Skip to contentMozilla vulnerabilities
Newest
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDefault fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar...CVE-2017-77635.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreA number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads,...CVE-2017-7778Fix available9.8 Critical
- mozilla firefox, sil graphite2 +1 moreUse of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache:...CVE-2017-7777Fix available8.8 High
- mozilla firefox, sil graphite2 +1 moreHeap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf:...CVE-2017-7776Fix available8.1 High
- mozilla firefox, sil graphite2 +1 moreOut-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite...CVE-2017-7774Fix available9.1 Critical
- mozilla firefox, sil graphite2 +1 moreHeap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src...CVE-2017-7773Fix available8.8 High
- mozilla firefox, sil graphite2 +1 moreHeap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.CVE-2017-7772Fix available8.8 High
- mozilla firefox, sil graphite2 +1 moreOut-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.CVE-2017-7771Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreCharacters from the "Canadian Syllabics" unicode block can be mixed with characters from other...CVE-2017-7764Fix available5.3 Medium
- mozilla firefox, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreWhen entered directly, Reader Mode did not strip the username and password section of URLs...CVE-2017-7762Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreAn out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio...CVE-2017-7758Fix available9.1 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while...CVE-2017-7757Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA use-after-free and use-after-scope vulnerability when logging errors from headers for XML HTTP...CVE-2017-7756Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn out-of-bounds read in WebGL with a maliciously crafted "ImageInfo" object during WebGL...CVE-2017-7754Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability during specific user interactions with the input method editor ...CVE-2017-7752Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability with content viewer listeners that results in a potentially...CVE-2017-7751Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability during video control operations when a "<track>" element holds a...CVE-2017-7750Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability when using an incorrect URL during the reloading of a docshell....CVE-2017-7749Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability with the frameloader during tree reconstruction while regenerating...CVE-2017-5472Fix available9.8 Critical
- mozilla firefoxMemory safety bugs were reported in Firefox 53. Some of these bugs showed evidence of memory...CVE-2017-5471Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMemory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed...CVE-2017-5470Fix available9.8 Critical
- mozilla nss, network security services +1 moreNull pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty...CVE-2017-7502Fix available7.5 High
- [unknown] nss, mozilla network security services +1 morenss before version 3.30 is vulnerable to a remote denial of service during the session handshake...CVE-2016-9574Fix available5.9 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreFixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex....CVE-2017-5469Fix available9.8 Critical
- mozilla firefoxAn issue with incorrect ownership model of "privateBrowsing" information exposed through...CVE-2017-5468Fix available9.1 Critical
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreA potential memory corruption and crash when using Skia content when drawing content outside of...CVE-2017-5467Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreIf a page is loaded from an original site through a hyperlink and contains a redirect to a "data...CVE-2017-5466Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash...CVE-2017-5465Public exploitFix availableEPSS 18.2%9.1 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreDuring DOM manipulations of the accessibility tree through script, the DOM tree can become out of...CVE-2017-5464Fix available9.8 Critical
- mozilla firefox, firefox esr, network security services +2 more +4 moreA flaw in DRBG number generation within the Network Security Services (NSS) library where the...CVE-2017-5462Fix available5.3 Medium
- mozilla network security services, firefox, firefox esr +1 more +3 moreMozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29...CVE-2017-5461Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability in frame selection triggered by a combination of malicious script...CVE-2017-5460Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable...CVE-2017-5459Fix available9.8 Critical
- mozilla firefoxWhen a "javascript:" URL is drag and dropped by a user into the addressbar, the URL will be...CVE-2017-5458Fix available6.1 Medium
- mozilla firefox, firefox esr, redhat enterprise linux +5 more +7 moreA mechanism to bypass file system access protections in the sandbox using the file system request...CVE-2017-5456Fix available9.8 Critical
- mozilla firefox, firefox esr, redhat enterprise linux +5 more +7 moreThe internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and...CVE-2017-5455Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA mechanism to bypass file system access protections in the sandbox to use the file picker to...CVE-2017-5454Fix available7.5 High
- mozilla firefoxA mechanism to inject static HTML into the RSS reader preview page due to a failure to escape...CVE-2017-5453Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA mechanism to spoof the addressbar through the user interaction on the addressbar and the ...CVE-2017-5451Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA possibly exploitable crash triggered during layout and manipulation of bidirectional unicode...CVE-2017-5449Fix available7.5 High
- mozilla firefox, firefox esr, debian linux +6 more +8 moreAn out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media...CVE-2017-5448Fix available8.6 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn out-of-bounds read during the processing of glyph widths during text layout. This results in a...CVE-2017-5447Public exploitFix availableEPSS 17.0%9.1 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect...CVE-2017-5446Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA vulnerability while parsing "application/http-index-format" format content where uninitialized...CVE-2017-5445Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA buffer overflow vulnerability while parsing "application/http-index-format" format content when...CVE-2017-5444Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn out-of-bounds write vulnerability while decoding improperly formed BinHex format archives....CVE-2017-5443Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability during changes in style when manipulating DOM elements. This...CVE-2017-5442Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability when holding a selection during scroll events. This results in a...CVE-2017-5441Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability during XSLT processing due to a failure to propagate error...CVE-2017-5440Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability during XSLT processing due to poor handling of template parameters...CVE-2017-5439Fix available9.8 Critical
- Show moreLoading…