CVE-2022-26485

CVE-2022-26485 is a Mozilla/firefox-family use-after-free vulnerability triggered by removing an XSLT parameter during processing. Affected products include Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for Android < 97.3.0, Thunderbird < 91.6.2, and Focus

CVE-2022-26486

CVE-2022-26486 describes a use-after-free in the WebGPU IPC framework leading to a sandbox escape. Affected products and versions (per connected docs): Firefox < 97.0.2; Firefox ESR < 91.6.1; Firefox for Android < 97.3.0; Thunderbird < 91.6.2; Focus

CVE-2023-25747

CVE-2023-25747 concerns a use-after-free in Mozilla’s libaudio that specifically affected Firefox for Android. The underlying issue was mitigated by disabling the AAudio backend when running on Android API levels below 30. Affected software is Firefox for Android, with vulnerable versions cited a...

CVE-2023-29540

CVE-2023-29540 is a vulnerability in Mozilla Firefox affecting Firefox for Android and Focus for Android prior to version 112. It arises from a redirect embedded in sourceMappingUrls that could navigate to external protocol links inside sandboxed iframes without allow-top-navigation-to-custom-pro...

CVE-2020-12401

CVE-2020-12401: In ECDSA signature generation, padding used to ensure constant-time scalar multiplication was removed, causing variable-time execution based on secret data. Affected: Firefox < 80 and Firefox for Android

CVE-2020-15664

The CVE-2020-15664 issue arises from a malicious page holding a reference to eval() from an about:blank window, allowing access to InstallTrigger and prompting users to install an extension. Affected products include Firefox < 80, Thunderbird < 78.2/68.12, Firefox ESR < 68.12/78.2, and F...

CVE-2020-6829

CVE-2020-6829 is a vulnerability in NSS (Network Security Services) libraries (nss, nss-util, nss-softokn, nspr) where the wNAF scalar point multiplication during ECDSA signature generation leaks partial nonce information. This side-channel can enable an attacker with electromagnetic traces from ...

CVE-2024-38312

Concisely: CVE-2024-38312 affects Firefox for iOS versions before 127. When private tabs are used, location history data and webpage thumbnails could be persisted in the sandboxed app bundle after termination, exposing potentially sensitive information. Exploitation details are not provided in th...

CVE-2020-12400

CVE-2020-12400 is an NSS-related timing vulnerability affecting Firefox < 80 and Firefox for Android

CVE-2024-38313

CVE-2024-38313 describes a spoofing vulnerability in Firefox for iOS where, in certain scenarios, a malicious website could attempt to display a fake location URL bar to mislead users about the actual website address. The vulnerability is documented to affect Firefox for iOS versions prior to 127...

CVE-2024-7523

CVE-2024-7523 affects Firefox for Android, where a select option can obscure security prompts, potentially tricking users into granting permissions. Vulnerable on Android builds before Firefox 129; fix is in Firefox 129 and later per Mozilla advisories (mfsa2024-33) and related CPs in CVE listing...

CVE-2024-43112

CVE-2024-43112 affects Firefox for iOS, where long pressing a download link could enable cross-site scripting. The vulnerability is described as impacting Firefox for iOS versions earlier than 129. The NVD entry assigns a CVSS v3.1 base score of 6.1 (Medium) with Network attack vector, user inter...

CVE-2024-43111

Vulnerability summary (CVE-2024-43111): Firefox for iOS prior to version 129 is affected. Long-pressing a download link could allow Javascript commands to be executed in the browser, enabling potential malicious activity. The issue is described across multiple sources (NVD entry and related advis...

CVE-2024-43113

The CVE concerns Mozilla Firefox for iOS with versions older than 129. The issue arises from improper validation in the link context menu, enabling cross-site scripting via the contextual menu for links. Affected component: Firefox for iOS; root cause: input validation flaw in link context menu; ...

CVE-2024-0953

The CVE-2024-0953 entry corresponds to a vulnerability in Firefox for iOS (affecting versions before 129) where scanning a QR code via the built-in QR Code Scanner navigates to the URL without a user confirmation. Root cause: the scanner does not prompt before navigation, potentially directing us...

CVE-2020-15670

CVE-2020-15670 involves memory safety bugs in Mozilla Firefox components, affecting Firefox for Android 79 and other Firefox variants prior to 80, including Firefox ESR < 78.2 and Thunderbird

CVE-2023-29536

The CVE-2023-29536 entry applies to Mozilla products (Firefox, Focus, Thunderbird, Firefox ESR, and Firefox for Android) with memory-management weakness in freeing a pointer to attacker-controlled memory. Impacted versions include Firefox <112, Focus for Android <112, Firefox ESR <102.10...

