Vendor
Mozilla
2,559 known vulnerabilities.
Products
Firefox 2,316
Thunderbird 1,814
Firefox ESR 712
Firefox for iOS 63
Firefox for Android 33
Focus for Android 17
Thunderbird ESR 13
Focus for iOS 13
NSS 6
Focus 3
WebThings Gateway 2
Mozilla Bleach 2
Hubs Cloud 2
Mozilla VPN 2
Node-convict 1
Network Security Services (NSS) 1
thin-vec 1
Mozilla VPN 2.28.0 1
hawk 1
rhino 1
Firefox for 1
geckodriver 1
common-voice 1
Convict 1
Bugzilla 1
Persona 1
Network Security Services 1
Nunjucks 1
Klar for iOS 1
neqo 1
Mozilla VPN iOS 1.0.7 1
Mozilla VPN Windows 1
Mozilla VPN Android 1.1.0 1
sccache 1
Mozilla VPN 2.16.1 1
PollBot 1
Thunderbird < 102.8 0
Thunderbird < 102.9 0
Thunderbird < 102.9.1 0
Firefox < 110.1.0 Android 0
2,559 results · Feed
-
Unscored —
Same-origin protections for the PDF viewer can be bypassed, allowing a malicious site to intercept messages meant for t…
-
Unscored —
A use-after-free vulnerability can occur when the widget listener is holding strong references to browser objects that …
-
Unscored —
Plaintext of decrypted emails can leak through by user submitting an embedded form. This vulnerability affects Thunderb…
-
Unscored —
WebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such as accounts.firefox.com…
-
Unscored —
Under certain circumstances the "fetch()" API can return transient local copies of resources that were sent with a "no-…
-
Unscored —
Memory safety bugs were reported in Firefox 59. Some of these bugs showed evidence of memory corruption and we presume …
-
Unscored —
WebExtensions can bypass user prompts to first save and then open an arbitrarily downloaded file. This can result in an…
-
Unscored —
A use-after-free vulnerability can occur when manipulating HTML media elements with media streams, resulting in a poten…
-
Unscored —
Style editor traffic in the Developer Tools can be routed through a service worker hosted on a third party website if a…
-
Unscored —
The JSON Viewer displays clickable hyperlinks for strings that are parseable as URLs, including "javascript:" links. If…
-
Unscored —
Memory safety bugs were reported in Firefox 57. Some of these bugs showed evidence of memory corruption and we presume …
-
Unscored —
It is possible to spoof the filename of an attachment and display an arbitrary attachment name. This could lead to a us…
-
High 8.8
Malicious PDF can inject JavaScript into PDF Viewer
The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious JavaScript to be injected through a crafted PDF file. This JavaScript can then be run with the permissions of the PDF viewer by its worker. This vulnerability af…
-
Unscored —
A use-after-free vulnerability can occur when the thread for a Web Worker is freed from memory prematurely instead of f…
-
Unscored —
A mechanism to bypass Content Security Policy (CSP) protections on sites that have a "script-src" policy of "'strict-dy…
-
Unscored —
When packets with a mismatched RTP payload type are sent in WebRTC connections, in some circumstances a potentially exp…
-
Unscored —
Memory safety bugs were reported in Firefox 58. Some of these bugs showed evidence of memory corruption and we presume …
-
Unscored —
An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks…
-
Unscored —
WebRTC can use a "WrappedI420Buffer" pixel buffer but the owning image object can be freed while it is still in use. Th…
-
Unscored —
WebExtensions can bypass normal restrictions in some circumstances and use "browser.tabs.executeScript" to inject scrip…
-
Unscored —
Development Tools panels of an extension are required to load URLs for the panels as relative URLs from the extension m…
-
Unscored —
A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This resul…
-
Unscored —
A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths. This results in …
-
Unscored —
An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnera…
-
Unscored —
A spoofing vulnerability can occur when a malicious site with an extremely long domain name is opened in an Android Cus…
-
Unscored —
A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, re…
-
Unscored —
Crafted message headers can cause a Thunderbird process to hang on receiving the message. This vulnerability affects Th…
-
Unscored —
A shared worker created from a "data:" URL in one tab can be shared by another tab with a different origin, bypassing t…
-
Unscored —CVE-2018-5093 EPSS 19%
A heap buffer overflow vulnerability may occur in WebAssembly during Memory/Table resizing, resulting in a potentially …
-
Unscored —
If an existing cookie is changed to be "HttpOnly" while a document is open, the original value remains accessible throu…
-
Unscored —
Low descenders on some Tibetan characters in several fonts on OS X are clipped when rendered in the addressbar. When us…
-
Unscored —
If a text string that happens to be a filename in the operating system's native format is dragged and dropped onto the …
-
Unscored —
The printing process can bypass local access protections to read files available through symlinks, bypassing local file…
-
Unscored —
Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property of…
-
Unscored —
Content Security Policy (CSP) is not applied correctly to all parts of multipart content sent with the "multipart/x-mix…
-
Unscored —
Image for moz-icons can be accessed through the "moz-icon:" protocol through script in web content even when otherwise …
-
Unscored —
A use-after-free vulnerability can occur when arguments passed to the "IsPotentiallyScrollable" function are freed whil…
-
Unscored —
The Find API for WebExtensions can search some privileged pages, such as "about:debugging", if these pages are open in …
-
Unscored —
Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume th…
-
Unscored —
A use-after-free vulnerability can occur when form input elements, focus, and selections are manipulated by script cont…