1002 matches found
CVE-2025-10533 Integer overflow in the SVG component
Integer overflow in the SVG component. This vulnerability was fixed in Firefox 143, Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...
PT-2025-37935
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 143 Thunderbird versions prior to 143 Description The software contains a flaw. Recommendations Update Firefox to version 143 or later. Update Thunderbird to version 143 or later...
Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2.
...
When a network error occurred during page load, the prior content could have remained in view with a blank URL bar. This could have been used to obfuscate a spoofed web site. This vulnerability affects Firefox < 126.
...
Memory corruption in the networking stack could have led to a potentially exploitable crash. This vulnerability affects Firefox < 125, Firefox ESR < 115.12, and Thunderbird < 115.12.
...
If an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have triggered a crash or potentially be leveraged to achieve code execution. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.
...
SUSE CVE-2025-9183
Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 142 and Firefox ESR 140.2...
CVE-2025-9180
Same-origin policy bypass in the Graphics: Canvas2D component. This vulnerability affects Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14, Firefox ESR 140.2, Thunderbird 142, Thunderbird 128.14, and Thunderbird 140.2...
CVE-2025-9183
Spoofing issue in the Address Bar component. This vulnerability affects Firefox 142 and Firefox ESR 140.2...
CVE-2025-9183
Spoofing issue in the Address Bar component. This vulnerability affects Firefox 142 and Firefox ESR 140.2...
UBUNTU-CVE-2025-9183
Spoofing issue in the Address Bar component. This vulnerability affects Firefox 142 and Firefox ESR 140.2...
UBUNTU-CVE-2025-9182
Denial-of-service due to out-of-memory in the Graphics: WebRender component. This vulnerability was fixed in Firefox 142, Firefox ESR 140.2, Thunderbird 142, and Thunderbird 140.2...
CVE-2025-8364 Address bar spoofing using an blob URI on Firefox for Android
A crafted URL using a blob: URI could have hidden the true origin of the page, resulting in a potential spoofing attack. Note: This issue only affected Android operating systems. Other operating systems are unaffected.. This vulnerability was fixed in Firefox 141...
CVE-2025-8364
A crafted URL using a blob: URI could have hidden the true origin of the page, resulting in a potential spoofing attack. Note: This issue only affected Android operating systems. Other operating systems are unaffected.. This vulnerability was fixed in Firefox 141...
CVE-2025-9183 Spoofing issue in the Address Bar component
Spoofing issue in the Address Bar component. This vulnerability affects Firefox 142 and Firefox ESR 140.2...
CVE-2025-9183
Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 142 and Firefox ESR 140.2...
CVE-2025-9187
CVE-2025-9187 concerns memory safety bugs in Mozilla Firefox (141) and Mozilla Thunderbird (141) that can lead to memory corruption and potential arbitrary code execution. It affects Firefox < 142 and Thunderbird
CVE-2025-9180
Same-origin policy bypass in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14, Firefox ESR 140.2, Thunderbird 142, Thunderbird 128.14, and Thunderbird 140.2...
Linux Distros Unpatched Vulnerability : CVE-2019-11765
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A compromised content process could send a message to the parent process that would cause the 'Click to Play' permission prompt to be shown. However, due to lac...
Linux Distros Unpatched Vulnerability : CVE-2020-6796
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A content process could have modified shared memory relating to crash reporting information, crash itself, and cause an out-of-bound write. This could have caus...