Skip to contentMozilla Firefox vulnerabilities
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 142 and Thunderbird 142CVE-2025-9187Fix available9.8 Critical
- mozilla firefoxSpoofing issue in the Address Bar componentCVE-2025-91836.5 Medium
- mozilla firefoxSpoofing issue in the Address Bar component of Firefox Focus for AndroidCVE-2025-91866.5 Medium
- mozilla firefox, thunderbird +1 moreDenial-of-service due to out-of-memory in the Graphics: WebRender componentCVE-2025-9182Fix available7.5 High
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142CVE-2025-9185Fix available8.1 High
- mozilla firefox, thunderbird +1 moreUninitialized memory in the JavaScript Engine componentCVE-2025-9181Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the Graphics: Canvas2D componentCVE-2025-9180Fix available8.1 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to invalid pointer in the Audio/Video: GMP componentCVE-2025-9179Fix available9.8 Critical
- mozilla firefoxSandboxed iframe could start downloadsCVE-2025-80429.8 Critical
- mozilla firefoxIncorrect URL truncation in Firefox for AndroidCVE-2025-80415.3 Medium
- mozilla firefox, firefox for ios +1 moreScanning a malicious URL utilizing Firefox's open-text scheme with the QR code scanner could load arbitrary websitesCVE-2025-541459.1 Critical
- mozilla firefox, firefox for ios +1 moreInternal Firefox open-text URL scheme allowed loading of arbitrary URLsCVE-2025-541445.4 Medium
- mozilla firefox, firefox for ios +1 moreSandboxed iframes could allow local downloads despite sandbox restrictionsCVE-2025-541439.8 Critical
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 141 and Thunderbird 141CVE-2025-80449.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect URL truncationCVE-2025-80439.8 Critical
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141CVE-2025-8040Fix available8.8 High
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141CVE-2025-8035Fix available8.8 High
- mozilla firefox, thunderbird +1 moreSearch terms persisted in URL barCVE-2025-8039Fix available8.1 High
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141CVE-2025-8034Fix available8.8 High
- mozilla firefox, thunderbird +1 moreIncorrect JavaScript state machine for generatorsCVE-2025-8033Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreCSP frame-src was not correctly enforced for pathsCVE-2025-8038Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreXSLT documents could bypass CSPCVE-2025-8032Fix available8.1 High
- mozilla firefox, thunderbird +1 moreIncorrect URL stripping in CSP reportsCVE-2025-8031Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreNameless cookies shadow secure cookiesCVE-2025-8037Fix available9.1 Critical
- mozilla firefox, thunderbird +1 moreDNS rebinding circumvents CORSCVE-2025-8036Fix available8.1 High
- mozilla firefox, thunderbird +1 morePotential user-assisted code execution in “Copy as cURL” commandCVE-2025-8030Fix available8.1 High
- mozilla firefox, thunderbird +1 morejavascript: URLs executed on object and embed tagsCVE-2025-8029Fix available8.1 High
- mozilla firefox, thunderbird +1 moreLarge branch table could lead to truncated instructionCVE-2025-8028Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreJavaScript engine only wrote partial return value to stackCVE-2025-8027Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 140 and Thunderbird 140CVE-2025-6436Fix available8.1 High
- mozilla firefox, thunderbird +1 moreSave as in Devtools could download files without sanitizing the extensionCVE-2025-6435Fix available8.1 High
- mozilla firefox, thunderbird +1 moreHTTPS-Only exception screen lacked anti-clickjacking delayCVE-2025-6434Fix available4.3 Medium
- mozilla firefox, thunderbird +1 moreWebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificateCVE-2025-6433Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreDNS Requests leaked outside of a configured SOCKS proxyCVE-2025-6432Fix available8.6 High
- mozilla firefoxThe prompt in Firefox for Android that asks before opening a link in an external application could be bypassedCVE-2025-64316.5 Medium
- mozilla firefoxFirefox for Android opened URLs specified in a link querystring parameterCVE-2025-64284.3 Medium
- mozilla firefox, thunderbird +1 moreContent-Disposition header ignored when a file is included in an embed or object tagCVE-2025-6430Fix available6.1 Medium
- mozilla firefox, thunderbird +1 moreconnect-src Content Security Policy restriction could be bypassedCVE-2025-6427Fix available9.1 Critical
- mozilla firefox, thunderbird +1 moreIncorrect parsing of URLs could have allowed embedding of youtube.comCVE-2025-6429Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreNo warning when opening executable terminal files on macOSCVE-2025-6426Fix available8.8 High
- mozilla firefox, thunderbird +1 moreThe WebCompat WebExtension shipped with Firefox exposed a persistent UUIDCVE-2025-6425Fix available4.3 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in FontFaceSetCVE-2025-6424Fix available9.8 Critical
- mozilla firefoxInteger overflow in OrderedHashTableCVE-2025-497109.8 Critical
- mozilla firefoxMemory corruption in canvas surfacesCVE-2025-497099.8 Critical
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 139 and Thunderbird 139CVE-2025-5272Fix available7.3 High
- mozilla firefox, thunderbird +1 moreDevtools' preview ignored CSP headersCVE-2025-5271Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreSNI was sometimes unencryptedCVE-2025-5270Fix available7.5 High
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.11CVE-2025-5269Fix available8.1 High
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.11CVE-2025-5268Fix available8.1 High
- mozilla firefox, thunderbird +1 moreClickjacking vulnerability could have led to leaking saved payment card detailsCVE-2025-5267Fix available5.4 Medium
- Show moreLoading…