CVE-2018-5117

CVE-2018-5117 describes a URL spoofing issue where, when right-to-left text is used in the address bar with left-to-right alignment, the displayed URL can be scrolled to mislead users about the actual site. The vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox

CVE-2013-0801

CVE-2013-0801 is a memory-corruption vulnerability in the Mozilla Firefox/Thunderbird browser engine. Affected: Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6. Impact per docs: remote Denial of Service and possible arbitrary ...

CVE-2016-9899

CVE-2016-9899 describes a use-after-free in Firefox/Thunderbird caused by errors in node adoption handling during DOM event manipulation and audio element removal. Affected: Firefox < 50.1, Firefox ESR < 45.6, Thunderbird

CVE-2018-5156

The CVE-2018-5156 entry describes a vulnerability in media capture: when the media source type is changed during capture, stream data can be cast to the wrong type, causing a crash. Affected products include Thunderbird

CVE-2023-4054

CVE-2023-4054 affects Firefox on Windows (Firefox < 116; ESR < 102.14, 115.1) and Thunderbird

CVE-2017-5444

CVE-2017-5444 is a buffer overflow in parsing application/http-index-format data that enables an out-of-bounds read. Affected: Mozilla Thunderbird < 52.1, Firefox ESR < 45.9/52.1, and Firefox

CVE-2018-5091

CVE-2018-5091 describes a use-after-free in Firefox/Firefox ESR during WebRTC connections when handling DTMF timers, leading to a potentially exploitable crash. Public sources indicate affected products are Firefox ESR versions prior to 52.6 and Firefox prior to 58. Upstream/agency advisories con...

CVE-2023-32207

CVE-2023-32207 describes a missing delay in popup notifications that could let an attacker trick a user into granting permissions. Affected software includes Firefox < 113, Firefox ESR < 102.11, and Thunderbird

CVE-2025-1932

CVE-2025-1932 is an information- and memory-safety issue in the XSLT txNodeSorter comparator, causing potential out-of-bounds access. Affected products and versions are Firefox (pre-136), Firefox ESR (pre-128.8), Thunderbird (pre-136), and Thunderbird (pre-128.8); root cause is an inconsistent co...

CVE-2026-10702

CVE-2026-10702 relates to a JIT miscompilation in the JavaScript Engine (JIT component) of Firefox. It is fixed in Firefox 151.0.3. The connected documents confirm the affected product as Firefox and the root cause as a JIT miscompilation, with remediation being upgrade to 151.0.3. No exploitatio...

CVE-2018-5095

CVE-2018-5095 is an integer overflow in the Skia library during edge-builder memory allocation on systems with 8 GB+ RAM, causing uninitialized memory usage and a potentially exploitable crash. Public disclosures show affected products include Thunderbird < 52.6, Firefox ESR < 52.6, and Fir...

CVE-2018-5103

CVE-2018-5103 is a use-after-free vulnerability that can occur during mouse event handling due to multiprocess-related issues, leading to potentially exploitable crashes. Affected products include Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox

CVE-2025-49710

CVE-2025-49710 corresponds to an integer overflow in the OrderedHashTable used by the JavaScript engine, affecting Mozilla Firefox versions earlier than 139.0.4. The vulnerability is documented across multiple sources (e.g., Mozilla MFSA advisory) and is rated critical (CVSS 3.1: 9.8) with potent...

CVE-2017-5376

CVE-2017-5376 is a use-after-free in XSL processing of XSLT documents. Connected IBM advisories tie this CVE to Mozilla Firefox components shipped in IBM Storwize V7000 Unified and IBM SONAS; affected products include Thunderbird and Firefox binaries reported in the CVE. The IBM bulletins specify...

CVE-2018-12393

CVE-2018-12393 concerns 32‑bit Firefox builds (not 64‑bit) where an integer overflow during scripts-to-UTF-16 conversion can allocate a too-small buffer, causing an out-of-bounds write. Affected products include Firefox < 63, Firefox ESR < 60.3, and Thunderbird

CVE-2022-34482

Summary of CVE-2022-34482 (and related advisories): An attacker could coax a user to drag-and-drop an image to the filesystem, allowing manipulation of the resulting filename to include an executable extension. This could potentially trick the user into executing malicious code. Affected product:...

