Vendor
Mozilla
2,559 known vulnerabilities.
Products
Firefox 2,316
Thunderbird 1,814
Firefox ESR 712
Firefox for iOS 63
Firefox for Android 33
Focus for Android 17
Thunderbird ESR 13
Focus for iOS 13
NSS 6
Focus 3
WebThings Gateway 2
Mozilla Bleach 2
Hubs Cloud 2
Mozilla VPN 2
Node-convict 1
Network Security Services (NSS) 1
thin-vec 1
Mozilla VPN 2.28.0 1
hawk 1
rhino 1
Firefox for 1
geckodriver 1
common-voice 1
Convict 1
Bugzilla 1
Persona 1
Network Security Services 1
Nunjucks 1
Klar for iOS 1
neqo 1
Mozilla VPN iOS 1.0.7 1
Mozilla VPN Windows 1
Mozilla VPN Android 1.1.0 1
sccache 1
Mozilla VPN 2.16.1 1
PollBot 1
Thunderbird < 102.8 0
Thunderbird < 102.9 0
Thunderbird < 102.9.1 0
Firefox < 110.1.0 Android 0
2,559 results · Feed
-
Critical 9.8
Potential race conditions in IndexedDB could have caused memory corruption, leading to a potentially exploitable crash.…
-
Critical 9.8
Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of these bugs showed evidence…
-
High 7.5
By sending a specially crafted push message, a remote server could have hung the parent process, causing the browser to…
-
High 7.5
A clipboard "paste" button could persist across tabs which allowed a spoofing attack. This vulnerability affects Firefo…
-
High 7.5
Repeated writes to history interface attributes could have been used to cause a Denial of Service condition in the brow…
-
High 7.5
Video frames could have been leaked between origins in some situations. This vulnerability affects Firefox < 132, Firef…
-
High 7.5
Truncation of a long URL could have allowed origin spoofing in a permission prompt. This vulnerability affects Firefox …
-
Medium 6.1
In multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header was not respected and …
-
Medium 5.4
The origin of an external protocol handler prompt could have been obscured using a data: URL within an `iframe`. This v…
-
Medium 6.5
An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable cra…
-
Medium 6.5
A permission leak could have occurred from a trusted site to an untrusted site via `embed` or `object` elements. This v…
-
Critical 9.1
Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in s…
-
Medium 6.5
When manipulating the selection node cache, an attacker may have been able to cause unexpected behavior, potentially le…
-
Critical 9.8
An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timel…
KEV Oct 15, 2024 -
High 7.3
Memory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory corruption and we presume that …
-
Medium 6.5
A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full sc…
-
Medium 5.3
A specially crafted filename containing a large number of spaces could obscure the file's extension when displayed in t…
-
Critical 9.8
Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2. Some of these …
-
Critical 9.8
Memory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence…
-
High 7.5
A website configured to initiate a specially crafted WebTransport session could crash the Firefox process leading to a …
-
High 8.8
A potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an OOM at a sp…
-
Medium 6.1
A missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting permis…
-
Medium 5.3
By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine i…
-
High 8.8
It is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain ob…
-
Medium 6.1
An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://devto…
-
High 7.5
An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://pdf.j…
-
Critical 9.8
A compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability af…
-
High 7.5
An attacker could write data to the user's clipboard, bypassing the user prompt, during a certain sequence of navigatio…
-
Medium 6.1
Under certain conditions, an attacker with the ability to redirect users to a malicious site via an open redirect on a …
-
High 7.5
Type Confusion in Async Generators in Javascript Engine
An error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially leading to memory corruption and an exploitable crash. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.1…
-
Medium 6.5
When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a …
-
Medium 4.7
Websites could utilize Javascript links to spoof URL addresses in the Focus navigation bar This vulnerability affects F…
-
Critical 9.8
Memory safety bugs present in Firefox 129. Some of these bugs showed evidence of memory corruption and we presume that …
-
Medium 4.3
Multiple prompts and panels from both Firefox and the Android OS could be used to obscure the notification announcing t…
-
Critical 9.8
Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence…
-
Medium 6.1
If a site had been granted the permission to open popup windows, it could cause Select elements to appear on top of ano…
-
High 7.5
Firefox normally asks for confirmation before asking the operating system to find an application to handle a scheme tha…
-
Critical 9.8
A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confus…
-
Critical 9.8
The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right…
-
High 8.8
Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for t…