CVE-2017-5449

CVE-2017-5449 affects Mozilla Firefox (and Thunderbird) components where a crash can be triggered during layout/manipulation of bidirectional Unicode text in concert with CSS animations. Public records in connected advisories indicate affected versions: Thunderbird < 52.1, Firefox ESR < 52....

CVE-2019-17000

CVE-2019-17000 affects Firefox versions older than 70. A CSP bypass exists where an object tag with a data: URI did not inherit the parent document’s Content Security Policy in cross-origin frames, potentially allowing inline-script execution in protected documents. Root cause: CSP not correctly ...

CVE-2020-15668

CVE-2020-15668 affects Firefox < 80 and Firefox for Android

CVE-2022-22750

CVE-2022-22750 affects Mozilla Firefox on Windows and macOS (Firefox

CVE-2022-45409

CVE-2022-45409 describes a use-after-free in the garbage collector: GCRuntime::finishCollection could be bypassed, allowing an abort of GC in multiple states/zones and potentially causing a crash that could be exploitable. Affected software includes Firefox ESR < 102.5, Thunderbird < 102.5,...

CVE-2023-32214

CVE-2023-32214 affects Mozilla Firefox and Thunderbird on Windows. The vulnerability involves protocol handlers ms-cxh and ms-cxh-full that could be leveraged to trigger a denial of service. Affected versions are Firefox < 113, Firefox ESR < 102.11, and Thunderbird

CVE-2023-6206

CVE-2023-6206 is described across connected sources as a clickjacking-related issue tied to the fullscreen transition in Mozilla Firefox and Thunderbird. The vulnerability affects Firefox versions older than 120, Firefox ESR older than 115.5.0, and Thunderbird older than 115.5.0. The issue is dis...

CVE-2023-6861

The CVE-2023-6861 issue is a heap buffer overflow in nsWindow::PickerOpen(void) when Firefox/Thunderbird run in headless mode. Affected products: Firefox ESR <115.6, Thunderbird <115.6, and Firefox

CVE-2014-1508

CVE-2014-1508 affects Mozilla Firefox family components (libxul) where libxul.so!gfxContext::Polygon can leak memory, cause out-of-bounds reads, or crash, with potential Same Origin Policy bypass via MathML polygon rendering. Affected: Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbir...

CVE-2017-5442

CVE-2017-5442 is a use-after-free in Firefox/Thunderbird during DOM style changes, causing potentially exploitable crashes. Affected products/versions in the provided documents include Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox

CVE-2017-5466

CVE-2017-5466 describes an origin-confusion bug triggered when a page loaded from an original site via a hyperlink redirects to a data:text/html URL, causing the reloaded page to have an incorrect origin. This enables a cross-site scripting (XSS) risk. Affected products include Mozilla Thunderbir...

CVE-2017-7823

The CVE-2017-7823 entry describes a CSP sandbox issue where the sandbox did not create a unique origin, causing documents to behave as if allow-same-origin were always specified and enabling potential XSS. Affected products are Mozilla Thunderbird < 52.4, Firefox < 56, and Firefox ESR

CVE-2018-5187

CVE-2018-5187 corresponds to memory safety bugs reported in Firefox 60/Firefox ESR 60 and affects Thunderbird < 60, Firefox ESR < 60.1, and Firefox

CVE-2020-26969

CVE-2020-26969 involves memory safety bugs in Mozilla Firefox 82 that may lead to memory corruption and potential arbitrary code execution. Affected product: Firefox; vulnerable component: memory handling in Firefox prior to 83. Root cause as described: memory safety issues; impact: potential for...

CVE-2022-38473

Concrete details for CVE-2022-38473: A cross-origin iframe referencing an XSLT document could inherit the parent domain’s permissions (e.g., microphone or camera) in Thunderbird and Firefox products. Affected: Thunderbird versions earlier than 102.2 and 91.13, Firefox ESR earlier than 91.13 and 1...

CVE-2023-25730

CVE-2023-25730 describes a browser vulnerability where a background script calling document.documentElement.requestFullscreen and then blocking the main thread can force fullscreen mode indefinitely, potentially causing user confusion or spoofing. The connected documents confirm affected products...

CVE-2023-6212

CVE-2023-6212 parks memory safety bugs in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4, with evidence of memory corruption and potential to exploit for arbitrary code. The issue affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird

CVE-2023-6865

CVE-2023-6865 describes a vulnerability in Firefox’s EncryptingOutputStream that could expose uninitialized data, potentially allowing data to be written to local disk with implications for private browsing mode. Affected products noted in the provided documents include Firefox ESR versions prior...

