Vendor
Mozilla
2,559 known vulnerabilities.
Products
8 results · Clear filters · Feed
-
Low 3.4
Spoofing issue in Firefox
Spoofing issue in Firefox. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, and Firefox ESR 115.30.
-
Low 2.3
transport/fc.rs: panic attempting to send MAX_DATA with value larger max varint
Improper Input Validation vulnerability in Mozilla neqo leads to an unexploitable crash..This issue affects neqo: from 0.4.24 through 0.13.2.
-
Low 3.9
Tapjacking in Android Custom Tabs using transition animations
Android apps can load web pages using the Custom Tabs feature. This feature supports a transition animation that could have been used to trick a user into granting sensitive permissions by hiding what the user was actually clicking. This vulnerability was fix…
-
Low 3.3
Lock screen setting bypass in Firefox Focus for Android
Under certain circumstances, a user opt-in setting that Focus should require authentication before use could have been be bypassed. This vulnerability was fixed in Firefox 134.
-
Low 3.7
There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server could abuse this to cr…
-
Low 2.7
To harden ICU against exploitation, the behavior for out-of-memory conditions was changed to crash instead of attempt t…
-
Low 3.7
Passing invalid data could have led to invalid wasm values being created, such as arbitrary integers turning into point…
-
Low 3.3
Logins saved by Firefox should be managed by the Password Manager component which uses encryption to save files on-disk…