Skip to contentMozilla vulnerabilities
Newest
- mozilla firefoxWhen parsing internationalized domain names, high bits of the characters in the URLs were...CVE-2021-435334.3 Medium
- mozilla firefoxWhen receiving a URL through a SEND intent, Firefox would have searched for the text, but...CVE-2021-43544Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson...CVE-2021-4129Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIt was possible to recreate previous cursor spoofing attacks against users with a zoomed native...CVE-2021-43546Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreUsing the Location API in a loop could have caused severe application hangs and crashes. This...CVE-2021-43545Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDocuments loaded with the CSP sandbox directive could have escaped the sandbox's script...CVE-2021-43543Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreUsing XMLHttpRequest, an attacker could have identified installed applications by probing error...CVE-2021-43542Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen invoking protocol handlers for external protocols, a supplied parameter URL containing...CVE-2021-43541Fix available6.5 Medium
- mozilla firefoxWebExtensions with the correct permissions were able to create and install ServiceWorkers for...CVE-2021-43540Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreFailure to correctly record the location of live pointers across wasm instance calls resulted in...CVE-2021-43539Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy misusing a race in our notification code, an attacker could have forcefully hidden the...CVE-2021-43538Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAn incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt...CVE-2021-43537Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreUnder certain circumstances, asynchronous functions could have caused a navigation to fail but...CVE-2021-43536Fix available6.5 Medium
- mozilla nss, nss esr, netapp cloud backup +7 more +9 moreNSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap...CVE-2021-43527Fix availableEPSS 17.6%9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreThe executable file warning was not presented when downloading .inetloc files, which, due to a...CVE-2021-38510Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMicrosoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will...CVE-2021-38505Fix available6.5 Medium
- mozilla thunderbirdThunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021...CVE-2021-43529Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA use-after-free could have occured when an HTTP2 session object was released on a different...CVE-2021-43535Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers and community members reported memory safety bugs present in Firefox 93 and...CVE-2021-43534Fix available8.8 High
- mozilla firefox, firefox mobile +1 moreFirefox for Android allowed navigations through the `intent://` protocol, which could be used to...CVE-2021-29993Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDue to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with...CVE-2021-38509Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy displaying a form validity message in the correct location at the same time as a permission...CVE-2021-38508Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently...CVE-2021-38507Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThrough a series of navigations, Firefox could have entered fullscreen mode without notification...CVE-2021-38506Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen interacting with an HTML input element's file picker dialog with webkitdirectory set, a use...CVE-2021-38504Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to...CVE-2021-38503Fix available10.0 Critical
- mozilla thunderbird, debian linux +1 moreThunderbird ignored the configuration to require STARTTLS security for an SMTP connection. A MITM...CVE-2021-38502Fix available5.9 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...CVE-2021-38501Fix available8.8 High
- mozilla firefoxMozilla developers reported memory safety bugs present in Firefox 92. Some of these bugs showed...CVE-2021-38499Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreDuring process shutdown, a document could have caused a use-after-free of a languages service...CVE-2021-38498Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreThrough use of reportValidity() and window.open(), a plain-text validation message could have...CVE-2021-38497Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...CVE-2021-38500Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDuring operations on MessageTasks, a task may have been removed while it was still scheduled,...CVE-2021-38496Fix available8.8 High
- mozilla firefox esr, thunderbird +1 moreMozilla developers reported memory safety bugs present in Thunderbird 78.13.0. Some of these bugs...CVE-2021-38495Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen delegating navigations to the operating system, Firefox would accept the `mk` scheme which...CVE-2021-38492Fix available6.5 Medium
- mozilla firefoxMozilla developers reported memory safety bugs present in Firefox 91. Some of these bugs showed...CVE-2021-38494Fix available8.8 High
- mozilla firefoxMixed-content checks were unable to analyze opaque origins which led to some mixed content being...CVE-2021-38491Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some...CVE-2021-38493Fix available8.8 High
- botan project botan, mozilla thunderbird, fedoraproject fedora +2 moreThe ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products,...CVE-2021-40529Fix available5.9 Medium
- mozilla firefox, thunderbird +1 moreFirefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate...CVE-2021-29991Fix available8.1 High
- mozilla firefoxFirefox for Android could get stuck in fullscreen mode and not exit it even after normal...CVE-2021-29983Fix available6.5 Medium
- mozilla firefoxMozilla developers and community members reported memory safety bugs present in Firefox 90. Some...CVE-2021-29990Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some...CVE-2021-29989Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreFirefox incorrectly treated an inline list-item element as a block element, resulting in an out...CVE-2021-29988Fix available8.8 High
- mozilla firefox, thunderbird +1 moreAfter requesting multiple permissions, and closing the first permission panel, subsequent...CVE-2021-29987Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA suspected race condition when calling getaddrinfo led to memory corruption and a potentially...CVE-2021-29986Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +2 moreA use-after-free vulnerability in media channels could have led to memory corruption and a...CVE-2021-29985Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreInstruction reordering resulted in a sequence of instructions that would cause an object to be...CVE-2021-29984Fix available8.8 High
- mozilla firefox, thunderbird +1 moreDue to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object,...CVE-2021-29982Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreAn issue present in lowering/register allocation could have led to obscure but deterministic...CVE-2021-29981Fix available8.8 High
- Show moreLoading…