Vendor
Mozilla
2,559 known vulnerabilities.
Products
Firefox 2,316
Thunderbird 1,814
Firefox ESR 712
Firefox for iOS 63
Firefox for Android 33
Focus for Android 17
Thunderbird ESR 13
Focus for iOS 13
NSS 6
Focus 3
WebThings Gateway 2
Mozilla Bleach 2
Hubs Cloud 2
Mozilla VPN 2
Node-convict 1
Network Security Services (NSS) 1
thin-vec 1
Mozilla VPN 2.28.0 1
hawk 1
rhino 1
Firefox for 1
geckodriver 1
common-voice 1
Convict 1
Bugzilla 1
Persona 1
Network Security Services 1
Nunjucks 1
Klar for iOS 1
neqo 1
Mozilla VPN iOS 1.0.7 1
Mozilla VPN Windows 1
Mozilla VPN Android 1.1.0 1
sccache 1
Mozilla VPN 2.16.1 1
PollBot 1
Thunderbird < 102.8 0
Thunderbird < 102.9 0
Thunderbird < 102.9.1 0
Firefox < 110.1.0 Android 0
2,559 results · Feed
-
Medium 6.5
Malicious websites could have confused Firefox into showing the wrong origin when asking to launch a program and handli…
-
Medium 4.3
When navigating from inside an iframe while requesting fullscreen access, an attacker-controlled tab could have made th…
-
Medium 6.5
When inserting text while in edit mode, some characters might have lead to out-of-bounds memory access causing a potent…
-
High 8.8
Certain network request objects were freed too early when releasing a network request handle. This could have lead to a…
-
Medium 4.3
Under certain circumstances, a JavaScript alert (or prompt) could have been shown while another website was displayed u…
-
Medium 4.3
When scanning QR codes, Firefox for Android would have allowed navigation to some URLs that do not point to web content…
-
Medium 5.9
A race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window …
-
High 7.5
Constructing audio sinks could have lead to a race condition when playing audio files and closing windows. This could h…
-
High 8.8
When clicking on a tel: link, USSD codes, specified after a <code>\*</code> character, would be included in the phone n…
-
High 8.8
Mozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele Svelto, Tyson Smith, Simon…
-
High 8.8
The constructed curl command from the "Copy as curl" feature in DevTools was not properly escaped for PowerShell. This …
-
Critical 9.6
If an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code> but not <code>allow-scr…
-
Medium 4.3
While the text displayed in Autofill tooltips cannot be directly read by JavaScript, the text was rendered using page f…
-
High 8.8
Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of a…
KEV Mar 7, 2022 -
Medium 4.3
When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification. This…
-
High 8.8
An attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading to a potentially explo…
-
Medium 6.5
In unusual circumstances, an individual thread may outlive the thread's manager during shutdown. This could have led to…
-
High 7.5
When installing an add-on, Firefox verified the signature before prompting the user; but while the user was confirming …
-
Medium 6.5
Previously Firefox for macOS and Linux would download temporary files to a user-specific directory in <code>/tmp</code>…
-
Critical 9.6CVE-2022-26486 Exploited
An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We hav…
KEV Mar 7, 2022 -
Critical 9.8
It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox. This vulnerability af…
-
Medium 6.5
When receiving an OpenPGP/MIME signed email message that contains an additional outer MIME message layer, for example a…
-
Critical 9.8
Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, …
-
Medium 6.5
When transitioning in and out of fullscreen mode, a graphics object was not correctly protected; resulting in memory co…
-
Medium 4.3
If a domain name contained a RTL character, it would cause the domain to be rendered to the right of the path. This cou…
-
Critical 9.8
An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited. This vuln…
-
High 7.4
ReDoS vulnerability in header parsing in hawk
Hawk is an HTTP authentication scheme providing mechanisms for making authenticated HTTP requests with partial cryptographic verification of the request and response, covering the HTTP method, request URI, host, and optionally the request payload. Hawk used a…
-
Unscored —
Improved Host header checks to reject requests not sent to a well-known local hostname or IP, or the server-specified h…
-
Unscored —
The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such…
-
Unscored —
When interacting with an HTML input element's file picker dialog with webkitdirectory set, a use-after-free could have …
-
Unscored —
Microsoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will record data copied to…
-
Unscored —
Through a series of navigations, Firefox could have entered fullscreen mode without notification or warning to the user…
-
Unscored —
The Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently upgraded to TLS while …
-
Unscored —
By displaying a form validity message in the correct location at the same time as a permission prompt (such as for geol…
-
Unscored —
Due to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with arbitrary (although unstyled…
-
Unscored —
The executable file warning was not presented when downloading .inetloc files, which, due to a flaw in Mac OS, can run …
-
Unscored —
Thunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution context was limited to th…
-
Unscored —CVE-2021-43530 Public exploit
A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a…
-
Unscored —
When a user loaded a Web Extensions context menu, the Web Extension could access the post-redirect URL of the element c…
-
Unscored —
The 'Copy Image Link' context menu action would copy the final image URL after redirects. By embedding an image that tr…