CVE-2017-5439

CVE-2017-5439 is a use-after-free in XSLT processing caused by improper handling of template parameters (nsTArray Length()) in Mozilla code, affecting Firefox and Thunderbird. It targets Firefox < 53 (and related ESR branches) and Thunderbird

CVE-2017-5464

CVE-2017-5464 affects Mozilla products: Thunderbird

CVE-2017-7784

The CVE-2017-7784 issue is a use-after-free in the image observer during frame reconstruction after the observer has been freed, affecting Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox

CVE-2017-7792

The CVE-2017-7792 issue affects Thunderbird (< 52.3), Firefox ESR (< 52.3), and Firefox (

CVE-2017-7807

CVE-2017-7807 describes a domain URL hijack via AppCache fallback, resolved by requiring fallback files to be inside the manifest directory. Affected products include Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox

CVE-2017-7843

Summary (CVE-2017-7843) : In Firefox, Private Browsing mode could be exploited by a web worker to persist data in IndexedDB, enabling cross-session fingerprinting. Affected are Firefox ESR versions older than 52.5.2 and Firefox versions older than 57.0.1. The root cause is that IndexedDB remains ...

CVE-2021-29952

Summary: CVE-2021-29952 affects Mozilla Firefox and Firefox for Android. A race condition during the destruction of Web Render components could cause undefined behavior and, with sufficient effort, potentially be exploited to run arbitrary code. Affected versions: Firefox < 88.0.1 and Firefox ...

CVE-2021-38491

Mozilla Firefox before version 92 is affected by CVE-2021-38491: mixed-content checks fail to analyze opaque origins, allowing some mixed content to load. The issue is documented across multiple sources (e.g., Mozilla MFSA advisory and distro advisories) and is fixed/upstream mitigated by upgradi...

CVE-2022-34471

CVE-2022-34471 affects Mozilla Firefox prior to version 102, where the updater failed to verify that the downloaded addon update version matched the manifest, creating a risk that a tampered server manifest could cause a downgrade to an older addon. The issue is documented across multiple connect...

CVE-2022-45411

CVE-2022-45411: Cross-Site Tracing vulnerability in Firefox/Thunderbird due to servers echoing Trace requests and exposure of authorization headers/cookies; mitigations have been implemented via browser fetch/XHR limits and non-standard headers like X-Http-Method-Override. The issue is acknowledg...

CVE-2022-46875

CVE-2022-46875 concerns Mozilla Firefox/Thunderbird on Mac OS where the executable warning was not shown when downloading .atloc/.ftploc files, enabling potential command execution. Affects Firefox < 108, Firefox ESR < 102.6, and Thunderbird

CVE-2023-29535

CVE-2023-29535: The vulnerability arises from a garbage collector compaction issue in Firefox/related products where a weak map could be accessed before proper tracing, leading to memory corruption and a potentially exploitable crash. Affected software per documents includes Firefox (and derivati...

CVE-2023-32212

The CVE-2023-32212 issue is a UI spoofing vulnerability in Mozilla Firefox and Thunderbird where an attacker could position a datalist element to obscure the address bar. Affected products include Firefox versions before 113, Firefox ESR before 102.11, and Thunderbird before 102.11. The connected...

CVE-2013-1710

CVE-2013-1710 affects Mozilla Firefox and related Mozilla-based products via a flaw in Certificate Request Message Format (CRMF) request generation that could allow remote JavaScript execution or cross-site scripting. Specifically, vulnerable components include Firefox before 23.0, Firefox ESR 17...

CVE-2017-5408

CVE-2017-5408: Cross-origin reading of video captions in Mozilla products due to missing CORS header checks. Affected: Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, Thunderbird

CVE-2017-5445

CVE-2017-5445 describes a memory-read vulnerability in Mozilla products when parsing the application/http-index-format content, caused by uninitialized values used to create an array. The impact is information disclosure by reading uninitialized memory in affected components. Affected versions pe...

CVE-2018-5157

CVE-2018-5157 affects Mozilla Firefox prior to 60.0 (including ESR

CVE-2024-0750

CVE-2024-0750 affects Firefox (versions prior to 122) and Thunderbird (prior to 115.7), with the issue described as a bug in popup notifications delay calculation that could allow a user to be tricked into granting permissions. Connected advisories confirm the vulnerability and link it to Mozilla...

