Skip to contentMozilla vulnerabilities
Newest
- mozilla firefox, firefox esr, thunderbird +2 moreType Confusion in Async Generators in Javascript EngineCVE-2024-7652Fix available7.5 High
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 128 and Thunderbird 128CVE-2024-6615Fix available8.8 High
- mozilla firefox, thunderbird +1 moreIncorrect listing of stack framesCVE-2024-6614Fix available4.3 Medium
- mozilla firefox, thunderbird +1 moreIncorrect listing of stack framesCVE-2024-6613Fix available5.5 Medium
- mozilla firefox, thunderbird +1 moreCSP violation leakage when using devtoolsCVE-2024-6612Fix available5.3 Medium
- mozilla firefox, thunderbird +1 moreIncorrect handling of SameSite cookiesCVE-2024-6611Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreForm validation popups could block exiting full-screen modeCVE-2024-6610Fix available4.3 Medium
- mozilla firefox, thunderbird +1 moreMemory corruption in NSSCVE-2024-6609Fix available8.8 High
- mozilla firefox, thunderbird +1 moreCursor could be moved out of the viewport using pointerlock.CVE-2024-6608Fix available4.3 Medium
- mozilla firefox, thunderbird +1 moreLeaving pointerlock by pressing the escape key could be preventedCVE-2024-6607Fix available8.8 High
- mozilla firefox, thunderbird +1 moreOut-of-bounds read in clipboard componentCVE-2024-6606Fix available8.2 High
- mozilla firefoxFirefox Android missed activation delay to prevent tapjackingCVE-2024-66058.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.13CVE-2024-6604Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in thread creationCVE-2024-6603Fix available7.4 High
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in NSSCVE-2024-6602Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreRace condition in permission assignmentCVE-2024-6601Fix available4.7 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in WebGL APICVE-2024-66006.3 Medium
- mozilla firefox for ios, firefox mobile +1 moreIn certain scenarios a malicious website could attempt to display a fake location URL bar which...CVE-2024-383134.3 Medium
- mozilla firefox for ios, firefox mobile +1 moreWhen browsing private tabs, some data related to location history or webpage thumbnails could be...CVE-2024-383126.5 Medium
- mozilla firefoxMemory safety bugs present in Firefox 126. Some of these bugs showed evidence of memory...CVE-2024-5701Fix available9.8 Critical
- mozilla firefoxIn violation of spec, cookie prefixes such as `__Secure` were being ignored if they were not...CVE-2024-5699Fix available9.8 Critical
- mozilla firefoxBy manipulating the fullscreen feature while opening a data-list, an attacker could have overlaid...CVE-2024-5698Fix available6.1 Medium
- mozilla firefoxA website was able to detect when a user took a screenshot of a page using the built-in...CVE-2024-5697Fix available4.3 Medium
- mozilla firefoxIf an out-of-memory condition occurs at a specific point using allocations in the probabilistic...CVE-2024-5695Fix available9.8 Critical
- mozilla firefoxAn attacker could have caused a use-after-free in the JavaScript engine to read memory in the...CVE-2024-5694Fix available7.5 High
- mozilla firefoxIn addition to detecting when a user was taking a screenshot (XXX), a website was able to overlay...CVE-2024-5689Fix available4.3 Medium
- mozilla firefoxIf a specific sequence of actions is performed when opening a new tab, the triggering principal...CVE-2024-56875.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreOn Windows, when using the 'Save As' functionality, an attacker could have tricked the browser...CVE-2024-56926.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in the networking stack could have led to a potentially exploitable crash. This...CVE-2024-5702Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of...CVE-2024-5700Fix available7.0 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory...CVE-2024-5696Fix available8.6 High
- mozilla firefox, firefox esr, thunderbird +2 moreOffscreen Canvas did not properly track cross-origin tainting, which could be used to access...CVE-2024-5693Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreBy tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented...CVE-2024-5691Fix available4.7 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy monitoring the time certain operations take, an attacker could have guessed which external...CVE-2024-5690Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIf a garbage collection was triggered at the right time, a use-after-free could have occurred...CVE-2024-5688Fix available8.1 High
- mozilla focus for ios, firefox focus +1 moreThe file scheme of URLs would be hidden, resulting in potential spoofing of a website's address...CVE-2024-50224.4 Medium
- mozilla hawkInstall-type password disclosure vulnerability in Universal Installer including the Silent...CVE-2024-31826.5 Medium
- mozilla firefoxMemory safety bugs present in Firefox 125. Some of these bugs showed evidence of memory...CVE-2024-4778Fix available9.8 Critical
- mozilla firefoxA file dialog shown while in full-screen mode could have resulted in the window remaining...CVE-2024-4776Fix available8.2 High
- mozilla firefoxAn iterator stop condition was missing when handling WASM code in the built-in profiler,...CVE-2024-4775Fix available5.9 Medium
- mozilla firefoxThe `ShmemCharMapHashEntry()` code was susceptible to potentially undefined behavior by bypassing...CVE-2024-4774Fix available6.5 Medium
- mozilla firefoxWhen a network error occurred during page load, the prior content could have remained in view...CVE-2024-4773Fix available7.5 High
- mozilla firefoxAn HTTP digest authentication nonce value was generated using `rand()` which could lead to...CVE-2024-4772Fix available5.9 Medium
- mozilla firefoxA memory allocation check was missing which would lead to a use-after-free if the allocation...CVE-2024-4771Fix available8.6 High
- mozilla firefoxDifferent techniques existed to obscure the fullscreen notification in Firefox for Android. ...CVE-2024-47664.3 Medium
- mozilla firefoxWeb application manifests were stored by using an insecure MD5 hash which allowed for a hash...CVE-2024-47658.1 High
- mozilla firefoxMultiple WebRTC threads could have claimed a newly connected audio input leading to use-after...CVE-2024-4764Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of...CVE-2024-4777Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen saving a page to PDF, certain font styles could have led to a potential use-after-free crash...CVE-2024-4770Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen importing resources using Web Workers, error messages would distinguish the difference...CVE-2024-4769Fix available5.9 Medium
- Show moreLoading…