CVE-2013-5609

CVE-2013-5609 is a set of memory-corruption/denial-of-service vulnerabilities in the Mozilla Firefox browser engine, affecting Firefox (including ESR 24.x) and related products prior to versions around 26.0 (per the referenced MiracleLinux AXSA advisories). The issues could allow remote attackers...

CVE-2017-5410

CVE-2017-5410 is a memory corruption bug during JavaScript garbage collection (incremental sweeping) that affects Firefox and Thunderbird prior to version 52. Upgrading to Firefox/Thunderbird 52.0 or later (as reflected in multiple advisories) is the remediation. Exploitation details are not prov...

CVE-2021-23975

The CVE describes a memory-safety flaw in Firefox affecting versions older than 86, caused by the about:memory Measure function invoking sizeof instead of the API that validates pointers. This could contribute to memory safety issues; Mozilla’s advisories indicate broader memory-safety bugs were ...

CVE-2023-37202

CVE-2023-37202 affects Firefox (including ESR) and Thunderbird. The issue is caused by cross-compartment wrappers wrapping a scripted proxy, which could store objects from other compartments in the main compartment, resulting in a use-after-free. Affected versions are Firefox <115, Firefox ESR...

CVE-2024-2606

CVE-2024-2606 concerns Mozilla Firefox: a flaw where passing invalid data could produce invalid WebAssembly (WASM) values, including arbitrary integers that become pointer values. The vulnerability affects Firefox versions older than 124. Root cause described in the documents is improper handling...

CVE-2006-1735

CVE-2006-1735 affects Mozilla Firefox and Thunderbird 1.x prior to 1.5 and 1.0.x prior to 1.0.8, Mozilla Suite prior to 1.7.13, and SeaMonkey prior to 1.0. The vulnerability arises from using an eval in an XBL method binding (XBL.method.eval) to create Javascript functions that are compiled with ...

CVE-2006-1737

CVE-2006-1737 is described as an integer overflow in JavaScript when processing a very large regular expression, affecting Mozilla Firefox/Thunderbird (and related Mozilla-suite components) prior to specified updates. Connected advisories corroborate a memory-currption/robustness issue in JavaScr...

CVE-2010-3176

CVE-2010-3176 affects Mozilla products including Firefox (3.5.x before 3.5.14 and 3.6.x before 3.6.11), Thunderbird (before 3.0.9 and before 3.1.5), and SeaMonkey (before 2.0.9). The issue is described as multiple unspecified vulnerabilities in the browser engine that could allow remote attackers...

CVE-2015-2738

CVE-2015-2738 affects Mozilla Firefox (before 39.0; ESR 31.x before 31.8 and 38.x before 38.1) and Thunderbird (before 38.1). The issue is a read from uninitialized memory in YCbCrImageDataDeserializer::ToDataSourceSurface, with unspecified impact and attack vectors. No remediation details are pr...

CVE-2015-7201

CVE-2015-7201 and related flaws affect Mozilla Firefox/Thunderbird. Multiple memory-safety and memory-corruption issues were fixed in Firefox before 43.0 and ESR before 38.5. Connected advisories show fixes across distributions (e.g., Mageia and CentOS/Debian entries) updating Firefox to 38.5.0 E...

CVE-2016-10196

CVE-2016-10196 : A stack-based buffer overflow in libevent’s evutil_parse_sockaddr_port (evutil.c) before 2.1.6-beta allows a crafted long string in ip_as_string to cause a denial-of-service (segmentation fault). Affected software is libevent prior to 2.1.6-beta; the description notes the fix in ...

CVE-2016-5264

CVE-2016-5264 affects Mozilla Firefox (and Firefox ESR) with a use-after-free in nsNodeUtils::NativeAnonymousChildListChange when applying SVG effects. The vulnerability can allow remote code execution or cause a denial of service via heap memory corruption. It is described for Firefox versions p...

CVE-2016-5284

CVE-2016-5284 affects Mozilla Firefox (before 49.0), Firefox ESR (before 45.4), and Thunderbird (

CVE-2017-7818

Summary: CVE-2017-7818 is a use-after-free vulnerability in Thunderbird (and Firefox/ESR components) involving manipulation of ARIA element arrays via the DOM, leading to a potentially exploitable crash. The connected sources confirm the issue affects Thunderbird prior to 52.4.0 and related Mozil...

CVE-2018-12369

Summary (CVE-2018-12369) WebExtensions bundled with embedded experiments could bypass authorization checks, allowing a malicious WebExtension to gain full browser permissions. Affected products: Mozilla Firefox (non-ESR) versions before 61 and Firefox ESR before 60.1. Root cause: improper authori...

CVE-2018-5096

CVE-2018-5096 is a use-after-free vulnerability in editing events within form elements that can cause a crash. Documented impact is limited to Firefox ESR versions older than 52.6 and Thunderbird versions older than 52.6, with a fix included in version 52.6.0 for affected Mozilla products (Firefo...