CVE-2025-5268

CVE-2025-5268 is a memory-safety vulnerability affecting Firefox and Thunderbird. The advisory notes memory-safety bugs in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10, with evidence of memory corruption. It is stated that some bugs could, with enough effort, be exploi...

CVE-2010-2760

CVE-2010-2760 is a use-after-free in the XUL nsTreeSelection handling within Mozilla Firefox (pre-3.5.12 and 3.6.x prior to 3.6.9), Thunderbird (pre-3.0.7 and 3.1.x prior to 3.1.3), and SeaMonkey (pre-2.0.7). The root cause is a dangling pointer issue in the XUL tree selection leading to potentia...

CVE-2015-7189

CVE-2015-7189 (JPEGEncoder race condition in Mozilla Firefox) is a documented vulnerability affecting Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4. The issue allows a remote attacker to cause arbitrary code execution or a denial of service via a crafted CANVAS element and JavaScri...

CVE-2016-5290

CVE-2016-5290: Memory safety bugs in Firefox 49 and Firefox ESR 45.4 (affecting Thunderbird <45.5, Firefox ESR <45.5, and Firefox

CVE-2016-9898

CVE-2016-9898 is a use-after-free vulnerability in Mozilla Firefox/Thunderbird affecting Firefox <50.1, Firefox ESR <45.6, and Thunderbird

CVE-2017-7810

CVE-2017-7810 refers to memory-safety bugs reported in Firefox 55 and Firefox ESR 52.3, with potential to exploit memory corruption to run arbitrary code. Connected documents confirm that Thunderbird

CVE-2021-29983

CVE-2021-29983 affects Firefox for Android (reported as affecting Firefox

CVE-2023-32211

CVE-2023-32211 describes a type checking bug in Mozilla Firefox and Thunderbird that could lead to invalid code being compiled. The connected documents confirm the flaw affects Firefox versions prior to 113, Firefox ESR prior to 102.11, and Thunderbird prior to 102.11. Multiple security advisorie...

CVE-2012-4186

CVE-2012-4186 : Heap-based buffer overflow in Mozilla Firefox’s nsWaveReader::DecodeAudioData. Affected products include Firefox before 16.0 (and Firefox ESR 10.x before 10.0.8), Thunderbird before 16.0, and SeaMonkey before 2.13. Vectors are unspecified in the provided docs, but exploitation wou...

CVE-2016-9901

CVE-2016-9901 affects Mozilla Firefox and Firefox ESR. Un-sanitized HTML from the Pocket server could execute JavaScript in the unprivileged about:pocket-saved context, gaining access to Pocket’s messaging API via HTML injection. Impact stated as high/critical by CVSS. Remediation: update to Fire...

CVE-2017-5404

CVE-2017-5404 is a use-after-free in Firefox/Thunderbird when manipulating ranges in selections with one node inside a native anonymous tree and one node outside it, leading to a potentially exploitable crash. Affected: Firefox versions before 52 and Firefox ESR before 45.8; Thunderbird versions ...

CVE-2017-5432

CVE-2017-5432 is a use-after-free in Firefox < 53 that can trigger a potentially exploitable crash during certain text-input selection. The vulnerability also affects related Mozilla products in older ESR/thunderbird branches (e.g., Thunderbird < 52.1; ESR

CVE-2021-23955

CVE-2021-23955 affects Mozilla Firefox (pre-85) where a pointer-lock state could be transferred between tabs, enabling clickjacking. Technical details in the CVE description and multiple advisories confirm the underlying issue is a state transfer between tabs related to requestPointerLock. Impact...

CVE-2021-23985

CVE-2021-23985 affects Mozilla Firefox prior to version 87. The issue involves the ability to alter certain about:config values (e.g., via malware on the user’s machine) that could enable Devtools remote debugging in a way that is unobtrusive to the user, allowing a remote attacker with direct ne...

CVE-2022-40957

In Firefox on ARM64, CVE-2022-40957 is caused by inconsistent data in the instruction and data caches while building WebAssembly code, leading to a potentially exploitable crash. Affected products include Firefox on ARM64 and Firefox ESR < 102.3, Thunderbird < 102.3, and Firefox

CVE-2014-1505

CVE-2014-1505 affects Mozilla Firefox (and related Mozilla components) where SVG filter operations in feDisplacementMap could leak displacement-correlation data and potentially bypass Same Origin Policy via a timing attack, enabling partial information disclosure from a different domain. Affected...

