Skip to contentMozilla Firefox vulnerabilities
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present...CVE-2022-42932Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreIf a website called <code>window.print()</code> in a particular way, it could cause a denial of...CVE-2022-42929Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreCertain types of allocations were missing annotations that, if the Garbage Collector was in a...CVE-2022-42928Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking...CVE-2022-42927Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +2 moreInconsistent data in instruction and data cache when creating wasm code could lead to a...CVE-2022-40957Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreAn out-of-bounds read can occur when decoding H264 video. This results in a potentially...CVE-2022-3266Fix available5.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the...CVE-2022-40962Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreConcurrent use of the URL parser with non-UTF-8 data was not thread-safe. This could lead to a...CVE-2022-40960Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreDuring iframe navigation, certain pages did not have their FeaturePolicy fully initialized...CVE-2022-40959Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreBy injecting a cookie with certain special characters, an attacker on a shared subdomain which is...CVE-2022-40958Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen injecting an HTML base element, some requests would ignore the CSP's base-uri settings and...CVE-2022-40956Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen opening a Windows shortcut from the local filesystem, an attacker could supply a remote path...CVE-2022-36314Fix available5.5 Medium
- mozilla firefoxWhen a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should...CVE-2022-34469Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +2 moreMembers the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR...CVE-2022-38478Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present...CVE-2022-38477Fix available8.8 High
- mozilla firefox esr, thunderbird +1 moreA data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use...CVE-2022-38476Fix available7.5 High
- mozilla firefoxAn attacker could have written a value to the first element in a zero-length JavaScript array....CVE-2022-38475Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions ...CVE-2022-38473Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreAn attacker could have abused XSLT error handling to associate attacker-controlled content with...CVE-2022-38472Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox...CVE-2022-2505Fix available8.8 High
- mozilla firefoxMozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox...CVE-2022-36320Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreWhen combining CSS properties for overflow and transform, the mouse cursor could interact with...CVE-2022-36319Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen visiting directory listings for `chrome://` URLs as source text, some parameters were...CVE-2022-36318Fix available5.3 Medium
- mozilla firefoxWhen using the Performance API, an attacker was able to notice subtle differences between...CVE-2022-36316Fix available6.1 Medium
- mozilla firefoxWhen loading a script with Subresource Integrity, attackers with an injection capability could...CVE-2022-36315Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreThe <code>ms-msdt</code>, <code>search</code>, and <code>search-ms</code> protocols deliver...CVE-2022-34478Fix available6.5 Medium
- mozilla firefoxMozilla developers Bryce Seager van Dyk and the Mozilla Fuzzing Team reported potential...CVE-2022-34485Fix available9.8 Critical
- mozilla firefoxAn attacker who could have convinced a user to drag and drop an image to a filesystem could have...CVE-2022-34483Fix available8.8 High
- mozilla firefoxAn attacker who could have convinced a user to drag and drop an image to a filesystem could have...CVE-2022-34482Fix available8.8 High
- mozilla firefoxWithin the <code>lg_init()</code> function, if several allocations succeed but then one fails, an...CVE-2022-34480Fix available8.8 High
- mozilla firefoxThe MediaError message property should be consistent to avoid leaking information about cross...CVE-2022-34477Fix available7.5 High
- mozilla firefoxASN.1 parsing of an indefinite SEQUENCE inside an indefinite GROUP could have resulted in the...CVE-2022-34476Fix available9.8 Critical
- mozilla firefoxSVG <code><use></code> tags that referenced a same-origin document could have resulted in...CVE-2022-34475Fix available6.1 Medium
- mozilla firefoxEven when an iframe was sandboxed with <code>allow-top-navigation-by-user-activation</code>, if...CVE-2022-34474Fix available6.1 Medium
- mozilla firefoxThe HTML Sanitizer should have sanitized the <code>href</code> attribute of SVG <code><use>...CVE-2022-34473Fix available6.1 Medium
- mozilla firefoxWhen downloading an update for an addon, the downloaded addon update's version was not verified...CVE-2022-34471Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreThe Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of...CVE-2022-34484Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreIn the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have...CVE-2022-34481Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA malicious website that could create a popup could have resized the popup to overlay the address...CVE-2022-34479Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIf there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests...CVE-2022-34472Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreSession history navigations may have led to a use-after-free and potentially exploitable crash....CVE-2022-34470Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreAn iframe that was not permitted to run scripts could do so if the user clicked on a <code...CVE-2022-34468Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreIf an object prototype was corrupted by an attacker, they would have been able to set undesired...CVE-2022-2200Fix availableEPSS 23.9%8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen downloading files on Windows, the % character was not escaped, which could have lead to a...CVE-2022-31739Fix available8.8 High
- mozilla firefoxMozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla...CVE-2022-31748Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported...CVE-2022-31747Fix available9.8 Critical
- mozilla firefoxIf array shift operations are not used, the Garbage Collector may have become confused about...CVE-2022-31745Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreAn attacker could have injected CSS into stylesheets accessible via internal URIs, such as...CVE-2022-31744Fix available6.5 Medium
- mozilla firefoxFirefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity...CVE-2022-31743Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreAn attacker could have exploited a timing attack by sending a large number of allowCredential...CVE-2022-31742Fix available6.5 Medium
- Show moreLoading…