CVE-2023-29539

Concrete details found: CVE-2023-29539 (Content-Disposition filename truncation on NULL) affects Firefox family and Thunderbird; root cause is NULL character in filename causing truncation and potential Reflected File Download. Connected documents (Astra Linux bulletin, Debian/CentOS advisories) ...

CVE-2023-29541

The CVE-2023-29541 issue concerns Firefox on Linux (and Thunderbird) where downloads of files ending with .desktop could be interpreted as commands, enabling attacker-controlled execution. Public advisories show affected products as Firefox (Linux) older than 112, Thunderbird older than 102.10, a...

CVE-2020-26964

Summary (CVE-2020-26964) : This vulnerability concerns Firefox for Android prior to Android 6.0 where the Remote Debugging via USB feature could be accessed by untrusted apps via a UNIX domain socket. The SELinux protection for this socket was not enforced on older Android versions, allowing the ...

CVE-2023-29550

CVE-2023-29550 corresponds to memory-safety bugs in Mozilla Firefox 111 and Firefox ESR 102.9 (affecting Firefox < 112, Focus for Android < 112, ESR < 102.10, Firefox for Android < 112, Thunderbird

CVE-2023-29535

CVE-2023-29535: The vulnerability arises from a garbage collector compaction issue in Firefox/related products where a weak map could be accessed before proper tracing, leading to memory corruption and a potentially exploitable crash. Affected software per documents includes Firefox (and derivati...

CVE-2023-29548

CVE-2023-29548 concerns a wrong lowering instruction in the ARM64 Ion compiler that yields an incorrect optimization result. The vulnerability affects Firefox (<112), Focus for Android (<112), Firefox ESR (<102.10), Firefox for Android (<112), and Thunderbird (

CVE-2023-29533

CVE-2023-29533 affects Firefox (pre-112, ESR pre-102.10, Android-focused builds pre-112) and Thunderbird (

CVE-2020-15668

CVE-2020-15668 affects Firefox < 80 and Firefox for Android

CVE-2020-26954

CVE-2020-26954 affects Firefox for Android. The issue arises when accepting a malicious intent from other apps, causing Firefox to accept manifests from arbitrary file paths and declare webapp manifests for other origins. This could enable fullscreen UI spoofing and cross-origin attacks on target...

CVE-2020-26957

CVE-2020-26957 : OneCRL was non-functional in the new Firefox for Android due to a missing service initialization, potentially causing failure to enforce certain certificate revocations. Affected product/variant: Firefox on Android (Firefox

CVE-2023-29537

CVE-2023-29537 concerns multiple race conditions in font initialization that could cause memory corruption and allow attacker-controlled code execution. Affected products include Mozilla Firefox on Android, Firefox versions before 112, and Focus for Android before 112. The vulnerability’s root ca...

CVE-2020-15666

CVE-2020-15666 affects Firefox before 80 (desktop and Android); the issue is an information-disclosure vulnerability where loading a non-video in an audio/video context leaks the exact HTTP status code via the MediaError Message. This could enable login-status inference to services or local-netwo...

CVE-2021-29993

CVE-2021-29993 affects Mozilla Firefox for Android. The root cause is that Firefox allowed navigations through the intent:// protocol, which could be used to trigger crashes and UI spoofing on Android. The vulnerability is limited to Firefox for Android; other OSes are unaffected, and affected ve...

CVE-2022-38474

CVE-2022-38474 concerns Firefox for Android where a website that already has microphone permission can record audio without showing the audio notification again. The issue occurs in Firefox versions prior to 104 and does not bypass the initial permission prompt. Connected sources corroborate that...

CVE-2020-26955

Technical details about CVE-2020-26955 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2023-29551

CVE-2023-29551 corresponds to memory safety bugs in Mozilla Firefox 111 that affected Firefox for Android < 112, Firefox < 112, and Focus for Android

CVE-2023-29544

CVE-2023-29544 describes a memory corruption vulnerability in the Firefox garbage collector that can trigger a potentially exploitable crash when multiple resource-exhaustion instances occur at the wrong time. Affected products include Firefox for Android and Focus for Android, specifically versi...

