Denial Of Service (DoS)

Mozilla Firefox is vulnerable to out-of-bounds reads. This vulnerability exists in the AppendAudioSegment function in TrackEncoder.cpp that is triggered when the number of channels in an audio stream changes while the Opus encoder is in use. An unauthenticated, remote attacker can exploit this to...

Use-after-Free

Mozilla Firefox is vulnerable to use-after-free vulnerability. This is possible when using an incorrect URL during the reloading of a docshell which results in an application crash...

User-After-Free

Mozilla Firefox is vulnerable to use-after-free vulnerability. This vulnerability is caused when handling events while specific user interaction occurs with the input method editor IME. An unauthenticated, remote attacker can exploit this to cause a denial of service condition or the execution of...

Use-after-Free

Mozilla Firefox is vulnerable to use-after-free vulnerability. The vulnerability is caused during video control operations when a "" element holds a reference to an older window if that window has been replaced in the DOM resulting in an application crash...

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to use-after-free vulnerability. This is possible with the frameloader during tree reconstruction while regenerating CSS layout when attempting to use a node in the tree that no longer exists. An attacker may exploit this issue to crash the affected application,...

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to buffer overflow vulnerability. This is due to memory allocation issues when handling large amounts of incoming data resulting a potentially exploitable crash...

Certificate Validation Bypas

Mozilla Firefox is vulnerable to certificate validation bypass. An attacker could first obtain a valid signature for a fraudulent addon, which can be done without review, then hijack the call between the user and AMO to replace the response from /update/VersionCheck.php with the IDs of the...

Denial Of Service (DOS)

Mozilla Firefox is vulnerable to heap-buffer-overflow vulnerability. This is possible when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash...

Same-Origin Policy Bypass

Mozilla Firefox is vulnerable to same-origin policy bypass. Attackers can exploit these issues to bypass security restrictions and perform unauthorized actions, obtain sensitive information, bypass same-origin policy restrictions to access data, and execute arbitrary code in the context of the...

Arbitrary Code Execution

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

Arbitrary Code Execution

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

Man-in-the-Middle

Mozilla Firefox, Firefox ESR and Thunderbird are vulnerable to man-in-the-middle attacks. A remote attacker can spoof add-on updates and obtain confidential information via leveraging possession of X.509 server certificates...

Cross-Site Scripting (XSS)

mozilla firefox is vulnerable to cross-site scripting XSS attacks. A user-assisted remote attackers can create a specially crafted HTML malicious local shortcut file in the same local directory to load an arbitrary website in violation of same-origin policy, allowing for data theft...

Arbitrary Code Execution

mozilla frefox is vulnerable to Arbitrary Code Execution. Remote attackers can execute arbitrary code via a crafted web site that leverages "type confusion" due to mishandling of display transformation rendering...

Use-After-Free

mozilla firefox is vulnerable to use-after-free vulnerability. A remote attacker could possibly execute arbitrary code with the privileges of the process or cause a denial of service condition via multiple vectors...

Use-After-Free

mozilla frefox is vulnerable to use-after-free vulnerability. Remote attackers can execute arbitrary code via a script that closes its own Service Worker within a nested sync event loop...

Denial Of Service (DoS)

mozilla firefox is vulnerable to stack-based buffer underflow vulnerability. Remote attackers can execute arbitrary code via crafted two-dimensional graphics data that is mishandled during clipping-region calculations...

Denial Of Service (DoS)

mozilla firefox is vulnerable to heap-based buffer overflow vulnerability. This can be triggered using a malformed video file due to incorrect error handling. A remote attacker can execute arbitrary code by providing a malformed video and leveraging a Gecko Media Plugin GMP sandbox bypass...

Brute Force Attack

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

Denial Of Service (DoS)

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...