CVE-2014-1556

CVE-2014-1556 affects Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7. The root cause is a flaw in WebGL content, constructed with the Cesium JavaScript library, that allows remote attackers to execute arbitrary code. Exploitation would occur via crafted Web...

CVE-2015-2734

CVE-2015-2734 details (mode C): The vulnerability affects Mozilla Firefox (Direct3D 9 implementation) in Windows builds prior to 39.0, Firefox ESR 31.x prior to 31.8 and 38.x prior to 38.1, and Thunderbird prior to 38.1. The underlying issue is reading data from uninitialized memory locations in ...

CVE-2017-7828

CVE-2017-7828 describes a use-after-free in Thunderbird/Firefox related to the PressShell object during layout flush and resize, causing potentially exploitable crashes. Affected products include Thunderbird < 52.5.0 and Firefox < 57 (and ESR

CVE-2019-11701

CVE-2019-11701 affects Mozilla Firefox prior to 67.0. The issue is caused by the default webcal: protocol handler loading a vulnerable site, enabling cross-site scripting (XSS) attacks. Impact per sources includes potential script execution within the browser context and possible credential theft...

CVE-2020-15680

CVE-2020-15680 affects Firefox ≤ 82.0 where referencing a valid external protocol handler in an image tag lets an attacker probe if a protocol handler is registered by distinguishing broken image sizes. The underlying issue is an information disclosure vulnerability related to image tag handling ...

CVE-2022-36316

CVE-2022-36316 affects Mozilla Firefox

CVE-2023-25731

CVE-2023-25731 affects Mozilla Firefox prior to 110, where URL previews in the network panel’s developer tools could allow query parameters to overwrite global objects in privileged code. The issue is confirmed by multiple sources stating Firefox

CVE-2023-25752

CVE-2023-25752 affects Firefox and Thunderbird due to an out-of-bounds risk when accessing throttled streams. The bug stems from not validating the count of available bytes in the caller, allowing potential memory safety issues. Affected versions include Firefox <111, Firefox ESR <102.9, an...

CVE-2023-29548

CVE-2023-29548 concerns a wrong lowering instruction in the ARM64 Ion compiler that yields an incorrect optimization result. The vulnerability affects Firefox (<112), Focus for Android (<112), Firefox ESR (<102.10), Firefox for Android (<112), and Thunderbird (

CVE-2023-4058

CVE-2023-4058 involves memory-safety bugs in Mozilla Firefox. The connected docs consistently indicate these flaws are in Firefox 115 and earlier, with the impact described as potential memory corruption that could be exploited to run arbitrary code, i.e., a high-severity, remote-style risk if ex...

CVE-2006-1733

CVE-2006-1733 affects Mozilla Firefox and Thunderbird 1.x before 1.5, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0. The flaw is in the compilation scope handling of privileged built‑in XBL bindings, enabling a remote attacker to run arbitrary code via (1) valueOf.call or (2) valueOf.appl...

CVE-2016-2796

CVE-2016-2796 describes a heap-based buffer overflow in the Graphite 2 font library (graphite2::vm::Machine::Code::Code) prior to 1.3.6. The vulnerability affected Graphite 2 as used by Mozilla Firefox (before 45.0) and Firefox ESR 38.x (before 38.7), potentially enabling a remote attacker to cau...

CVE-2016-9902

The CVE-2016-9902 entry concerns Mozilla Firefox/Firefox ESR where the Pocket toolbar button incorrectly accepts events from any origin without verifying the event source. The vulnerability arises from the button listening for events fired from its own pages but not validating the origin, enablin...

CVE-2017-5440

CVE-2017-5440 is a use-after-free in XSLT processing caused by failure to propagate error conditions during matching while evaluating context, leading to use of freed objects and potentially a crash. Affected products include Mozilla Firefox (Firefox < 53) and Firefox ESR, and Mozilla Thunderb...

CVE-2018-5129

The CVE-2018-5129 entry relates to a memory-safety/IPC validation issue where a lack of parameter validation on IPC messages can cause an out-of-bounds write, potentially enabling sandbox escape. Affected products include Mozilla Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox

CVE-2021-23958

CVE-2021-23958 affects Mozilla Firefox versions before 85. The issue could confuse the browser into transferring a screen sharing state between tabs, potentially leaking screen sharing permissions/information. Affected product: Firefox (pre-85). Underlying cause: state transfer between tabs durin...