CVE-2022-45416

CVE-2022-45416 affects Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox

CVE-2012-0469

CVE-2012-0469 is a use-after-free in Mozilla Firefox/Thunderbird/SeaMonkey components involving the IndexedDB IDBKeyRange cycleCollection Trace path. Affects Firefox 4.x–11.0, ESR 10.x before 10.0.4, Thunderbird 5.0–11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9. Root cause: u...

CVE-2018-5099

CVE-2018-5099 is a use-after-free vulnerability in the widget listener that can crash or potentially allow code execution when references to freed browser objects are used. Affected products/versions include Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox

CVE-2021-43540

CVE-2021-43540 affects Mozilla Firefox prior to 95. WebExtensions with the correct permissions could create and install ServiceWorkers for third-party sites that would not be uninstalled with the extension. This is described as an access restriction bypass vulnerability in Firefox < 95. The re...

CVE-2023-5173

CVE-2023-5173 affects Firefox in non-standard configurations where the non-HTTPS Alternate Services preference is enabled (network.http.altsvc.oe). The issue is an integer overflow that can cause an out-of-bounds write into privileged process memory, with impact described as high and specific to ...

CVE-2023-5723

The CVE-2023-5723 issue affects Mozilla Firefox prior to version 119, where an attacker with temporary script access to a site could set a cookie containing invalid characters via document.cookie, potentially causing unknown errors. Public sources in the connected documents consistently reference...

CVE-2018-12396

CVE-2018-12396 is a Mozilla Firefox/Firefox ESR vulnerability where a WebExtension can run content scripts in disallowed contexts after certain navigation/events, enabling potential privilege escalation on sites where such scripts shouldn’t run. Multiple connected advisories confirm the issue and...

CVE-2018-5097

CVE-2018-5097 is a use-after-free vulnerability in XSL transformations where the source document is manipulated by script content during transformation. Affected products include Mozilla Thunderbird and Firefox variants prior to version 52.6/58, with upstream fixes targeting Thunderbird 52.6.0 (a...

CVE-2018-5098

CVE-2018-5098 is a use-after-free in Thunderbird/Firefox related to manipulating form input elements, focus, and selections via script content, causing potential crashes. Affected: Thunderbird < 52.6, Firefox ESR < 52.6, Firefox

CVE-2018-5148

CVE-2018-5148 is a use-after-free in Firefox/Firefox ESR’s compositor triggered during certain graphics operations due to using a raw pointer instead of a reference-counted one. Affected versions include Firefox ESR < 52.7.3 and Firefox

CVE-2018-5159

CVE-2018-5159 describes an integer overflow in the Skia library caused by 32-bit integer use in an array without bounds checks, leading to out-of-bounds writes. This can crash web content and is potentially exploitable. Affected products include Thunderbird < 52.8, Thunderbird ESR < 52.8, F...

CVE-2019-17021

CVE-2019-17021 describes a race condition during the initialization of a new content process in Firefox on Windows that can disclose heap addresses from the parent process. Affected products are Firefox ESR < 68.4 and Firefox

CVE-2022-36320

CVE-2022-36320 involves memory safety bugs found in Firefox 102 that, in some cases, could lead to memory corruption and potentially arbitrary code execution. Affected software: Firefox versions older than 103 (per multiple sources in connected documents). Root cause described as memory safety is...

CVE-2025-5020

The CVE-2025-5020 issue affects Firefox for iOS (pre-139). The root cause is that opening maliciously crafted URLs from other apps could allow an attacker to spoof website addresses when the URL uses non-HTTP schemes internal to the Firefox iOS client. The impact is spoofing of website addresses,...

CVE-2007-3670

CVE-2007-3670 describes an argument-injection vulnerability where Internet Explorer could pass malicious parameters to registered Firefox handlers (FirefoxURL/FirefoxHTML) on Windows, enabling cross-browser scripting and potential remote code execution by exploiting the unescaped URL argument whe...

CVE-2016-9900

CVE-2016-9900 describes that data: URLs used by SVG images can bypass security restrictions, enabling cross-domain data leakage. Affected products include Mozilla Firefox (non-ESR) prior to 50.1, Firefox ESR prior to 45.6, and Thunderbird prior to 45.6. Root cause is the handling of external reso...

