Skip to contentMozilla vulnerabilities
Newest
- mozilla firefoxMozilla Firefox before 49.0 does not properly restrict the scheme in favicon requests, which...CVE-2016-5282Fix available6.5 Medium
- mozilla firefoxUse-after-free vulnerability in the DOMSVGLength class in Mozilla Firefox before 49.0, Firefox...CVE-2016-5281Fix available9.8 Critical
- mozilla firefoxUse-after-free vulnerability in the mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap...CVE-2016-5280Fix available9.8 Critical
- mozilla firefoxMozilla Firefox before 49.0 allows user-assisted remote attackers to obtain sensitive full...CVE-2016-5279Fix available4.3 Medium
- mozilla firefoxHeap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before...CVE-2016-5278Fix available8.8 High
- mozilla firefoxUse-after-free vulnerability in the nsRefreshDriver::Tick function in Mozilla Firefox before 49.0...CVE-2016-5277Fix available9.8 Critical
- mozilla firefoxUse-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList...CVE-2016-5276Fix available9.8 Critical
- mozilla firefoxBuffer overflow in the mozilla::gfx::FilterSupport::ComputeSourceNeededRegions function in...CVE-2016-5275Fix available8.8 High
- mozilla firefoxUse-after-free vulnerability in the nsFrameManager::CaptureFrameState function in Mozilla Firefox...CVE-2016-5274Fix available9.8 Critical
- mozilla firefoxThe mozilla::a11y::HyperTextAccessible::GetChildOffset function in the accessibility...CVE-2016-5273Fix available8.8 High
- mozilla firefoxThe nsImageGeometryMixin class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and...CVE-2016-5272Fix available8.8 High
- mozilla firefoxThe PropertyProvider::GetSpacingInternal function in Mozilla Firefox before 49.0 allows remote...CVE-2016-5271Fix available6.5 Medium
- mozilla firefoxHeap-based buffer overflow in the nsCaseTransformTextRunFactory::TransformString function in...CVE-2016-5270Fix available9.8 Critical
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0,...CVE-2016-5257Fix available9.8 Critical
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0 allow...CVE-2016-5256Fix available9.8 Critical
- mozilla firefoxThe mozilla::net::IsValidReferrerPolicy function in Mozilla Firefox before 49.0 allows remote...CVE-2016-2827Fix available6.5 Medium
- opera browser, apple safari, google chrome +3 more +5 moreThe HTTP/2 protocol does not consider the role of the TCP congestion window in providing...CVE-2016-7153EPSS 12.8%5.3 Medium
- apple safari, google chrome, microsoft edge +3 more +5 moreThe HTTPS protocol does not consider the role of the TCP congestion window in providing...CVE-2016-7152EPSS 12.8%5.3 Medium
- mozilla firefoxMozilla Firefox before 48.0 on Android allows remote attackers to spoof the address bar via left...CVE-2016-52675.3 Medium
- mozilla firefoxThe Updater in Mozilla Firefox before 48.0 on Windows allows local users to write to arbitrary...CVE-2016-52534.7 Medium
- mozilla firefoxMozilla Firefox before 48.0 does not properly set the LINKABLE and URI_SAFE_FOR_UNTRUSTED_CONTENT...CVE-2016-5268Fix available4.3 Medium
- mozilla firefoxMozilla Firefox before 48.0 does not properly restrict drag-and-drop (aka dataTransfer) actions...CVE-2016-5266Fix available8.1 High
- mozilla firefox, oracle linux +1 moreMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers...CVE-2016-5265Fix available5.5 Medium
- mozilla firefox, oracle linux +1 moreUse-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in...CVE-2016-5264Fix available8.8 High
- mozilla firefox, oracle linux +1 moreThe nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45...CVE-2016-5263Fix available8.8 High
- mozilla firefox, oracle linux +1 moreMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler...CVE-2016-5262Fix available6.1 Medium
- mozilla firefoxInteger overflow in the WebSocketChannel class in the WebSockets subsystem in Mozilla Firefox...CVE-2016-5261Fix available8.8 High
- mozilla firefoxMozilla Firefox before 48.0 mishandles changes from 'INPUT type="password"' to 'INPUT type="text"...CVE-2016-5260Fix available6.5 Medium
- mozilla firefox, oracle linux +1 moreUse-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox...CVE-2016-5259Fix available8.8 High
- mozilla firefox, oracle linux +1 moreUse-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and...CVE-2016-5258Fix available8.8 High
- mozilla firefoxUse-after-free vulnerability in the js::PreliminaryObjectArray::sweep function in Mozilla Firefox...CVE-2016-5255Fix available8.8 High
- mozilla firefox, oracle linux +1 moreUse-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before...CVE-2016-5254Fix available9.8 Critical
- mozilla firefox, oracle linux +1 moreStack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before...CVE-2016-5252Fix available8.8 High
- mozilla firefoxMozilla Firefox before 48.0 allows remote attackers to spoof the location bar via crafted...CVE-2016-5251Fix available4.3 Medium
- mozilla firefoxMozilla Firefox before 48.0, Firefox ESR < 45.4 and Thunderbird < 45.4 allow remote attackers to...CVE-2016-5250Fix available4.3 Medium
- mozilla firefoxMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo...CVE-2016-2839Fix available6.5 Medium
- mozilla firefoxHeap-based buffer overflow in the nsBidi::BracketData::AddOpening function in Mozilla Firefox...CVE-2016-2838Fix available8.8 High
- mozilla firefox, oracle linux +1 moreHeap-based buffer overflow in the ClearKey Content Decryption Module (CDM) in the Encrypted Media...CVE-2016-2837Fix available6.3 Medium
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 and...CVE-2016-2836Fix available8.8 High
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 allow...CVE-2016-2835Fix available8.8 High
- mozilla firefoxMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve the network connection used...CVE-2016-2830Fix available4.3 Medium
- mozilla firefoxThe maintenance service in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 on...CVE-2016-28267.8 High
- mozilla firefox, opensuse leap, opensuse +2 moreThe TSymbolTableLevel class in ANGLE, as used in Mozilla Firefox before 47.0 and Firefox ESR 45.x...CVE-2016-28248.8 High
- mozilla netscape portable runtimeMultiple integer overflows in io/prprf.c in Mozilla Netscape Portable Runtime (NSPR) before 4.12...CVE-2016-1951Fix available8.6 High
- mozilla firefox, network security services, canonical ubuntu linux +5 more +7 moreMozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0,...CVE-2016-2834Fix available8.8 High
- mozilla firefox, canonical ubuntu linux, opensuse leap +1 more +3 moreMozilla Firefox before 47.0 ignores Content Security Policy (CSP) directives for cross-domain...CVE-2016-2833Fix available6.1 Medium
- mozilla firefox, canonical ubuntu linux, opensuse leap +1 more +3 moreMozilla Firefox before 47.0 allows remote attackers to discover the list of disabled plugins via...CVE-2016-2832Fix available4.3 Medium
- mozilla firefox, canonical ubuntu linux, debian linux +2 more +4 moreMozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 do not ensure that the user approves...CVE-2016-2831Fix available8.8 High
- mozilla firefox, canonical ubuntu linux, opensuse leap +1 more +3 moreMozilla Firefox before 47.0 allows remote attackers to spoof permission notifications via a...CVE-2016-2829Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux, debian linux +2 more +4 moreUse-after-free vulnerability in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2...CVE-2016-2828Fix available8.8 High
- Show moreLoading…