Skip to contentMozilla vulnerabilities
Newest
- mozilla firefoxA custom cursor defined by scripting on a site can position itself over the addressbar to spoof...CVE-2019-11695Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreThe bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics...CVE-2019-11693Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA use-after-free vulnerability can occur when listeners are removed from the event listener...CVE-2019-11692Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop,...CVE-2019-11691Fix available9.8 Critical
- mozilla firefoxIn Firefox Developer Tools it is possible that pasting the result of the 'Copy as cURL' command...CVE-2019-98049.8 Critical
- mozilla firefoxOn Android systems, Firefox can load a library from APITRACE_LIB, which is writable by all users...CVE-2019-97987.4 High
- mozilla firefoxThe about:crashcontent and about:crashparent pages can be triggered by web content. These pages...CVE-2018-185106.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreFirefox will accept any registered Program ID as an external protocol handler and offer to launch...CVE-2019-9801Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA vulnerability was discovered where specific command line arguments are not properly discarded...CVE-2019-9794Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreIncorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and...CVE-2019-9813Public exploitFix available8.8 High
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreIncorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead...CVE-2019-9810Public exploitFix availableEPSS 27.2%8.8 High
- mozilla firefoxIf the source for resources on a page is through an FTP connection, it is possible to trigger a...CVE-2019-9809Fix available7.5 High
- mozilla firefoxIf WebRTC permission is requested from documents with data: or blob: URLs, the permission...CVE-2019-9808Fix available5.3 Medium
- mozilla firefoxWhen arbitrary text is sent over an FTP connection and a page reload is initiated, it is possible...CVE-2019-9807Fix available4.3 Medium
- mozilla firefoxA vulnerability exists during authorization prompting for FTP transaction where successive modal...CVE-2019-9806Fix available7.5 High
- mozilla firefoxA latent vulnerability exists in the Prio library where data may be read from uninitialized...CVE-2019-9805Fix available9.8 Critical
- mozilla firefoxThe Upgrade-Insecure-Requests (UIR) specification states that if UIR is enabled through Content...CVE-2019-9803Fix available7.4 High
- mozilla firefoxIf a Sandbox content process is compromised, it can initiate an FTP download which will then use...CVE-2019-9802Fix available7.5 High
- mozilla firefoxInsufficient bounds checking of data during inter-process communication might allow a compromised...CVE-2019-9799Fix available7.5 High
- mozilla firefoxCross-origin images can be read in violation of the same-origin policy by exporting an image...CVE-2019-9797Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers...CVE-2019-9796Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could...CVE-2019-9795Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA mechanism was discovered that removes some bounds checking for string, array, or typed array...CVE-2019-9793Fix available5.9 Medium
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreThe IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to...CVE-2019-9792Public exploitFix availableEPSS 13.3%9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreThe type inference system allows the compilation of functions that can cause type confusions...CVE-2019-9791Public exploitFix availableEPSS 19.9%9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is...CVE-2019-9790Fix available9.8 Critical
- mozilla firefoxMozilla developers and community members reported memory safety bugs present in Firefox 65. Some...CVE-2019-9789Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreMozilla developers and community members reported memory safety bugs present in Firefox 65,...CVE-2019-9788Fix available9.8 Critical
- libjpeg-turbo, mozilla mozjpeg, debian linux +2 more +4 moreget_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows...CVE-2018-14498Fix available6.5 Medium
- mozilla firefoxWhen the RSS Feed preview about:feeds page is framed within another page, it can be used in...CVE-2018-184968.8 High
- mozilla firefoxIn private browsing mode on Firefox for Android, favicons are cached in the cache/icons folder as...CVE-2018-124005.3 Medium
- mozilla thunderbirdA crash can occur when processing a crafted S/MIME message or an XPI package containing a crafted...CVE-2018-18513Fix available7.5 High
- mozilla thunderbirdA use-after-free vulnerability can occur while playing a sound notification in Thunderbird. The...CVE-2018-18512Fix available9.8 Critical
- libpng, canonical ubuntu linux, debian linux +29 more +31 morepng_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because...CVE-2019-7317Fix available5.3 Medium
- mozilla firefox, canonical ubuntu linux, debian linux +9 more +11 moreWhen proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC)...CVE-2018-18506Fix available5.9 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added...CVE-2018-18505Fix available10.0 Critical
- mozilla firefox, canonical ubuntu linux +1 moreA crash and out-of-bounds read can occur when the buffer of a texture client is freed while it is...CVE-2018-18504Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreWhen JavaScript is used to create and manipulate an audio buffer, a potentially exploitable crash...CVE-2018-18503Fix available8.8 High
- mozilla firefox, canonical ubuntu linux +1 moreMozilla developers and community members reported memory safety bugs present in Firefox 64. Some...CVE-2018-18502Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMozilla developers and community members reported memory safety bugs present in Firefox 64 and...CVE-2018-18501Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom...CVE-2018-18500Public exploitFix availableEPSS 12.7%9.8 Critical
- mozilla firefoxCross-origin images can be read from a canvas element in violation of the same-origin policy...CVE-2018-18511Fix available4.3 Medium
- mozilla thunderbirdA flaw during verification of certain S/MIME signatures causes emails to be shown in Thunderbird...CVE-2018-18509Fix available5.3 Medium
- mozilla network security services, nss, siemens ruggedcom rox mx5000 firmware +7 more +9 moreIn Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can...CVE-2018-18508Fix available6.5 Medium
- mozilla network security services (nss), network security services +1 moreA cached side channel attack during handshakes using RSA encryption could allow for the...CVE-2018-12404Fix availableEPSS 44.2%5.9 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA potential vulnerability leading to an integer overflow can occur during buffer size...CVE-2018-18498Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreLimitations on the URIs allowed to WebExtensions by the browser.windows.create API can be...CVE-2018-18497Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux +1 moreWebExtension content scripts can be loaded into about: pages in some circumstances, in violation...CVE-2018-18495Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA same-origin policy violation allowing the theft of cross-origin URL entries when using the...CVE-2018-18494Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA buffer overflow can occur in the Skia library during buffer offset calculations with hardware...CVE-2018-18493Fix available9.8 Critical
- Show moreLoading…