Skip to contentMozilla vulnerabilities
Newest
- mozilla firefoxMozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attackers to bypass...CVE-2015-4520Fix available6.4 Medium
- mozilla firefoxMozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow user-assisted remote attackers...CVE-2015-4519Fix available4.3 Medium
- mozilla firefoxNetworkUtils.cpp in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow...CVE-2015-4517Fix available7.5 High
- mozilla firefoxMozilla Firefox before 41.0 allows remote attackers to bypass certain ECMAScript 5 (aka ES5) API...CVE-2015-4516Fix available9.3 High
- mozilla firefoxgfx/2d/DataSurfaceHelpers.cpp in Mozilla Firefox before 41.0 on Linux improperly attempts to use...CVE-2015-4512Fix available6.4 Medium
- mozilla firefoxRace condition in the WorkerPrivate::NotifyFeatures function in Mozilla Firefox before 41.0...CVE-2015-4510Fix available6.8 Medium
- mozilla firefoxUse-after-free vulnerability in the HTMLVideoElement interface in Mozilla Firefox before 41.0 and...CVE-2015-4509Fix available7.5 High
- mozilla firefoxMozilla Firefox before 41.0, when reader mode is enabled, allows remote attackers to spoof the...CVE-2015-4508Fix available2.6 Low
- mozilla firefoxThe SavedStacks class in the JavaScript implementation in Mozilla Firefox before 41.0, when the...CVE-2015-4507Fix available5.1 Medium
- mozilla firefoxBuffer overflow in the vp9_init_context_buffers function in libvpx, as used in Mozilla Firefox...CVE-2015-4506Fix available6.8 Medium
- mozilla firefoxThe lut_inverse_interp16 function in the QCMS library in Mozilla Firefox before 41.0 allows...CVE-2015-4504Fix available6.4 Medium
- mozilla firefoxjs/src/proxy/Proxy.cpp in Mozilla Firefox before 41.0 mishandles certain receiver arguments,...CVE-2015-4502Fix available4.3 Medium
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 allow...CVE-2015-4501Fix available7.5 High
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 and...CVE-2015-4500Fix available7.5 High
- mozilla bugzillaUtil.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.15, 4.3.x and 4.4.x before 4.4.10, and 5.x...CVE-2015-44997.5 High
- mozilla firefoxThe add-on installation feature in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2...CVE-2015-4498Fix available7.5 High
- mozilla firefoxUse-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox...CVE-2015-4497Fix available10.0 High
- mozilla firefox, oracle solaris +1 moreMultiple integer overflows in libstagefright in Mozilla Firefox before 38.0 allow remote...CVE-2015-4496Fix available9.3 High
- mozilla firefox, opensuse, oracle solaris +2 moreMozilla Firefox before 40.0 allows man-in-the-middle attackers to bypass a mixed-content...CVE-2015-4483Fix available4.3 Medium
- mozilla firefox, opensuse, oracle solaris +2 moremar_read.c in the Updater in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows...CVE-2015-44824.6 Medium
- mozilla firefox, opensuse, oracle solaris +2 moreRace condition in the Mozilla Maintenance Service in Mozilla Firefox before 40.0 and Firefox ESR...CVE-2015-4481Public exploit3.3 Low
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreHeap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright...CVE-2015-4493Fix available9.3 High
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreUse-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before...CVE-2015-4492Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreThe nsCSPHostSrc::permits function in dom/security/nsCSPUtils.cpp in Mozilla Firefox before 40.0...CVE-2015-4490Fix available4.3 Medium
- mozilla firefox, firefox os, canonical ubuntu linux +2 more +4 moreThe nsTArray_Impl class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox...CVE-2015-4489Fix available7.5 High
- mozilla firefox, firefox os, canonical ubuntu linux +2 more +4 moreUse-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0,...CVE-2015-4488Fix available7.5 High
- mozilla firefox, firefox os, canonical ubuntu linux +2 more +4 moreThe nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38...CVE-2015-4487Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreThe decrease_ref_count function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x...CVE-2015-4486Fix available10.0 High
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreHeap-based buffer overflow in the resize_context_buffers function in libvpx in Mozilla Firefox...CVE-2015-4485Fix available10.0 High
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreThe js::jit::AssemblerX86Shared::lock_addl function in the JavaScript implementation in Mozilla...CVE-2015-4484Fix available5.0 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreInteger overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla...CVE-2015-4480Fix available9.3 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMultiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x...CVE-2015-4479Fix available10.0 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 do not impose certain ECMAScript 6...CVE-2015-4478Fix available5.0 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreUse-after-free vulnerability in the MediaStream playback feature in Mozilla Firefox before 40.0...CVE-2015-4477Fix available10.0 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2...CVE-2015-4475Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 allow...CVE-2015-4474Fix available10.0 High
- mozilla firefox, canonical ubuntu linux, debian linux +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and...CVE-2015-4473Fix available10.0 High
- mozilla firefox osInteger signedness error in the SharedBufferManagerParent::RecvAllocateGrallocBuffer function in...CVE-2015-59625.0 Medium
- mozilla firefox osThe COPPA error page in the Accounts setup dialog in Mozilla Firefox OS before 2.2 embeds content...CVE-2015-59613.3 Low
- mozilla firefox osMozilla Firefox OS before 2.2 allows physically proximate attackers to bypass the pass-code...CVE-2015-59601.9 Low
- mozilla firefox osMozilla Firefox OS before 2.2 does not require the wifi-manage privilege for reading a Wi-Fi...CVE-2015-44944.3 Medium
- mozilla firefox osMultiple cross-site scripting (XSS) vulnerabilities in the Search app in Gaia in Mozilla Firefox...CVE-2015-27454.3 Medium
- mozilla firefox osCross-site scripting (XSS) vulnerability in the Search app in Gaia in Mozilla Firefox OS before 2...CVE-2015-27444.3 Medium
- mozilla firefox, firefox os, canonical ubuntu linux +12 more +14 moreThe PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS...CVE-2015-4495In KEVPublic exploitFix availableEPSS 68.6%8.8 High
- mozilla firefox, oracle solaris +1 moreMozilla Firefox before 39.0 on OS X includes native key press information during the logging of...CVE-2015-27424.3 Medium
- mozilla firefox, firefox esr, oracle solaris +2 moreMozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 do not...CVE-2015-2741Fix available4.3 Medium
- mozilla firefox, firefox esr, novell suse linux enterprise desktop +2 more +4 moreUse-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox...CVE-2015-2733Fix available10.0 High
- mozilla network security services, debian linux, novell suse linux enterprise desktop +4 more +6 moreMozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0,...CVE-2015-2730Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe AudioParamTimeline::AudioNodeInputValue function in the Web Audio implementation in Mozilla...CVE-2015-2729Fix available5.0 Medium
- mozilla firefoxMozilla Firefox 38.0 and Firefox ESR 38.0 allow user-assisted remote attackers to read arbitrary...CVE-2015-2727Fix available6.8 Medium
- Show moreLoading…