Skip to contentMozilla vulnerabilities
Newest
- mozilla firefoxIncorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security...CVE-2020-12390Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...CVE-2020-6831Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers and community members reported memory safety bugs present in Firefox 75 and...CVE-2020-12395Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of...CVE-2020-12392Fix available5.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA race condition when running shutdown code for Web Worker led to a use-after-free vulnerability....CVE-2020-12387Fix available8.1 High
- mozilla firefox esrA malicious Android application could craft an Intent that would have been processed by Firefox...CVE-2020-68287.5 High
- mozilla firefox esrWhen following a link that opened an intent://-schemed URL, causing a custom tab to be opened,...CVE-2020-68274.7 Medium
- mozilla firefoxMozilla developers Tyson Smith, Bob Clary, and Alexandru Michis reported memory safety bugs...CVE-2020-6826Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers and community members Tyson Smith and Christian Holler reported memory safety...CVE-2020-6825Fix available9.8 Critical
- mozilla firefoxInitially, a user opens a Private Browsing Window and generates a password for a site, then...CVE-2020-6824Fix available2.8 Low
- mozilla firefoxA malicious extension could have called <code>browser.identity.launchWebAuthFlow</code>,...CVE-2020-6823Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreOn 32-bit builds, an out of bounds write could have occurred when processing an image larger than...CVE-2020-6822Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen reading from areas partially or fully outside the source resource with WebGL's <code...CVE-2020-6821Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreUnder certain conditions, when handling a ReadableStream, a race condition can cause a use-after...CVE-2020-6820In KEVFix available8.1 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreUnder certain conditions, when running the nsDocShell destructor, a race condition can cause a...CVE-2020-6819In KEVFix available8.1 High
- mozilla bleachregular expression denial-of-service (ReDoS) in BleachCVE-2020-6817Fix available7.5 High
- mozilla bleach, fedoraproject fedora +1 moreBleach vulnerable to mutation XSS via whitelisted math or svg and raw tagCVE-2020-6816Fix available6.1 Medium
- mozilla firefoxMozilla developers reported memory safety and script safety bugs present in Firefox 73. Some of...CVE-2020-6815Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of...CVE-2020-6814Fix available9.8 Critical
- mozilla firefoxWhen protecting CSS blocks with the nonce feature of Content Security Policy, the @import...CVE-2020-6813Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe first time AirPods are connected to an iPhone, they become named after the user's name by...CVE-2020-6812Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...CVE-2020-6811Fix available8.8 High
- mozilla firefoxAfter a website had entered fullscreen mode, it could have used a previously opened popup to...CVE-2020-6810Fix available4.3 Medium
- mozilla firefoxWhen a JavaScript URL (javascript:) is evaluated and the result is a string, this string is...CVE-2020-6808Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code...CVE-2020-6807Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the...CVE-2020-6806Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen removing data about an origin whose tab was recently closed, a use-after-free could occur in...CVE-2020-6805Fix available8.8 High
- mozilla firefoxWhen a Web Extension had the all-urls permission and made a fetch request with a mode set to ...CVE-2020-6809Fix available7.5 High
- mozilla webthings gatewayXSS in Mozilla WebThings GatewayCVE-2020-68048.8 High
- mozilla webthings gatewayOpen redirect in Mozilla WebThings GatewayCVE-2020-68035.4 Medium
- mozilla bleach, fedoraproject fedora +1 moreXSS in Bleach when noscript and raw tag whitelistedCVE-2020-6802Fix available6.1 Medium
- mozilla personaCross-site request forgery (CSRF) vulnerability in the persona_xsrf_token function in persona...CVE-2013-42278.8 High
- mozilla firefoxMozilla Firefox before 25 allows modification of anonymous content of pluginProblem.xml bindingCVE-2013-55944.3 Medium
- mozilla firefox, firefox esr +1 moreCommand line arguments could have been injected during Firefox invocation as a shell handler for...CVE-2020-6799Fix available8.8 High
- mozilla firefox, thunderbird, firefox esr +2 moreBy downloading a file with the .fileloc extension, a semi-privileged extension could launch an...CVE-2020-6797Fix available4.3 Medium
- mozilla thunderbirdWhen processing a message that contains multiple S/MIME signatures, a bug in the MIME processing...CVE-2020-6795Fix available6.5 Medium
- mozilla thunderbird, canonical ubuntu linux +1 moreIf a user saved passwords before Thunderbird 60 and then later set a master password, an...CVE-2020-6794Fix available6.5 Medium
- mozilla thunderbirdWhen processing an email message with an ill-formed envelope, Thunderbird could read data from a...CVE-2020-6793Fix available6.5 Medium
- mozilla thunderbird, canonical ubuntu linux +1 moreWhen deriving an identifier for an email message, uninitialized memory was used in addition to...CVE-2020-6792Fix available4.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreMozilla developers reported memory safety bugs present in Firefox 72. Some of these bugs showed...CVE-2020-6801Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers and community members reported memory safety bugs present in Firefox 72 and...CVE-2020-6800Fix available8.8 High
- mozilla firefox, thunderbird, firefox esr +2 moreIf a template tag was used in a select tag, the parser could be confused and allow JavaScript...CVE-2020-6798Fix available6.1 Medium
- mozilla firefox, firefox esr +1 moreA content process could have modified shared memory relating to crash reporting information,...CVE-2020-6796Fix available8.8 High
- mozilla firefoxMozilla Firefox prior to 3.6 has a DoS vulnerability due to an issue in the validation of...CVE-2011-26696.5 Medium
- mozilla firefoxMozilla Firefox through 1.5.0.3 has a vulnerability in processing the content-length headerCVE-2011-26688.8 High
- mozilla firefoxMozilla Firefox before 3.6 is vulnerable to XSS via the rendering of Cascading Style SheetsCVE-2011-26706.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreIncorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a...CVE-2019-17026In KEVPublic exploitFix availableEPSS 46.3%8.8 High
- mozilla firefox, canonical ubuntu linux +1 moreMozilla developers reported memory safety bugs present in Firefox 71. Some of these bugs showed...CVE-2019-17025Fix available8.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +9 more +11 moreMozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some...CVE-2019-17024Fix available8.8 High
- mozilla firefox, canonical ubuntu linux, debian linux +2 moreAfter a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3,...CVE-2019-17023Fix available6.5 Medium
- Show moreLoading…