Skip to contentMozilla Firefox vulnerabilities
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele...CVE-2022-22751Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMalicious websites could have confused Firefox into showing the wrong origin when asking to...CVE-2022-22748Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreAfter accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the...CVE-2022-22747Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreSecuritypolicyviolation events could have leaked cross-origin information for frame-ancestors...CVE-2022-22745Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen navigating from inside an iframe while requesting fullscreen access, an attacker-controlled...CVE-2022-22743Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen inserting text while in edit mode, some characters might have lead to out-of-bounds memory...CVE-2022-22742Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen resizing a popup while requesting fullscreen access, the popup would have become unable to...CVE-2022-22741Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreCertain network request objects were freed too early when releasing a network request handle....CVE-2022-22740Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMalicious websites could have tricked users into accepting launching a program to handle an...CVE-2022-22739Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreApplying a CSS filter effect could have accessed out of bounds memory. This could have lead to a...CVE-2022-22738Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreConstructing audio sinks could have lead to a race condition when playing audio files and closing...CVE-2022-22737Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreIt was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox....CVE-2021-4140Fix available10.0 Critical
- mozilla firefoxA Universal XSS vulnerability was present in Firefox for Android resulting from improper...CVE-2021-43530Public exploit6.1 Medium
- mozilla firefoxWhen a user loaded a Web Extensions context menu, the Web Extension could access the post...CVE-2021-435314.3 Medium
- mozilla firefoxThe 'Copy Image Link' context menu action would copy the final image URL after redirects. By...CVE-2021-435326.1 Medium
- mozilla firefoxWhen parsing internationalized domain names, high bits of the characters in the URLs were...CVE-2021-435334.3 Medium
- mozilla firefoxWhen receiving a URL through a SEND intent, Firefox would have searched for the text, but...CVE-2021-43544Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson...CVE-2021-4129Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIt was possible to recreate previous cursor spoofing attacks against users with a zoomed native...CVE-2021-43546Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreUsing the Location API in a loop could have caused severe application hangs and crashes. This...CVE-2021-43545Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDocuments loaded with the CSP sandbox directive could have escaped the sandbox's script...CVE-2021-43543Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreUsing XMLHttpRequest, an attacker could have identified installed applications by probing error...CVE-2021-43542Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen invoking protocol handlers for external protocols, a supplied parameter URL containing...CVE-2021-43541Fix available6.5 Medium
- mozilla firefoxWebExtensions with the correct permissions were able to create and install ServiceWorkers for...CVE-2021-43540Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreFailure to correctly record the location of live pointers across wasm instance calls resulted in...CVE-2021-43539Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy misusing a race in our notification code, an attacker could have forcefully hidden the...CVE-2021-43538Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAn incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt...CVE-2021-43537Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreUnder certain circumstances, asynchronous functions could have caused a navigation to fail but...CVE-2021-43536Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreThe executable file warning was not presented when downloading .inetloc files, which, due to a...CVE-2021-38510Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMicrosoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will...CVE-2021-38505Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA use-after-free could have occured when an HTTP2 session object was released on a different...CVE-2021-43535Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers and community members reported memory safety bugs present in Firefox 93 and...CVE-2021-43534Fix available8.8 High
- mozilla firefox, firefox mobile +1 moreFirefox for Android allowed navigations through the `intent://` protocol, which could be used to...CVE-2021-29993Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDue to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with...CVE-2021-38509Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy displaying a form validity message in the correct location at the same time as a permission...CVE-2021-38508Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently...CVE-2021-38507Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThrough a series of navigations, Firefox could have entered fullscreen mode without notification...CVE-2021-38506Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen interacting with an HTML input element's file picker dialog with webkitdirectory set, a use...CVE-2021-38504Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to...CVE-2021-38503Fix available10.0 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...CVE-2021-38501Fix available8.8 High
- mozilla firefoxMozilla developers reported memory safety bugs present in Firefox 92. Some of these bugs showed...CVE-2021-38499Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreDuring process shutdown, a document could have caused a use-after-free of a languages service...CVE-2021-38498Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreThrough use of reportValidity() and window.open(), a plain-text validation message could have...CVE-2021-38497Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...CVE-2021-38500Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDuring operations on MessageTasks, a task may have been removed while it was still scheduled,...CVE-2021-38496Fix available8.8 High
- mozilla firefox esr, thunderbird +1 moreMozilla developers reported memory safety bugs present in Thunderbird 78.13.0. Some of these bugs...CVE-2021-38495Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen delegating navigations to the operating system, Firefox would accept the `mk` scheme which...CVE-2021-38492Fix available6.5 Medium
- mozilla firefoxMozilla developers reported memory safety bugs present in Firefox 91. Some of these bugs showed...CVE-2021-38494Fix available8.8 High
- mozilla firefoxMixed-content checks were unable to analyze opaque origins which led to some mixed content being...CVE-2021-38491Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some...CVE-2021-38493Fix available8.8 High
- Show moreLoading…