Vendor
Mozilla
2,559 known vulnerabilities.
Products
Firefox 2,316
Thunderbird 1,814
Firefox ESR 712
Firefox for iOS 63
Firefox for Android 33
Focus for Android 17
Thunderbird ESR 13
Focus for iOS 13
NSS 6
Focus 3
WebThings Gateway 2
Mozilla Bleach 2
Hubs Cloud 2
Mozilla VPN 2
Node-convict 1
Network Security Services (NSS) 1
thin-vec 1
Mozilla VPN 2.28.0 1
hawk 1
rhino 1
Firefox for 1
geckodriver 1
common-voice 1
Convict 1
Bugzilla 1
Persona 1
Network Security Services 1
Nunjucks 1
Klar for iOS 1
neqo 1
Mozilla VPN iOS 1.0.7 1
Mozilla VPN Windows 1
Mozilla VPN Android 1.1.0 1
sccache 1
Mozilla VPN 2.16.1 1
PollBot 1
Thunderbird < 102.8 0
Thunderbird < 102.9 0
Thunderbird < 102.9.1 0
Firefox < 110.1.0 Android 0
2,559 results · Feed
-
Unscored —
A use-after-free in nsINode::ReplaceOrInsertBefore during DOM operations resulting in potentially exploitable crashes. …
-
Medium 5.3
It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinemen…
-
Unscored —
WebExtensions may use "view-source:" URLs to view local "file:" URL content, as well as content stored in "about:cache"…
-
Unscored —
A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is use…
-
Unscored —
If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to s…
-
Unscored —
A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers. This results …
-
Unscored —
Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of these bugs showed evide…
-
Unscored —
The filename appearing in the "Downloads" panel improperly renders some Unicode characters, allowing for the file name …
-
Unscored —
If an HTTP authentication prompt is triggered by a background network request from a page or extension, it is displayed…
-
Unscored —
The web console and JavaScript debugger do not sanitize all output that can be hyperlinked. Both will display "chrome:"…
-
Unscored —
Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corru…
-
Unscored —
If manipulated hyperlinked text with "chrome:" URL contained in it is dragged and dropped on the "home" icon, the home …
-
Unscored —
A legacy extension's non-contentaccessible, defined resources can be loaded by an arbitrary web page through script. Th…
-
Unscored —
URLs using "javascript:" have the protocol removed when pasted into the addressbar to protect users from cross-site scr…
-
Unscored —
If Media Capture and Streams API permission is requested from documents with "data:" or "blob:" URLs, the permission no…
-
Unscored —
A use-after-free vulnerability can occur when manipulating elements, events, and selection ranges during editor operati…
-
Unscored —
A use-after-free vulnerability can occur during WebGL operations. While this results in a potentially exploitable crash…
-
Unscored —
If a malicious attacker has used another vulnerability to gain full control over a content process, they may be able to…
-
Unscored —
The "browser.identity.launchWebAuthFlow" function of WebExtensions is only allowed to load content over "https:" but th…
-
Unscored —
A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support. This resu…
-
Unscored —
Using remote content in encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderb…
-
Unscored —CVE-2018-5094 EPSS 15%
A heap buffer overflow vulnerability may occur in WebAssembly when "shrinkElements" is called followed by garbage colle…
-
Unscored —
A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially ex…
-
Unscored —
A potential integer overflow in the "DoCrypt" function of WebCrypto was identified. If a means was found of exploiting …
-
Unscored —
Plaintext of decrypted emails can leak through the src attribute of remote images, or links. This vulnerability affects…
-
Unscored —
If the "app.support.baseURL" preference is changed by a malicious local program to contain HTML and script content, thi…
-
Unscored —
Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues incl…
-
Unscored —
In 32-bit versions of Firefox, the Adobe Flash plugin setting for "Enable Adobe Flash protected mode" is unchecked by d…
-
Unscored —
WebExtensions with the "ActiveTab" permission are able to access frames hosted within the active tab even if the frames…
-
Unscored —
An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at …
-
Unscored —
A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC message…
-
Unscored —
If a URL using the "file:" protocol is dragged and dropped onto an open tab that is running in a different child proces…
-
Unscored —
A Blob URL can violate origin attribute segregation, allowing it to be accessed from a private browsing tab and for dat…
-
Unscored —
The Live Bookmarks page and the PDF viewer can run injected script content if a user pastes script from the clipboard i…
-
Unscored —
A vulnerability exists in XSLT during number formatting where a negative buffer size may be allocated in some instances…
-
Unscored —
A use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is …
-
Unscored —
If cursor visibility is toggled by script using from 'none' to an image and back through script, the cursor will be ren…
-
Unscored —
Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed evidence of memory corru…
-
Unscored —
When the text of a specially formatted URL is dragged to the addressbar from page content, the displayed URL can be spo…
-
Unscored —
An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length param…