Vendor
Mozilla
2,559 known vulnerabilities.
Products
Firefox 2,316
Thunderbird 1,814
Firefox ESR 712
Firefox for iOS 63
Firefox for Android 33
Focus for Android 17
Thunderbird ESR 13
Focus for iOS 13
NSS 6
Focus 3
WebThings Gateway 2
Mozilla Bleach 2
Hubs Cloud 2
Mozilla VPN 2
Node-convict 1
Network Security Services (NSS) 1
thin-vec 1
Mozilla VPN 2.28.0 1
hawk 1
rhino 1
Firefox for 1
geckodriver 1
common-voice 1
Convict 1
Bugzilla 1
Persona 1
Network Security Services 1
Nunjucks 1
Klar for iOS 1
neqo 1
Mozilla VPN iOS 1.0.7 1
Mozilla VPN Windows 1
Mozilla VPN Android 1.1.0 1
sccache 1
Mozilla VPN 2.16.1 1
PollBot 1
Thunderbird < 102.8 0
Thunderbird < 102.9 0
Thunderbird < 102.9.1 0
Firefox < 110.1.0 Android 0
2,559 results · Feed
-
Unscored —
When styling and rendering an oversized `<select>` element, Firefox did not apply correct clipping which allowed an att…
-
Unscored —
Firefox for Android would become unstable and hard-to-recover when a website opened too many popups. *This bug only aff…
-
Unscored —
Address bar search suggestions in private browsing mode were re-using session data from normal mode. *This bug only aff…
-
Unscored —
A locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would process incorrectly, leading t…
-
Unscored —
A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager t…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 88. Some of these bugs showed evidence of memory corr…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some of these bugs showed e…
-
Unscored —
When drawing text onto a canvas with WebRender disabled, an out of bounds read could occur. *This bug only affects Fire…
-
Unscored —
A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack …
-
Unscored —
Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network…
-
Unscored —
By causing a transition on a parent node by removing a CSS rule, an invalid property for a marker could have been appli…
-
Unscored —
A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an addres…
-
Unscored —
If an attacker is able to alter specific about:config values (for example malware running on the user's computer), the …
-
Unscored —
A malicious extension with the 'search' permission could have installed a new search engine whose favicon referenced a …
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 86 and Firefox ESR 78.8. Some o…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 86. Some of these bugs showed evidence of memory corr…
-
High 7.4
Open redirect in pollbot
Pollbot is open source software which "frees its human masters from the toilsome task of polling for the state of things during the Firefox release process." In Pollbot before version 1.4.4 there is an open redirection vulnerability in the path of "https://po…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some of these bugs showed ev…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 84. Some of these bugs showed evidence of memory corr…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 85. Some of these bugs showed evidence of memory corr…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some of these bugs showed ev…
-
Unscored —
Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a malicious application to rea…
-
Unscored —
When sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC sharing state in the user i…
-
Unscored —
If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin informati…
-
Unscored —
Using the new logical assignment operators in a JavaScript switch statement could have caused a type confusion, leading…
-
Unscored —
The browser could have been confused into transferring a pointer lock state into another tab, which could have lead to …
-
Unscored —
An ambiguous file picker design could have confused users who intended to select and upload a single file into uploadin…
-
Unscored —
Navigations through the Android-specific `intent` URL scheme could have been misused to escape iframe sandbox. Note: Th…
-
Unscored —
The browser could have been confused into transferring a screen sharing state into another tab, which would leak uninte…
-
Unscored —
An XSS bug in internal error pages could have led to various spoofing attacks, including other error pages and the addr…
-
Unscored —
Performing garbage collection on re-declared JavaScript variables resulted in a user-after-poison, and a potentially ex…
-
Unscored —
Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an i…
-
Unscored —
Incorrect use of the '<RowCountChanged>' method could have led to a user-after-poison and a potentially exploitable cra…
-
Unscored —
If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reporte…
-
Unscored —
As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure th…
-
Unscored —
Context-specific code was included in a shared jump table; resulting in assertions being triggered in multithreaded was…
-
Unscored —
When processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the redirect's Referrer-Polic…
-
Unscored —
One phishing tactic on the web is to provide a link with HTTP Auth. For example 'https://www.phishingtarget.com@evil.co…
-
Unscored —
When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the conte…
-
Unscored —
The DOMParser API did not properly process '<noscript>' elements for escaping. This could be used as an mXSS vector to …