Skip to contentMozilla vulnerabilities
Newest
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThrough a series of API calls and redirects, an attacker-controlled alert dialog could have been...CVE-2024-1547Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen storing and re-accessing data on a networking channel, the length of buffers may have been...CVE-2024-1546Fix available7.5 High
- mozilla firefox for ios, firefox mobile +1 moreWhen a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before...CVE-2024-09536.1 Medium
- mozilla firefoxSome WASM source files could have caused a crash when loaded in devtools. This vulnerability...CVE-2024-0754Fix available6.5 Medium
- mozilla firefoxA use-after-free crash could have occurred on macOS if a Firefox update were being applied on a...CVE-2024-07526.5 Medium
- mozilla firefoxA compromised content process could have updated the document URI. This could have allowed an...CVE-2024-0748Fix available4.3 Medium
- mozilla firefoxThe WebAudio `OscillatorNode` object was susceptible to a stack buffer overflow. This could have...CVE-2024-0745Fix available8.8 High
- mozilla firefoxIn some circumstances, JIT compiled code could have dereferenced a wild pointer value. This could...CVE-2024-0744Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreAn unchecked return value in TLS handshake code could have caused a potentially exploitable crash...CVE-2024-0743Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of...CVE-2024-0755Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIn specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This...CVE-2024-0753Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA malicious devtools extension could have been used to escalate privileges. This vulnerability...CVE-2024-0751Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA bug in popup notifications delay calculation could have made it possible for an attacker to...CVE-2024-0750Fix available8.8 High
- mozilla firefox, thunderbird, debian linux +1 more +3 moreA phishing site could have repurposed an `about:` dialog to show phishing content with an...CVE-2024-0749Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security...CVE-2024-0747Fix available6.5 Medium
- debian linux, mozilla firefox, firefox esr +1 more +3 moreA Linux user opening the print preview dialog could have caused the browser to crash. This...CVE-2024-0746Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIt was possible for certain browser prompts and dialogs to be activated or dismissed...CVE-2024-0742Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAn out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a...CVE-2024-0741Public exploitFix available6.5 Medium
- mozilla focus for ios, firefox focus +1 moreAn attacker could execute unauthorized script on a legitimate site through UXSS using window.open...CVE-2024-06066.1 Medium
- mozilla focus for ios, firefox focus +1 moreUsing a javascript: URI with a setTimeout race condition, an attacker can execute unauthorized...CVE-2024-06057.5 High
- mozilla firefox, debian linux +1 moreMemory safety bugs present in Firefox 120. Some of these bugs showed evidence of memory...CVE-2023-6873Fix available8.8 High
- mozilla firefoxBrowser tab titles were being leaked by GNOME to system logs. This could potentially expose the...CVE-2023-6872Fix available6.5 Medium
- mozilla firefoxUnder certain conditions, Firefox did not display a warning when a user attempted to navigate to...CVE-2023-6871Fix available4.3 Medium
- mozilla firefox, firefox focus +1 moreApplications which spawn a Toast notification in a background thread may have obscured fullscreen...CVE-2023-68704.3 Medium
- mozilla firefoxA `` element could have been manipulated to paint content outside of a sandboxed iframe. This...CVE-2023-6869Fix available6.5 Medium
- mozilla firefoxIn some instances, the user-agent would allow push requests which lacked a valid VAPID even...CVE-2023-68684.3 Medium
- mozilla firefox, firefox esr, debian linux +2 moreThe timing of a button click causing a popup to disappear was approximately the same length as...CVE-2023-6867Fix available6.1 Medium
- mozilla firefoxTypedArrays can be fallible and lacked proper exception handling. This could lead to abuse in...CVE-2023-6866Fix available8.8 High
- mozilla firefox, firefox esr, debian linux +2 more`EncryptingOutputStream` was susceptible to exposing uninitialized data. This issue could only...CVE-2023-6865Fix available6.5 Medium
- mozilla firefoxMultiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This...CVE-2023-6135Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of...CVE-2023-6864Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on...CVE-2023-6863Fix available8.8 High
- mozilla firefox esr, thunderbird, debian linux +2 moreA use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest...CVE-2023-6862Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in...CVE-2023-6861Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe `VideoBridge` allowed any content process to use textures produced by remote decoders. This...CVE-2023-6860Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA use-after-free condition affected TLS socket creation when under memory pressure. This...CVE-2023-6859Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreFirefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM...CVE-2023-6858Fix available8.8 High
- debian linux, mozilla firefox, firefox esr +1 more +3 moreWhen resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be...CVE-2023-6857Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on...CVE-2023-6856Fix availableEPSS 20.6%8.8 High
- mozilla thunderbird, debian linux +1 moreThe signature of a digitally signed S/MIME email message may optionally specify the signature...CVE-2023-50761Fix available4.3 Medium
- mozilla thunderbird, debian linux +1 moreWhen processing a PGP/MIME payload that contains digitally signed text, the first paragraph of...CVE-2023-50762Fix available4.3 Medium
- mozilla firefoxMemory safety bugs present in Firefox 119. Some of these bugs showed evidence of memory...CVE-2023-6213Fix available8.8 High
- mozilla firefox for ios, firefox mobile +1 moreAn attacker could have performed HTML template injection via Reader Mode and exfiltrated user...CVE-2023-490616.1 Medium
- mozilla firefox for ios, firefox mobile +1 moreAn attacker could have accessed internal pages or data by ex-filtrating a security key from...CVE-2023-490609.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 119, Firefox 115.4, and Thunderbird 115.4. Some of these...CVE-2023-6212Fix available8.8 High
- mozilla firefoxIf an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS...CVE-2023-6211Fix available6.5 Medium
- mozilla firefoxWhen an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly...CVE-2023-6210Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreRelative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../"...CVE-2023-6209Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen using X11, text selected by the page using the Selection API was erroneously copied into the...CVE-2023-6208Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreOwnership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects...CVE-2023-6207Fix available8.8 High
- Show moreLoading…