Skip to contentMozilla vulnerabilities
Newest
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a...CVE-2024-4768Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIf the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not...CVE-2024-4767Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +5 more +7 morePDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDFCVE-2024-4367Public exploitFix availableEPSS 70.7%8.8 High
- mozilla firefoxMemory safety bugs present in Firefox 124. Some of these bugs showed evidence of memory...CVE-2024-3865Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug...CVE-2024-3864Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +2 moreThere was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server...CVE-2024-3302Fix available3.7 Low
- mozilla firefox, firefox esr, thunderbird +2 moreThe executable file warning was not presented when downloading .xrm-ms files.
*Note: This issue...CVE-2024-38639.8 Critical
- mozilla firefoxThe MarkStack assignment operator, part of the JavaScript engine, could access uninitialized...CVE-2024-3862Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIf an AlignedBuffer were assigned to itself, the subsequent self-move could result in an...CVE-2024-3861Fix available4.0 Medium
- mozilla firefoxAn out-of-memory condition during object initialization could result in an empty shape list. If...CVE-2024-3860Fix available6.2 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreOn 32-bit versions there were integer-overflows that led to an out-of-bounds-read that...CVE-2024-3859Fix available5.9 Medium
- mozilla firefoxIt was possible to mutate a JavaScript object so that the JIT could crash while tracing it. This...CVE-2024-3858Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe JIT created incorrect code for arguments in certain cases. This led to potential use-after...CVE-2024-3857Fix available7.8 High
- mozilla firefoxA use-after-free could occur during WASM execution if garbage collection ran during the creation...CVE-2024-3856Fix available8.8 High
- mozilla firefoxIn certain cases the JIT incorrectly optimized MSubstr operations, which led to out-of-bounds...CVE-2024-3855Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIn some code patterns the JIT incorrectly optimized switch statements and generated code with out...CVE-2024-3854Fix available8.8 High
- mozilla firefoxA use-after-free could result if a JavaScript realm was in the process of being initialized when...CVE-2024-3853Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreGetBoundName could return the wrong version of an object when JIT optimizations were applied....CVE-2024-3852Fix available7.5 High
- mozilla firefox, firefox for ios +1 moreDragging Javascript URLs to the address bar could cause them to be loaded, bypassing restrictions...CVE-2024-313934.3 Medium
- mozilla firefox, firefox for ios +1 moreIf an insecure element was added to a page after a delay, Firefox would not replace the secure...CVE-2024-313927.5 High
- mozilla firefox, firefox esr, debian linux +2 moreAn attacker was able to inject an event handler into a privileged object that would allow...CVE-2024-29944Fix available8.4 High
- mozilla firefoxAn attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling...CVE-2024-29943Public exploitFix availableEPSS 22.9%9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreTo harden ICU against exploitation, the behavior for out-of-memory conditions was changed to...CVE-2024-2616Fix available2.7 Low
- mozilla firefox, firefox esr, thunderbird +2 moreAn attacker could have leveraged the Windows Error Reporter to run arbitrary code on the system...CVE-2024-2605Fix available5.9 Medium
- mozilla firefoxMemory safety bugs present in Firefox 123. Some of these bugs showed evidence of memory...CVE-2024-2615Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of...CVE-2024-2614Fix available8.8 High
- mozilla firefoxData was not properly sanitized when decoding a QUIC ACK frame; this could have led to...CVE-2024-2613Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreIf an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have...CVE-2024-2612Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA missing delay on when pointer lock was used could have allowed a malicious page to trick a user...CVE-2024-2611Fix available5.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreUsing a markup injection an attacker could have stolen nonce values. This could have been used to...CVE-2024-2610Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe permission prompt input delay could have expired while the window is not in focus, which made...CVE-2024-2609Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 more`AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()...CVE-2024-2608Fix available8.4 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreReturn registers were overwritten which could have allowed an attacker to execute arbitrary code....CVE-2024-2607Fix available8.1 High
- mozilla firefoxPassing invalid data could have led to invalid wasm values being created, such as arbitrary...CVE-2024-2606Fix available3.7 Low
- mozilla thunderbird, debian linux +1 moreThe encrypted subject of an email message could be incorrectly and permanently assigned to an...CVE-2024-1936Fix available7.5 High
- mozilla firefox, firefox for ios +1 moreUpon scanning a JavaScript URI with the QR code scanner, an attacker could have executed...CVE-2024-262814.7 Medium
- mozilla firefox, firefox for ios +1 moreUsing an AMP url with a canonical element, an attacker could have executed JavaScript from an...CVE-2024-262827.1 High
- mozilla firefox, firefox for ios +1 moreAn attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI...CVE-2024-262837.8 High
- mozilla focus for ios, firefox focus +1 moreUtilizing a 302 redirect, an attacker could have conducted a Universal Cross-Site Scripting (UXSS...CVE-2024-262846.1 Medium
- mozilla focus for ios, firefox focus +1 moreAn attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI...CVE-2024-15638.1 High
- mozilla firefoxMemory safety bugs present in Firefox 122. Some of these bugs showed evidence of memory...CVE-2024-1557Fix available8.1 High
- mozilla firefoxThe incorrect object was checked for NULL in the built-in profiler, potentially leading to...CVE-2024-1556Fix available6.5 Medium
- mozilla firefoxWhen opening a website using the `firefox://` protocol handler, SameSite cookies were not...CVE-2024-1555Fix available8.3 High
- mozilla firefoxThe `fetch()` API and navigation incorrectly shared the same cache, as the cache key did not...CVE-2024-1554Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of...CVE-2024-1553Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIncorrect code generation could have led to unexpected numeric conversions and potential...CVE-2024-1552Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreSet-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an...CVE-2024-1551Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA malicious website could have used a combination of exiting fullscreen mode and ...CVE-2024-1550Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIf a website set a large custom cursor, portions of the cursor could have overlapped with the...CVE-2024-1549Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA website could have obscured the fullscreen notification by using a dropdown select input...CVE-2024-1548Fix available4.3 Medium
- Show moreLoading…