Skip to contentMozilla vulnerabilities
Newest
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking...CVE-2023-6206Fix available5.4 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIt was possible to cause the use of a MessagePort after it had already been freed, which could...CVE-2023-6205Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreOn some systems—depending on the graphics settings and drivers—it was possible to force an out-of...CVE-2023-6204Fix available6.5 Medium
- mozilla firefox for ios, firefox mobile +1 moreWhen opening a page in reader mode, the redirect URL could have caused attacker-controlled script...CVE-2023-57586.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAddress bar spoofing via bidirectional charactersCVE-2023-5732Fix available6.5 Medium
- mozilla firefoxMemory safety bugs present in Firefox 118. Some of these bugs showed evidence of memory...CVE-2023-5731Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of...CVE-2023-5730Fix available9.8 Critical
- mozilla firefoxA malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt....CVE-2023-5729Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDuring garbage collection extra operations were performed on a object that should not be. This...CVE-2023-5728Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreThe executable file warning was not presented when downloading .msix, .msixbundle, .appx, and ...CVE-2023-5727Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA website could have obscured the full screen notification by using the file open dialog. This...CVE-2023-5726Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA malicious installed WebExtension could open arbitrary URLs, which under the right circumstance...CVE-2023-5725Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDrivers are not always robust to extremely large draw calls and in some cases this scenario could...CVE-2023-5724Fix available7.5 High
- mozilla firefoxAn attacker with temporary script access to a site could have set a cookie containing invalid...CVE-2023-5723Fix available5.3 Medium
- mozilla firefoxUsing iterative requests an attacker was able to learn the size of an opaque response, as well as...CVE-2023-5722Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIt was possible for certain browser prompts and dialogs to be activated or dismissed...CVE-2023-5721Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreNSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack...CVE-2023-5388Fix available6.5 Medium
- mozilla nssThe NSS code used for checking PKCS#1 v1.5 was leaking information useful in mounting...CVE-2023-4421Fix available6.5 Medium
- mozilla common voice, common-voice +1 moreCommon Voice Cross-site Scripting vulnerabilityCVE-2023-428086.1 Medium
- google chrome, libvpx, apple ipados +9 more +11 moreElectron affected by libvpx's heap buffer overflow in vp8 encodingCVE-2023-5217In KEVPublic exploitFix availableEPSS 49.0%8.8 High
- mozilla firefoxDuring process shutdown, it was possible that an `ImageBitmap` was created that would later be...CVE-2023-5175Fix available9.8 Critical
- mozilla firefoxIn a non-standard configuration of Firefox, an integer overflow could have occurred based on...CVE-2023-5173Fix available7.5 High
- mozilla firefoxA hashtable in the Ion Engine could have been mutated while there was a live interior reference,...CVE-2023-5172Fix available9.8 Critical
- mozilla firefoxIn canvas rendering, a compromised content process could have caused a surface to change...CVE-2023-5170Fix available7.4 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of...CVE-2023-5176Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreIf Windows failed to duplicate a handle during process creation, the sandbox code may have...CVE-2023-5174Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreDuring Ion compilation, a Garbage Collection could have resulted in a use-after-free condition,...CVE-2023-5171Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreA compromised content process could have provided malicious data in a `PathRecording` resulting...CVE-2023-5169Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in...CVE-2023-51689.8 Critical
- google chrome, libwebp, bandisoft honeyview +10 more +12 moreDuplicate Advisory: Bundled libwebp in Pillow vulnerableCVE-2023-4863In KEVPublic exploitFix availableEPSS 100.0%8.8 High
- mozilla vpn 2.16.1, vpn, vpn client for linux +2 moreAn invalid Polkit Authentication check and missing authentication requirements for D-Bus methods...CVE-2023-41045.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreBuffer Overflow in WebGL glGetProgramivCVE-2023-4582Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreInteger Overflow in RecordedSourceSurfaceCreationCVE-2023-4576Fix available8.6 High
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2CVE-2023-4585Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2CVE-2023-4584Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreBrowsing Context potentially not cleared when closing Private WindowCVE-2023-4583Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreXLL file extensions were downloadable without warningsCVE-2023-4581Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 morePush notifications saved to disk unencryptedCVE-2023-4580Fix available6.5 Medium
- mozilla firefoxPersisted search terms were formatted as URLsCVE-2023-4579Fix available3.1 Low
- mozilla firefox, firefox esr, thunderbird +2 moreError reporting methods in SpiderMonkey could have triggered an Out of Memory ExceptionCVE-2023-4578Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in JIT UpdateRegExpStaticsCVE-2023-4577Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in IPC FilePickerShownCallbackCVE-2023-4575Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in IPC ColorPickerShownCallbackCVE-2023-4574Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in IPC CanvasTranslatorCVE-2023-4573Fix available6.5 Medium
- mozilla firefoxA potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was...CVE-2022-468848.8 High
- mozilla firefoxMemory safety bugs present in Firefox 115. Some of these bugs showed evidence of memory...CVE-2023-40589.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of...CVE-2023-4057Fix available9.8 Critical
- mozilla firefox, firefox esr, debian linux +2 moreMemory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115...CVE-2023-4056Fix available9.8 Critical
- mozilla firefox, firefox esr, debian linux +2 moreWhen the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar...CVE-2023-4055Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen opening appref-ms files, Firefox did not warn the user that these files may contain...CVE-2023-4054Fix available5.5 Medium
- Show moreLoading…