Vendor
Mozilla
2,559 known vulnerabilities.
Products
2,559 results · Feed
-
Unscored —
An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnera…
-
Unscored —
An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the `referre…
-
Unscored —
Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. Some of these bugs showed evidence…
-
Unscored —
When an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly allowed to load blockabl…
-
Unscored —
If an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS-only mode, the attacke…
-
Unscored —
When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a …
-
Unscored —
Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in the path could b…
-
Unscored —
Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefo…
-
Unscored —
The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission pro…
-
Unscored —
On some systems—depending on the graphics settings and drivers—it was possible to force an out-of-bounds read and leak …
-
Unscored —
It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to …
-
Medium 6.1
When opening a page in reader mode, the redirect URL could have caused attacker-controlled script to execute in a refle…
-
Unscored —
Address bar spoofing via bidirectional characters
An attacker could have created a malicious link using bidirectional characters to spoof the location in the address bar when visited. This vulnerability affects Firefox < 117, Firefox ESR < 115.4, and Thunderbird < 115.4.1.
-
Unscored —
Memory safety bugs present in Firefox 118. Some of these bugs showed evidence of memory corruption and we presume that …
-
Unscored —
A malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt. This could have obscu…
-
Unscored —
Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bugs showed evidence…
-
High 7.5
During garbage collection extra operations were performed on a object that should not be. This could have led to a pote…
-
Unscored —
The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which …
-
Unscored —
A website could have obscured the full screen notification by using the file open dialog. This could have led to user c…
-
Unscored —
A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to …
-
High 7.5
Drivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash. …
-
Unscored —
Using iterative requests an attacker was able to learn the size of an opaque response, as well as the contents of a ser…
-
Unscored —
An attacker with temporary script access to a site could have set a cookie containing invalid characters using `documen…
-
Unscored —
It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to…
-
Medium 6.1
Common Voice Cross-site Scripting vulnerability
Common Voice is the web app for Mozilla Common Voice, a platform for collecting speech donations in order to create public domain datasets for training voice recognition-related tools. Version 1.88.2 is vulnerable to reflected Cross-Site Scripting given that …
-
Critical 9.8
During process shutdown, it was possible that an `ImageBitmap` was created that would later be used after being freed f…
-
Unscored —
In a non-standard configuration of Firefox, an integer overflow could have occurred based on network traffic (possibly …
-
Critical 9.8
A hashtable in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential…
-
Unscored —
In canvas rendering, a compromised content process could have caused a surface to change unexpectedly, leading to a mem…
-
Critical 9.8
Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs showed evidence…
-
Critical 9.8
If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointe…
-
Unscored —
During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to…
-
Unscored —
A compromised content process could have provided malicious data in a `PathRecording` resulting in an out-of-bounds wri…
-
Critical 9.8
A compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds writ…
-
Medium 5.5
An invalid Polkit Authentication check and missing authentication requirements for D-Bus methods allowed any local user…
-
High 8.8
Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2
Memory safety bugs present in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerabili…
-
Unscored —
Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
Memory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited…
-
High 7.5
Browsing Context potentially not cleared when closing Private Window
When checking if the Browsing Context had been discarded in `HttpBaseChannel`, if the load group was not available then it was assumed to have already been discarded which was not always the case for private channels after the private session had ended. This …
-
High 8.8
Buffer Overflow in WebGL glGetProgramiv
Due to large allocation checks in Angle for glsl shaders being too lenient a buffer overflow could have occurred when allocating too much private shader memory on mac OS. *This bug only affects Firefox on macOS. Other operating systems are unaffected.* This v…
-
Unscored —
XLL file extensions were downloadable without warnings
Excel `.xll` add-in files did not have a blocklist entry in Firefox's executable blocklist which allowed them to be downloaded without any warning of their potential harm. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Th…