5502 matches found
CVE-2025-9186
Spoofing issue in the Address Bar component of Firefox Focus for Android. This vulnerability was fixed in Firefox 142...
CVE-2025-9186
Spoofing issue in the Address Bar component of Firefox Focus for Android. This vulnerability was fixed in Firefox 142...
Mozilla Firefox < 142.0
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 142.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-64 advisory. - Memory safety bugs present in Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory...
CVE-2025-55032: URL Redirection to Untrusted Site
Focus for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline, potentially allowing for XSS attacks. This vulnerability was fixed in Focus for iOS 142...
Mozilla Firefox Focus for iOS security vulnerabilities
Mozilla Focus for iOS is a privacy browser from the US-based Mozilla Foundation designed for iOS devices. A cross-site scripting vulnerability exists in versions prior to Mozilla Focus for iOS 142, which can be exploited by an attacker to execute arbitrary web script or HTML via injection of a...
CVE-2025-55033: Improper Neutralization of Input During Web Page Generation
Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially resulting in XSS attacks. This vulnerability was fixed in Focus for iOS 142...
PT-2025-33876
Name of the Vulnerable Software and Affected Versions: Firefox for iOS versions prior to 142 Focus for iOS versions prior to 142 Description: Malicious pages could exploit Firefox for iOS to pass FIDO links to the operating system, triggering the hybrid passkey transport. An attacker within...
PT-2025-33877 · Mozilla · Focus For Ios
Name of the Vulnerable Software and Affected Versions: Focus for iOS versions prior to 14.2 Description: Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially resulting in cross-site scripting XSS attacks. Recommendations: Update Focus f...
CVE-2025-9186: User Interface (UI) Misrepresentation of Critical Information
Spoofing issue in the Address Bar component of Firefox Focus for Android. This vulnerability was fixed in Firefox 142...
PT-2025-33872
Name of the Vulnerable Software and Affected Versions: Firefox Focus versions prior to 142 Description: A spoofing issue exists in the Address Bar component of Firefox Focus for Android. Recommendations: Update Firefox Focus to version 142 or later...
Mozilla Firefox Focus for iOS security vulnerabilities
Mozilla Focus for iOS is a privacy browser from the US-based Mozilla Foundation designed for iOS devices. A cross-site scripting vulnerability exists in Mozilla Focus for iOS prior to version 142, which stems from an improper handling of the Content-Disposition header, and can be exploited by an...
CVE-2025-55031: URL Redirection to Untrusted Site
Malicious pages could use Firefox for iOS to pass FIDO: links to the OS and trigger the hybrid passkey transport. An attacker within Bluetooth range could have used this to trick the user into using their passkey to log the attacker's computer into the target account. This vulnerability was fixed...
Security Vulnerabilities fixed in Focus for iOS 142 — Mozilla
Focus for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline, potentially allowing for XSS attacks Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially resulting in XSS...
Mozilla Firefox for iOS and Mozilla Firefox Focus for iOS have security vulnerabilities
Mozilla Firefox for iOS and Mozilla Firefox Focus for iOS are both products of the Mozilla Foundation in the U.S. Mozilla Firefox for iOS is a web browser designed for iOS devices. Mozilla Firefox Focus for iOS is a privacy browser designed for iOS devices. A security vulnerability exists in...
CGA-P39R-4CFR-GQ82
Bulletin has no description...
Linux Distros Unpatched Vulnerability : CVE-2023-29550
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort...
Linux Distros Unpatched Vulnerability : CVE-2023-6870
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Applications which spawn a Toast notification in a background thread may have obscured fullscreen notifications displayed by Firefox. This issue only affects...
Linux Distros Unpatched Vulnerability : CVE-2023-29538
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Under specific circumstances a WebExtension may have received a jar:file:/// URI instead of a moz-extension:/// URI during a load request. This leaked directory...
Linux Distros Unpatched Vulnerability : CVE-2023-29546
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When recording the screen while in Private Browsing on Firefox for Android the address bar and keyboard were not hidden, potentially leaking sensitive...
