log files to an unrestricted location;...CVE-2019-17009Fix available7.8 High
- mozilla firefoxIf an image had not loaded correctly (such as when it is not actually an image), it could be...CVE-2019-17014Fix available7.4 High
- mozilla firefoxMozilla developers reported memory safety bugs present in Firefox 70. Some of these bugs showed...CVE-2019-17013Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreMozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some...CVE-2019-17012Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreUnder certain conditions, when retrieving a document from a DocShell in the antitracking code, a...CVE-2019-17011Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreUnder certain conditions, when checking the Resist Fingerprinting preference during device...CVE-2019-17010Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen using nested workers, a use-after-free could occur during worker destruction. This resulted...CVE-2019-17008Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreThe plain text serializer used a fixed-size array for the number of <ol> elements it could...CVE-2019-17005Fix available8.8 High
- mozilla firefoxImproper refcounting of soft token session objects could cause a use-after-free and crash (likely...CVE-2019-11756Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +12 more +14 moreWhen encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller...CVE-2019-11745Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360...CVE-2019-11758Fix available8.8 High
- mozilla firefoxIf upgrade-insecure-requests was specified in the Content Security Policy, and a link was dragged...CVE-2019-17002Fix available4.3 Medium
- mozilla firefoxA Content-Security-Policy that blocks in-line scripts could be bypassed using an object tag to...CVE-2019-17001Fix available6.1 Medium
- Show moreLoading…