CVE-2022-45405

CVE-2022-45405 is a memory-safety use-after-free in the InputStream implementation caused by freeing arbitrary nsIInputStream on a different thread. Documents confirm impact on Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox

CVE-2023-28161

The CVE-2023-28161 issue affects Mozilla Firefox prior to version 111. When a temporary one-time permission (e.g., Camera) is granted to a document loaded via a file: URL, that permission can persist in the tab for subsequent file: URL documents. This could be risky if local files come from diffe...

CVE-2023-32213

CVE-2023-32213 affects Mozilla Firefox and Thunderbird. The flaw arises when reading a file, where an uninitialized value could be used as the read limit. Affected versions are Firefox <113, Firefox ESR <102.11, and Thunderbird

CVE-2024-0746

CVE-2024-0746 describes a crash triggered when a Linux user opens the print preview dialog in Mozilla components. Affected products include Firefox (versions before 122) and Firefox ESR (before 115.7) as well as Thunderbird (before 115.7). The issue is reported as a crash scenario in the print-pr...

CVE-2006-3803

CVE-2006-3803 is a race-condition vulnerability in the JavaScript garbage collector that can be exploited to execute arbitrary code remotely. Affected products include Mozilla Firefox 1.5 prior to 1.5.0.5, Thunderbird prior to 1.5.0.5, and SeaMonkey prior to 1.0.3. The issue occurs when the garba...

CVE-2012-1970

CVE-2012-1970 affects Mozilla Firefox before 15.0, Thunderbird before 15.0, ESR 10.x before 10.0.7, and SeaMonkey before 2.12. The issue stems from multiple unspecified vulnerabilities in the browser engine that can allow remote attackers to cause memory corruption and application crashes or pote...

CVE-2012-3993

CVE-2012-3993 affects Mozilla Firefox (pre-16.0), Firefox ESR (pre-10.0.8), Thunderbird (pre-16.0), Thunderbird ESR (pre-10.0.8), and SeaMonkey (pre-2.13). The Chrome Object Wrapper (COW) implementation can mishandle InstallTrigger failures, enabling remote JavaScript execution with chrome privil...

CVE-2014-1509

CVE-2014-1509 is a buffer overflow in cairo's _cairo_truetype_index_to_ucs4 function that affects Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25. The vulnerability can allow remote code execution via a crafted extension that renders f...

CVE-2014-1514

CVE-2014-1514 affects Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25. The issue arises from not validating the length of the destination array before a copy operation in TypedArrayObject, allowing remote attackers to execute arbitrary...

CVE-2015-7204

CVE-2015-7204 affects Mozilla Firefox before 43.0. The issue is due to how Firefox stores properties of unboxed objects, which can allow a remote attacker to execute arbitrary code via crafted JavaScript variable assignments. The vulnerability is linked to Firefox’s memory handling and has been a...

CVE-2019-11734

CVE-2019-11734 refers to memory safety bugs in Firefox 68 that may allow arbitrary code execution and affect Firefox versions older than 69. The issue is described as memory corruption with potential exploitation but no exploit details are provided in the initial description beyond that. The vuln...

CVE-2020-15674

CVE-2020-15674 is a Firefox memory-safety bug before 81. Mozilla reports memory corruption with enough effort potentially enabling arbitrary code execution. Affected product: Mozilla Firefox (prior to 81); root cause: memory-safety issues leading to memory corruption. Impact: possible remote code...

CVE-2020-26972

CVE-2020-26972 describes a use-after-free in Firefox’s WebGL component caused by a missing check for dead IPC actors, allowing potentially exploitable crashes. Affected product: Firefox (before version 84). Root cause: lifecycle mismanagement of IPC Actors in WebGL; use-after-free when managed ac...

CVE-2022-28284

CVE-2022-28284 affects Mozilla Firefox older than 99. The SVG element could load unexpected content and execute scripts, aligning Gecko with other browsers but diverging from spec-driven security expectations. Impact is high across confidentiality, integrity, and availability. Firefox 99 and lat...

CVE-2022-34474

CVE-2022-34474 affects Mozilla Firefox versions earlier than 102. The issue occurs when an iframe is sandboxed with allow-top-navigation-by-user-activation; if the frame receives a redirect header to an external protocol, the browser processes the redirect and prompts the user. Impact per the ent...

CVE-2022-34477

CVE-2022-34477 describes a vulnerability in Mozilla Firefox where the MediaError message could leak information for same-site cross-origin resources, enabling XS-Leaks. Affected product: Firefox earlier than 102. The underlying issue is inconsistent MediaError messaging, which could disclose sens...