Vendor
Mozilla
2,559 known vulnerabilities.
Products
Firefox 2,316
Thunderbird 1,814
Firefox ESR 712
Firefox for iOS 63
Firefox for Android 33
Focus for Android 17
Thunderbird ESR 13
Focus for iOS 13
NSS 6
Focus 3
WebThings Gateway 2
Mozilla Bleach 2
Hubs Cloud 2
Mozilla VPN 2
Node-convict 1
Network Security Services (NSS) 1
thin-vec 1
Mozilla VPN 2.28.0 1
hawk 1
rhino 1
Firefox for 1
geckodriver 1
common-voice 1
Convict 1
Bugzilla 1
Persona 1
Network Security Services 1
Nunjucks 1
Klar for iOS 1
neqo 1
Mozilla VPN iOS 1.0.7 1
Mozilla VPN Windows 1
Mozilla VPN Android 1.1.0 1
sccache 1
Mozilla VPN 2.16.1 1
PollBot 1
Thunderbird < 102.8 0
Thunderbird < 102.9 0
Thunderbird < 102.9.1 0
Firefox < 110.1.0 Android 0
2,559 results · Feed
-
Unscored —
On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in <code>GMPDeco…
-
Unscored —
A malicious extension could have called <code>browser.identity.launchWebAuthFlow</code>, controlling the redirect_uri, …
-
Unscored —
Initially, a user opens a Private Browsing Window and generates a password for a site, then closes the Private Browsing…
-
Unscored —
Mozilla developers Tyson Smith, Bob Clary, and Alexandru Michis reported memory safety bugs present in Firefox 74. Some…
-
Unscored —
Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefo…
-
Unscored —
When following a link that opened an intent://-schemed URL, causing a custom tab to be opened, Firefox for Android coul…
-
Unscored —
A malicious Android application could craft an Intent that would have been processed by Firefox for Android and potenti…
-
Unscored —
When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, re…
-
Unscored —
By carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the end of an array resiz…
-
Unscored —
When a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code> task may have been e…
-
Unscored —
When a JavaScript URL (javascript:) is evaluated and the result is a string, this string is parsed to create an HTML do…
-
Unscored —
When a Web Extension had the all-urls permission and made a fetch request with a mode set to 'same-origin', it was poss…
-
Unscored —
After a website had entered fullscreen mode, it could have used a previously opened popup to obscure the notification t…
-
Unscored —
The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be …
-
Unscored —
The first time AirPods are connected to an iPhone, they become named after the user's name by default (e.g. Jane Doe's …
-
Unscored —
When protecting CSS blocks with the nonce feature of Content Security Policy, the @import statement in the CSS block co…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of these bugs showed evide…
-
Unscored —
Mozilla developers reported memory safety and script safety bugs present in Firefox 73. Some of these bugs showed evide…
-
Unscored —
A content process could have modified shared memory relating to crash reporting information, crash itself, and cause an…
-
Unscored —
When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents. Th…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 72. Some of these bugs showed evidence of memory corr…
-
Unscored —
By downloading a file with the .fileloc extension, a semi-privileged extension could launch an arbitrary application on…
-
Unscored —
If a user saved passwords before Thunderbird 60 and then later set a master password, an unencrypted copy of these pass…
-
Unscored —
If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution whe…
-
Unscored —
When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location…
-
Unscored —
When processing a message that contains multiple S/MIME signatures, a bug in the MIME processing code caused a null poi…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 72 and Firefox ESR 68.4. Some o…
-
Unscored —
Command line arguments could have been injected during Firefox invocation as a shell handler for certain unsupported fi…
-
High 8.8
Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are…
KEV Nov 3, 2021 -
High 8.8
XSS in Mozilla WebThings Gateway
A reflected XSS vulnerability exists within the gateway, allowing an attacker to craft a specialized URL which could steal the user's authentication token. When combined with CVE-2020-6803, an attacker could fully compromise the system.
-
Medium 5.4
Open redirect in Mozilla WebThings Gateway
An open redirect is present on the gateway's login page, which could cause a user to be redirected to a malicious site after logging in.
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the persona_xsrf_token function in persona.module in the Mozilla Per…
-
Unscored —
Mozilla Firefox before 25 allows modification of anonymous content of pluginProblem.xml binding
-
Unscored —
Mozilla Firefox prior to 3.6 has a DoS vulnerability due to an issue in the validation of certificates.
-
Unscored —
Mozilla Firefox through 1.5.0.3 has a vulnerability in processing the content-length header
-
Unscored —
Mozilla Firefox before 3.6 is vulnerable to XSS via the rendering of Cascading Style Sheets
-
Unscored —
A Content-Security-Policy that blocks in-line scripts could be bypassed using an object tag to execute JavaScript in th…
-
Unscored —
Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox by…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 71. Some of these bugs showed evidence of memory corr…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some of these bugs showed ev…