CVE-2020-26975

CVE-2020-26975 concerns Mozilla Firefox for Android. A malicious app that broadcasts an Intent to Firefox for Android could specify arbitrary headers, enabling attacks such as ambient authority abuse or session fixation. The issue is limited to Firefox for Android; other OSes are unaffected, and ...

CVE-2023-29543

CVE-2023-29543 affects Mozilla Firefox and Focus for Android prior to version 112, caused by a memory-corruption/use-after-free in a global object’s debugger vector. Affected products include Firefox for Android <112, Firefox <112, and Focus for Android

CVE-2023-29549

CVE-2023-29549 : The issue arises when a call to bind may end up in the wrong realm, creating a vulnerability for JavaScript-based sandboxes such as SES in Firefox-based browsers. Affected products include Firefox for Android <112, Firefox <112, and Focus for Android

CVE-2020-26977

CVE-2020-26977 affects Firefox for Android; the flaw allowed an attacker to control the content of a tab by connecting to a website through an unresponsive port, while the URL bar showed the original domain. The issue is limited to Firefox for Android and Firefox

CVE-2023-29538

CVE-2023-29538 affects Firefox (and Focus) on Android: under specific WebExtension load circumstances a jar:file:/// URI could be exposed instead of moz-extension:///, leaking local directory paths. Affected: Firefox for Android <112, Firefox <112, and Focus for Android

CVE-2023-29546

CVE-2023-29546 affects Firefox for Android (and Focus for Android) with

CVE-2023-29534

CVE-2023-29534 affects Firefox for Android and Focus for Android, with versions earlier than 112 at risk. The issue stems from multiple techniques used to obscure the fullscreen notification, which could lead to user confusion and spoofing. The connected documents indicate the vulnerability is li...

CVE-2023-5758

CVE-2023-5758: Affected software is Firefox for iOS prior to version 119. In reader mode, the redirect URL could be exploited to execute attacker-controlled script via a reflected XSS attack. Impact is reflected XSS with potential script execution when opening a page in reader mode. Remediation p...

CVE-2020-6830

The CVE-2020-6830 entry concerns Firefox for iOS, where a leakage of a unique token used for native-to-JS bridging (and previously also JS-to-native) enabled non-app code to call bridging functions. The connected sources confirm affected product/version: Firefox for iOS

CVE-2022-31746

CVE-2022-31746 affects Firefox for iOS (versions prior to 102). The issue stems from a leaked secret UUID key via the Referrer header, which could allow an attacker to bypass internal URL protections and disclose protected information. The NVD/connected sources list an impact on integrity with a ...

CVE-2012-1136

CVE-2012-1136 is listed in multiple advisories for FreeType before 2.4.9 used in Mozilla Firefox Mobile and other products. The vulnerability allows remote denial of service or potential code execution via crafted font data in BDF fonts lacking an ENCODING field, caused by an invalid heap write a...

CVE-2012-1134

FreeType before 2.4.9 (as used in Mozilla Firefox Mobile before 10.0.4 and other products) is vulnerable via crafted font data (Type 1, TrueType, BDF, etc.), enabling denial of service and possibly arbitrary code execution. Impact is described as invalid heap/write, memory corruption, or related ...

CVE-2012-1126

CVE-2012-1126 (and related CVEs 1127, 1128, 1129, 1130, 1131, 1132, 1133, 1134, 1135, 1136, 1137, 1138, 1139, 1140, 1141, 1142, 1143, 1144) affect FreeType prior to 2.4.9. The issue arises when parsing various font formats (BDF, TrueType, Type 1, CFF/PD, etc.) used by FreeType in Firefox Mobile a...

CVE-2023-49060

CVE-2023-49060 affects Firefox for iOS prior to 120. The issue allows an attacker to exfiltrate a security key from Reader Mode by abusing the referrerpolicy attribute, potentially enabling access to internal pages/data. Root cause: misuse of Reader Mode and referrer policy handling leading to da...

CVE-2012-1144

CVE-2012-1144 affects FreeType before 2.4.9 and is among multiple font-related flaws in FreeType used by Mozilla Firefox Mobile and other products. It can cause denial of service via invalid heap write and memory corruption and may allow arbitrary code execution through crafted fonts (notably Tru...

CVE-2012-1133

CVE-2012-1133 affects FreeType prior to 2.4.9 and is triggered when processing font data (e.g., BDF fonts) in Mozilla Firefox Mobile and other products. The issue can cause a denial of service via invalid heap write and memory corruption and may possibly lead to arbitrary code execution. Affected...