The vulnerability of Mozilla Firefox browsers and the Thunderbird email client relates to operations beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of Mozilla Firefox browsers and the Thunderbird email client relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the disclosure of information, allowing a perpetrator to access protected data.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the disclosure of information. Exploiting these vulnerabilities can allow a malicious actor to disclose the protected information remotely...

thunderbird: firefox: Cross-process information leaked due to malicious IPC messages

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised process...

MozillaFirefox-144.0-1.1 on GA media (moderate)

MozillaFirefox-144.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15645-1 Rating: moderate Cross-References: CVE-2025-11708 CVE-2025-11709 CVE-2025-11710 CVE-2025-11711 CVE-2025-11712 CVE-2025-11713 CVE-2025-11714 CVE-2025-11715 CVE-2025-11716 CVE-2025-11717 CVE-2025-11718 CVE-2025-11719...

OPENSUSE-SU-2025:15645-1 MozillaFirefox-144.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-144.0-1.1 package on the GA media of openSUSE Tumbleweed...

Mozilla Firefox Security Bypass Vulnerability (CNVD-2025-24633)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox, which can be exploited by attackers to bypass security restrictions...

Mozilla Firefox Spoofing Vulnerability (CNVD-2025-24623)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a spoofing vulnerability, which is caused by a response to a visibilitychange event. An attacker can exploit this vulnerability to conduct spoofing attacks...

Code execution vulnerability in multiple Mozilla products (CNVD-2025-24628)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S.A. Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is email client software that supports the IMAP and POP mail protocols as well as the HTML mail format. A code...

Mozilla Firefox and Mozilla Thunderbird Memory Misreference Vulnerability

Mozilla Firefox is an open source web browser.Mozilla Thunderbird is a set of e-mail client software separate from the Mozilla Application Suite. The software supports IMAP, POP mail protocols and HTML mail format. A memory misreference vulnerability exists in Mozilla Firefox and Mozilla...

Mozilla Firefox Spoofing Vulnerability (CNVD-2025-24624)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a spoofing vulnerability, which is caused due to an error in the Customization tab. An attacker can exploit this vulnerability to conduct spoofing attacks...

Code execution vulnerability in multiple Mozilla products (CNVD-2025-24626)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S.A. Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is email client software that supports the IMAP and POP mail protocols as well as the HTML mail format. A code...

Cross-site scripting vulnerability in multiple Mozilla products (CNVD-2025-24632)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S.A. Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is email client software that supports the IMAP and POP mail protocols as well as the HTML mail format. A...

Memory Misreference Vulnerability in Multiple Mozilla Products (CNVD-2025-24622)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S.A. Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is email client software that supports the IMAP and POP mail protocols as well as the HTML mail format. A memor...

Information Disclosure Vulnerability in Multiple Mozilla Products (CNVD-2025-24630)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S.A. Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is email client software that supports the IMAP and POP mail protocols as well as the HTML mail format. An...

Security Bypass Vulnerability in Multiple Mozilla Products (CNVD-2025-24631)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S.A. Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is email client software that supports the IMAP and POP mail protocols as well as the HTML mail format. A...

Mozilla Firefox ESR Security Update (mfsa_2025-83) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Mozilla Firefox Security Update (mfsa_2025-81) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Mozilla Firefox Security Update (mfsa_2025-81) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

thunderbird: firefox: Some non-writable Object properties could be modified

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable...

Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2025-287-01)

The version of mozilla-firefox installed on the remote host is prior to 140.4.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-287-01 advisory. New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Tenable has...