Skip to contentMozilla vulnerabilities
Newest
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMemory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed...CVE-2017-7826Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreSeveral fonts on OS X display some Tibetan and Arabic characters as whitespace. When used in the...CVE-2017-78255.3 Medium
- mozilla firefoxThe AES-GCM implementation in WebCrypto API accepts 0-length IV when it should require a length...CVE-2017-7822Fix available5.3 Medium
- mozilla firefoxA vulnerability where WebExtensions can download and attempt to open a file of some non...CVE-2017-7821Fix available9.8 Critical
- mozilla firefoxThe "instanceof" operator can bypass the Xray wrapper mechanism. When called on web content from...CVE-2017-7820Fix available5.3 Medium
- mozilla firefoxWebExtensions could use popups and panels in the extension UI to load an "about:" privileged URL,...CVE-2017-7816Fix available5.3 Medium
- mozilla firefoxOn pages containing an iframe, the "data:" protocol can be used to create a modal dialog through...CVE-2017-7815Fix available5.3 Medium
- mozilla firefoxInside the JavaScript parser, a cast of an integer to a narrower type can result in data read...CVE-2017-7813Fix available8.2 High
- mozilla firefoxIf web content on a page is dragged onto portions of the browser UI, such as the tab bar, links...CVE-2017-7812Fix available5.3 Medium
- mozilla firefoxMemory safety bugs were reported in Firefox 55. Some of these bugs showed evidence of memory...CVE-2017-7811Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA buffer overflow occurs when drawing and validating elements with the ANGLE graphics library,...CVE-2017-7824Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe content security policy (CSP) "sandbox" directive did not create a unique origin for the...CVE-2017-7823Fix available5.4 Medium
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA use-after-free vulnerability can occur in design mode when image objects are resized if objects...CVE-2017-7819Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet...CVE-2017-7818Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreFile downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks...CVE-2017-7814Fix available7.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMemory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed...CVE-2017-7810Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDuring TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This...CVE-2017-7805Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur in the Fetch API when the worker or the associated...CVE-2017-7793Fix available9.8 Critical
- mozilla firefoxRemote code execution in the Venkman script debugger in Mozilla Firefox before 2.0.0.8.CVE-2007-53419.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreThe destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by malicious...CVE-2017-78047.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreAn error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is...CVE-2017-77825.3 Medium
- mozilla firefox, thunderbird, debian linux +6 more +8 moreA use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during...CVE-2017-7809Fix available9.8 Critical
- mozilla firefoxA content security policy (CSP) "frame-ancestors" directive containing origins with paths allows...CVE-2017-7808Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files...CVE-2017-7807Fix available8.1 High
- mozilla firefoxA use-after-free vulnerability can occur when the layer manager is freed too early when rendering...CVE-2017-7806Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreWhen a page's content security policy (CSP) header contains a "sandbox" directive, other...CVE-2017-7803Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur when manipulating the DOM during the resize event of an...CVE-2017-7802Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur while re-computing layout for a "marquee" element during...CVE-2017-7801Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur in WebSockets when the object holding the connection is...CVE-2017-7800Fix available9.8 Critical
- mozilla firefoxJavaScript in the "about:webrtc" page is not sanitized properly being assigned to "innerHTML"....CVE-2017-7799Fix available6.1 Medium
- mozilla firefox, firefox esr, debian linux +6 more +8 moreThe Developer Tools feature suffers from a XUL injection vulnerability due to improper...CVE-2017-7798Fix available8.8 High
- mozilla firefoxResponse header name interning does not have same-origin protections and these headers are stored...CVE-2017-7797Fix available7.5 High
- mozilla firefoxOn Linux systems, if the content process is compromised, the sandbox broker will allow files to...CVE-2017-7794Fix available7.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA buffer overflow will occur when viewing a certificate in the certificate manager if the...CVE-2017-7792Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreOn pages containing an iframe, the "data:" protocol can be used to create a modal alert that will...CVE-2017-7791Fix available5.3 Medium
- mozilla firefoxWhen an "iframe" has a "sandbox" attribute and its content is specified using "srcdoc", that...CVE-2017-7788Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreSame-origin policy protections can be bypassed on pages with embedded iframes during page reloads...CVE-2017-7787Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA buffer overflow can occur when the image renderer attempts to paint non-displayable SVG...CVE-2017-7786Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA)...CVE-2017-7785Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur when reading an image observer during frame...CVE-2017-7784Fix available9.8 Critical
- mozilla firefoxIf a long user name is used in a username/password combination in a site URL (such as " http:/...CVE-2017-7783Public exploitFix availableEPSS 13.8%7.5 High
- mozilla firefoxAn error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine...CVE-2017-7781Fix available5.9 Medium
- mozilla firefoxMemory safety bugs were reported in Firefox 54. Some of these bugs showed evidence of memory...CVE-2017-7780Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreMemory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of...CVE-2017-7779Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line,...CVE-2017-7753Fix available9.1 Critical
- mozilla firefoxIf a server sends two Strict-Transport-Security (STS) headers for a single connection, they will...CVE-2017-7789Fix available5.3 Medium
- mozilla firefox, firefox esr +1 moreThe Mozilla Maintenance Service can be invoked by an unprivileged user to read 32 bytes of any...CVE-2017-77685.5 Medium
- mozilla firefox, firefox esr +1 moreThe Mozilla Maintenance Service "helper.exe" application creates a temporary directory writable...CVE-2017-77615.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreThe Firefox installer on Windows can be made to load malicious DLL files stored in the same...CVE-2017-77557.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreThe "Mark of the Web" was not correctly saved on Windows when files with very long names were...CVE-2017-77657.5 High
- Show moreLoading…