CVE-2018-5102

CVE-2018-5102 is a use-after-free in HTML media element handling with media streams, affecting Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox

CVE-2018-5155

CVE-2018-5155 is a use-after-free in the layout code when processing SVG text-paths during animations, causing a potentially exploitable crash. Affected products include Thunderbird and Firefox: Thunderbird < 52.8 (including ESR), and Firefox

CVE-2019-11751

CVE-2019-11751 affects Firefox on Windows, with logs sanitization issue allowing a log file to be written to arbitrary locations (e.g., Startup folder). Affected products are Firefox < 69 and Firefox ESR

CVE-2022-45410

CVE-2022-45410 : When a ServiceWorker intercepted a request with a FetchEvent, the origin of the request could be lost after the ServiceWorker took ownership, negating SameSite cookie protections. Affected: Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox

CVE-2025-4919

CVE-2025-4919 describes an out-of-bounds read/write in JavaScript objects caused by confusing array index sizes, affecting Firefox including aliases (Firefox < 138.0.4, ESR < 128.10.1, ESR < 115.23.1) and Thunderbird (Thunderbird < 128.10.2; Thunderbird

CVE-2019-17015

CVE-2019-17015 is a Windows-only memory corruption issue during the initialization of a new content process in Mozilla Firefox ESR < 68.4 and Firefox

CVE-2022-46880

CVE-2022-46880 describes a missing check related to tex units that could cause a use-after-free and an exploitable crash. Affected products include Firefox (ESR < 102.6, and Firefox < 105) and Thunderbird

CVE-2022-46881

CVE-2022-46881 is a memory safety issue in WebGL where an optimization could cause memory corruption and a potentially exploitable crash. Affected products per provided sources are Firefox releases before 106, Firefox ESR before 102.6, and Thunderbird before 102.6. The root cause is a WebGL optim...

CVE-2016-9893

CVE-2016-9893 relates to memory safety bugs reported in Thunderbird 45.5, with evidence of memory corruption. Affected products include Firefox <50.1, Firefox ESR <45.6, and Thunderbird

CVE-2020-6809

CVE-2020-6809 : A WebExtension with the all-urls permission could read local files when it made a fetch with mode 'same-origin', affecting Firefox versions older than 74. Root cause is an escalation of file access in WebExtensions via the all-urls permission. The IBM bulletin confirms the CVE-202...

CVE-2016-1938

CVE-2016-1938 affects Mozilla NSS up to version 3.21, used by Firefox prior to 44.0. The issue is in the s_mp_div function in lib/freebl/mpi/mpi.c, where numbers are divided incorrectly, potentially allowing remote attackers to defeat cryptographic protections by leveraging use of mp_div or mp_ex...

CVE-2020-12390

CVE-2020-12390 affects Firefox versions prior to 76. The root cause is incorrect origin serialization of URLs containing IPv6 addresses, which could cause security checks to be bypassed or misjudged. The vulnerability is documented in Mozilla advisory mfsa2020-16 and related bug reports, with pub...

CVE-2020-6810

Technical details beyond the high-level description (Firefox

CVE-2017-5373

Summary (CVE-2017-5373) Memory-safety bugs were reported in Firefox 50.1/ESR 45.6 and affect Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox

CVE-2020-6813

CVE-2020-6813 affects Firefox prior to 74, where protecting CSS blocks with the Content Security Policy nonce could be bypassed via an @import in a CSS block, allowing style injection and bypass of CSP intent. The IBM bulletin for IBM Cloud App Management documents this exact CVE and notes the vu...

CVE-2022-31743

CVE-2022-31743 describes a vulnerability in Mozilla Firefox where the HTML parser incorrectly handles HTML comment tags, creating an inconsistency with other browsers. Affected product: Firefox versions earlier than 101.0. The underlying issue is in how HTML comments are interpreted, enabling pot...

CVE-2022-46877

CVE-2022-46877 describes a fullscreen notification bypass in Firefox prior to version 108, where the fullscreen notification could be delayed or suppressed, potentially allowing user confusion or spoofing. Affected product: Firefox (

CVE-2022-46878

CVE-2022-46878 corresponds to memory-safety bugs reported in Thunderbird 102.5 with some cases involving memory corruption; affected products include Firefox < 108, Firefox ESR < 102.6, and Thunderbird