Skip to contentMozilla vulnerabilities
Newest
- mozilla firefox, firefox esr, thunderbird +2 moreUninitialized memory in a canvas object could have caused an incorrect free() leading to memory...CVE-2021-29980Fix available8.8 High
- mozilla firefoxIf a user had granted a permission to a webpage and saved that grant, any webpage running on the...CVE-2021-299719.8 Critical
- mozilla firefoxPassword autofill was enabled without user interaction on insecure websites on Firefox for...CVE-2021-299738.8 High
- mozilla vpnMultiple low security issues were discovered and fixed in a security audit of Mozilla VPN 2.x...CVE-2021-299789.8 Critical
- mozilla hubs cloudHubs Cloud allows users to download shared content, specifically HTML and JS, which could allow...CVE-2021-299796.1 Medium
- mozilla geckodriverMissing checks on Content-Type headers in geckodriver before 0.27.0 could lead to a CSRF...CVE-2020-156608.8 High
- mozilla thunderbirdIf Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected...CVE-2021-29969Fix available5.9 Medium
- mozilla firefoxMozilla developers reported memory safety bugs present in Firefox 89. Some of these bugs showed...CVE-2021-29977Fix available8.8 High
- mozilla firefoxThrough a series of DOM manipulations, a message, over which the attacker had control of the text...CVE-2021-29975Fix available6.5 Medium
- mozilla firefoxWhen network partitioning was enabled, e.g. as a result of Enhanced Tracking Protection settings,...CVE-2021-29974Fix available4.3 Medium
- mozilla firefoxA use-after-free vulnerability was found via testing, and traced to an out-of-date Cairo library....CVE-2021-29972Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in code shared between Firefox and...CVE-2021-29976Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA malicious webpage could have triggered a use-after-free, memory corruption, and a potentially...CVE-2021-29970Fix available8.8 High
- mozilla firefoxLack of escaping allowed HTML injection when a webpage was viewed in Reader View. While a Content...CVE-2021-29944Fix available6.1 Medium
- mozilla firefox, firefox for android +1 moreA malicious webpage could have forced a Firefox for Android user into executing attacker...CVE-2021-299536.1 Medium
- mozilla hubs cloud, hubs cloud reticulum +1 moreProxy functionality built into Hubs Cloud’s Reticulum software allowed access to internal URLs,...CVE-2021-299549.8 Critical
- mozilla firefox, firefox for ios +1 moreWhen a download was initiated, the client did not check whether it was in normal or private...CVE-2021-299584.3 Medium
- mozilla firefoxFirefox for Android would become unstable and hard-to-recover when a website opened too many...CVE-2021-29962Fix available4.3 Medium
- mozilla firefoxAddress bar search suggestions in private browsing mode were re-using session data from normal...CVE-2021-29963Fix available4.3 Medium
- mozilla firefoxA malicious website that causes an HTTP Authentication dialog to be spawned could trick the built...CVE-2021-29965Fix available5.3 Medium
- mozilla firefoxWhen drawing text onto a canvas with WebRender disabled, an out of bounds read could occur. *This...CVE-2021-299688.1 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreOut of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...CVE-2021-30547Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would process...CVE-2021-29964Fix available7.1 High
- mozilla firefox, firefox esr, thunderbird +2 moreThe Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which, in a domain...CVE-2021-29951Fix available6.5 Medium
- mozilla firefoxCross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.6.24 and 4.x through 7...CVE-2011-36566.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some...CVE-2021-29967Fix available8.8 High
- mozilla firefoxMozilla developers reported memory safety bugs present in Firefox 88. Some of these bugs showed...CVE-2021-29966Fix available8.8 High
- mozilla firefoxWhen styling and rendering an oversized `<select>` element, Firefox did not apply correct...CVE-2021-29961Fix available4.3 Medium
- mozilla firefoxFirefox used to cache the last filename used for printing a file. When generating a filename for...CVE-2021-29960Fix available4.3 Medium
- mozilla firefoxWhen a user has already allowed a website to access microphone and camera, disabling camera...CVE-2021-29959Fix available4.3 Medium
- mozilla thunderbirdIf a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also...CVE-2021-29957Fix available4.3 Medium
- mozilla thunderbirdOpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1...CVE-2021-29956Fix available4.3 Medium
- mozilla firefoxA flaw in Mozilla's embedded certificate code might allow web sites to install root certificates...CVE-2007-59676.5 Medium
- mozilla firefox, firefox for android +1 moreWhen Web Render components were destructed, a race condition could have caused undefined behavior...CVE-2021-29952Fix available7.5 High
- mozilla firefoxMozilla developers and community members reported memory safety bugs present in Firefox 87. Some...CVE-2021-29947Fix available8.8 High
- mozilla thunderbirdWhen loading the shared library that provides the OTR protocol implementation, Thunderbird will...CVE-2021-29949Fix available7.8 High
- mozilla thunderbirdSignatures are written to disk before and read during verification, which might be subject to a...CVE-2021-29948Fix available2.5 Low
- mozilla firefox, firefox esr, thunderbird +2 morePorts that were written as an integer overflow above the bounds of a 16-bit integer could have...CVE-2021-29946Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreThe WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read...CVE-2021-29945Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the...CVE-2021-24002Fix available8.8 High
- mozilla firefoxA compromised content process could have performed session history manipulations it should not...CVE-2021-24001Fix available4.3 Medium
- mozilla firefoxA race condition with requestPointerLock() and setTimeout() could have resulted in a user...CVE-2021-24000Fix available3.1 Low
- mozilla firefox, firefox esr, thunderbird +2 moreIf a Blob URL was loaded through some unusual user interaction, it could have been loaded by the...CVE-2021-23999Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreThrough complicated navigations with new windows, an HTTP page could have inherited a secure lock...CVE-2021-23998Fix available6.5 Medium
- mozilla firefoxDue to unexpected data type conversions, a use-after-free could have occurred when interacting...CVE-2021-23997Fix available8.8 High
- mozilla firefoxBy utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the...CVE-2021-23996Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen Responsive Design Mode was enabled, it used references to objects that were previously freed...CVE-2021-23995Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out...CVE-2021-23994Fix available8.8 High
- mozilla thunderbirdAn attacker may perform a DoS attack to prevent a user from sending encrypted email to a...CVE-2021-23993Fix available6.5 Medium
- mozilla thunderbirdThunderbird did not check if the user ID associated with an OpenPGP key has a valid self...CVE-2021-23992Fix available4.3 Medium
- Show moreLoading…