firefox: thunderbird: Same-origin policy bypass in the Request Handling component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Request Handling component...

firefox: thunderbird: Use-after-free in the WebRTC: Signaling component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the WebRTC: Signaling component...

firefox: thunderbird: Privilege escalation in the Netmonitor component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Netmonitor component...

PT-2026-27383

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 149 Firefox ESR versions prior to 115.34 Firefox ESR versions prior to 140.9 Thunderbird versions prior to 149 Thunderbird versions prior to 140.9 Description A race condition and use-after-free issue exists in the...

The vulnerability of the JIT-compiler used by Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to execute arbitrary code.

The vulnerability of the JIT-compiler used by Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the Mozilla Firefox browser and the Thunderbird email client, related to writing beyond the buffer limit, allows attackers to execute arbitrary code.

The vulnerability of Mozilla Firefox browser and Thunderbird email client lies in the issue of buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20251226-7306

A vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird email client is related to information disclosure. Exploitation of the vulnerability could allow a remote attacker to disclose protected information...

ROS-20251226-7305

A vulnerability in the WebGL Texture Handler component of Mozilla Firefox, Firefox ESR and Thunderbird email client is related to buffer overwriting. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

Mozilla Firefox Security Update (mfsa_2025-98) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Mozilla Firefox Security Update (mfsa_2025-98) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

MozillaFirefox-146.0.1-1.1 on GA media (moderate)

MozillaFirefox-146.0.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15833-1 Rating: moderate Cross-References: CVE-2025-14860 CVE-2025-14861 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues fixed i...

OPENSUSE-SU-2025:15833-1 MozillaFirefox-146.0.1-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-146.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE Security Advisory (SUSE-SU-2025:4424-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:4424-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox versions prior to 146.0.1, which stems from a post-release reuse of the Disability Access APIs component...

Mozilla Firefox < 3.5.6

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 3.5.6. It is, therefore, affected by a vulnerability as referenced in the mfsa2009-68 advisory. - Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send...

Mozilla Firefox < 3.0.12

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 3.0.12. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2009-34 advisory. - The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a...

Mozilla Firefox < 48.0

The version of Firefox installed on the remote Windows host is prior to 48.0. It is, therefore, affected by a vulnerability as referenced in the mfsa2016-83 advisory. - bypass FireFox Secure Connection Failed prompt to whitelist any site but doesn't workCVE-2016-5268 CVE-2016-5268 Note that Nessu...

Mozilla Firefox < 3.0.6

The version of Firefox installed on the remote Windows host is prior to 3.0.6. It is, therefore, affected by a vulnerability as referenced in the mfsa2009-02 advisory. - Cross-domain vulnerability in js/src/jsobj.cpp in Mozilla Firefox 3.x before 3.0.6 allows remote attackers to bypass the Same...

Mozilla Firefox ESR < 17.0.7

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 17.0.7. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-54 advisory. - Do not send data XHR HEAD requestCVE-2013-1692 CVE-2013-1692 Note that Nessus has not tested for this issue but...