Skip to contentMozilla vulnerabilities
Newest
- mozilla firefox, canonical ubuntu linux, opensuse leap +1 more +3 moreMozilla Firefox before 47.0 allows remote attackers to bypass the Same Origin Policy and modify...CVE-2016-2825Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux, debian linux +2 more +4 moreMozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to spoof the...CVE-2016-2822Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux, debian linux +2 more +4 moreUse-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0...CVE-2016-2821Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, debian linux +2 more +4 moreHeap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows...CVE-2016-2819Public exploitFix availableEPSS 24.0%8.8 High
- mozilla firefox, canonical ubuntu linux, debian linux +18 more +20 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and...CVE-2016-2818Fix available8.8 High
- mozilla firefox, canonical ubuntu linux, novell suse linux enterprise desktop +4 more +6 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 allow...CVE-2016-2815Fix available8.8 High
- mozilla bugzillaCross-site scripting (XSS) vulnerability in the dependency graphs in Bugzilla 2.16rc1 through 4.4...CVE-2016-2803Fix available6.1 Medium
- apple mac os x, canonical ubuntu linux, debian linux +11 more +13 moreExpat allows context-dependent attackers to cause a denial of service (crash) or possibly execute...CVE-2016-0718Fix availableEPSS 13.3%9.8 Critical
- mozilla firefoxMozilla Firefox before 46.0 on Android does not properly restrict JavaScript access to...CVE-2016-28136.5 Medium
- mozilla firefoxMozilla Firefox before 46.0 on Android before 5.0 allows attackers to bypass intended Signature...CVE-2016-28105.0 Medium
- mozilla firefoxThe Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Windows allows user...CVE-2016-28095.5 Medium
- mozilla firefoxThe Firefox Health Reports (aka FHR or about:healthreport) feature in Mozilla Firefox before 46.0...CVE-2016-2820Fix available4.3 Medium
- mozilla firefoxThe WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox...CVE-2016-2817Fix available5.4 Medium
- mozilla firefoxMozilla Firefox before 46.0 allows remote attackers to bypass the Content Security Policy (CSP)...CVE-2016-2816Fix available6.5 Medium
- mozilla firefoxHeap-based buffer overflow in the stagefright::SampleTable::parseSampleCencInfo function in...CVE-2016-2814Fix available8.8 High
- mozilla firefoxRace condition in the get implementation in the ServiceWorkerManager class in the Service Worker...CVE-2016-2812Fix available7.5 High
- mozilla firefoxUse-after-free vulnerability in the ServiceWorkerInfo class in the Service Worker subsystem in...CVE-2016-2811Fix available8.8 High
- mozilla firefoxThe watch implementation in the JavaScript engine in Mozilla Firefox before 46.0, Firefox ESR 38...CVE-2016-2808Fix available7.5 High
- mozilla firefox, opensuse leap, opensuse +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0,...CVE-2016-2807Fix available8.8 High
- mozilla firefox, debian linux, opensuse leap +2 more +4 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 and...CVE-2016-2806Fix available8.8 High
- mozilla firefoxUnspecified vulnerability in the browser engine in Mozilla Firefox ESR 38.x before 38.8 allows...CVE-2016-2805Fix available8.8 High
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 allow...CVE-2016-2804Fix available8.8 High
- mozilla firefox, webrtc project webrtc +1 moreUse-after-free vulnerability in the DesktopDisplayDevice class in the WebRTC implementation in...CVE-2016-19765.5 Medium
- mozilla firefox, webrtc project webrtc +1 moreMultiple race conditions in dom/media/systemservices/CamerasChild.cpp in the WebRTC...CVE-2016-19756.3 Medium
- mozilla firefoxRace condition in libvpx in Mozilla Firefox before 45.0 on Windows might allow remote attackers...CVE-2016-19728.8 High
- mozilla firefoxThe I420VideoFrame::CreateFrame function in the WebRTC implementation in Mozilla Firefox before...CVE-2016-19718.8 High
- mozilla firefoxInteger underflow in the srtp_unprotect function in the WebRTC implementation in Mozilla Firefox...CVE-2016-19708.8 High
- mozilla firefox, network security services +1 moreUse-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange function in Mozilla Network...CVE-2016-1978Fix available7.3 High
- mozilla firefox, network security services +1 moreUse-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla...CVE-2016-1979Fix available8.8 High
- mozilla firefox, thunderbird, opensuse leap +3 more +5 moreThe nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x...CVE-2016-1974Fix available8.8 High
- mozilla firefox, oracle linux +1 moreRace condition in the GetStaticInstance function in the WebRTC implementation in Mozilla Firefox...CVE-2016-1973Fix available8.8 High
- mozilla firefoxInteger underflow in Brotli, as used in Mozilla Firefox before 45.0, allows remote attackers to...CVE-2016-1968Fix available8.8 High
- mozilla firefoxMozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing...CVE-2016-1967Fix available6.5 Medium
- mozilla firefox, thunderbird, opensuse +1 more +3 moreThe nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla...CVE-2016-1966Fix available8.8 High
- mozilla firefox, opensuse, oracle linux +2 moreMozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that...CVE-2016-1965Fix available4.3 Medium
- mozilla firefox, thunderbird, opensuse leap +3 more +5 moreUse-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and...CVE-2016-1964Fix available8.8 High
- mozilla firefoxThe FileReader class in Mozilla Firefox before 45.0 allows local users to gain privileges or...CVE-2016-1963Fix available7.4 High
- mozilla firefox, opensuse, oracle linux +2 moreUse-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla...CVE-2016-1962Fix available9.8 Critical
- mozilla firefox, thunderbird, opensuse leap +3 more +5 moreUse-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument...CVE-2016-1961Fix available8.8 High
- mozilla firefox, thunderbird, opensuse leap +3 more +5 moreInteger underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox...CVE-2016-1960Public exploitFix availableEPSS 30.9%8.8 High
- mozilla firefoxThe ServiceWorkerManager class in Mozilla Firefox before 45.0 allows remote attackers to execute...CVE-2016-1959Fix available8.8 High
- mozilla firefox, opensuse, oracle linux +2 morebrowser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7...CVE-2016-1958Fix available4.3 Medium
- mozilla firefox, thunderbird, novell suse package hub for suse linux enterprise +3 more +5 moreMemory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7...CVE-2016-1957Fix available4.3 Medium
- mozilla firefox, novell suse package hub for suse linux enterprise, opensuse leap +1 more +3 moreMozilla Firefox before 45.0 on Linux, when an Intel video driver is used, allows remote attackers...CVE-2016-1956Fix available6.5 Medium
- mozilla firefox, novell suse package hub for suse linux enterprise, opensuse leap +1 more +3 moreMozilla Firefox before 45.0 allows remote attackers to bypass the Same Origin Policy and obtain...CVE-2016-1955Fix available4.3 Medium
- mozilla firefox, thunderbird, novell suse package hub for suse linux enterprise +3 more +5 moreThe nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox before...CVE-2016-1954Fix available8.8 High
- mozilla firefox, thunderbird, novell suse package hub for suse linux enterprise +2 more +4 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 allow...CVE-2016-1953Fix available8.8 High
- mozilla firefox, thunderbird, novell suse package hub for suse linux enterprise +3 more +5 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and...CVE-2016-1952Fix available8.8 High
- mozilla firefox, network security services, apple iphone os +9 more +11 moreHeap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x...CVE-2016-1950Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2 before 1.3.6, as used...CVE-2016-2802Fix available8.8 High
- Show moreLoading…