CVE-2013-1698

CVE-2013-1698 is MFSA 2013-60 describing a getUserMedia permission dialog issue in Mozilla Firefox prior to 22.0, where the dialog displays the top-level page URL instead of the specific page URL, enabling a crafted site to trick users into granting camera/microphone access. Affected product: Moz...

CVE-2013-1713

CVE-2013-1713 affects Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20. It arises from an incorrect URI comparison during enforcement of the Same Origin Policy, enabling remote attackers to perfor...

CVE-2014-1479

CVE-2014-1479 affects Mozilla Firefox (including ESR 24.x line), Thunderbird, and SeaMonkey before versions around 27.0/24.x 24.3/SeaMonkey 2.24. The flaw, in the System Only Wrapper (SOW) implementation, does not prevent certain cloning operations, allowing remote attackers to bypass restriction...

CVE-2014-1497

CVE-2014-1497 affects mozilla::WaveReader::DecodeAudioData in Mozilla Firefox up to 28.0 (and ESR 24.x up to 24.4), Thunderbird up to 24.4, and SeaMonkey up to 2.25. A crafted WAV file can cause information disclosure from process heap memory and can trigger a denial of service via an out-of-boun...

CVE-2014-1530

CVE-2014-1530 affects Mozilla Firefox family components (Firefox before 29.0, ESR 24.x before 24.5, Thunderbird before 24.5, SeaMonkey before 2.26). The issue arises in the docshell loading logic: a crafted site performing history navigation can set a spoofed baseURI, enabling cross-site scriptin...

CVE-2015-2713

CVE-2015-2713 is a use-after-free in Mozilla Firefox (SetBreaks) affecting Firefox before 38.0, Firefox ESR before 31.7, and Thunderbird before 31.7. An attacker could craft a document with specific CSS tokens for vertical text to cause heap memory corruption, enabling remote code execution or a ...

CVE-2015-2731

CVE-2015-2731 is a use-after-free vulnerability in the CSPService::ShouldLoad function of Firefox’s microtask implementation (and affects Thunderbird). An attacker could trigger removal of a DOM object via client-side JavaScript based on a Content Policy, leading to remote code execution. Affecte...

CVE-2015-7198

CVE-2015-7198 is a buffer overflow in the ANGLE project’s rx::TextureStorage11 class, triggered by crafted texture data. It affects Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, enabling remote memory corruption and potential DoS or other impact. The issue arises from improper bou...

CVE-2016-2837

In IBM Storwize V7000 Unified, CVE-2016-2837 affects Mozilla Firefox components embedded via ClearKey CDM in the EME API. A heap-based buffer overflow during video playback could allow remote code execution. Affected versions: 1.5.0.0–1.5.2.4. Remediation: upgrade to 1.5.2.5 or later. If no furth...

CVE-2018-5183

CVE-2018-5183 is a memory corruption vulnerability in Mozilla’s Skia library used by Firefox/Thunderbird ESR 52.x. The issue involves invalid reads/writes during graphic operations and was addressed by backporting changes to Skia, with fixed versions shipped as Thunderbird/Firefox ESR 52.8.0 (and...

CVE-2019-11695

CVE-2019-11695 affects Mozilla Firefox prior to version 67.0 and is caused by a scripting-defined custom cursor that can position over the address bar, spoofing the real cursor outside the primary web content area. This enables potential user deception (e.g., clicking permission prompts or UI ele...

CVE-2019-17014

CVE-2019-17014 : A cross-origin information leak in Firefox occurs when an image fails to load correctly (e.g., non-image), enabling cross-domain drag-and-drop. Affected: Firefox versions earlier than 71. Root cause: drag-and-drop cross-domain exposure, leading to a partial confidentiality impact...

CVE-2019-9803

CVE-2019-9803 affects Mozilla Firefox prior to 66.0. The Upgrade-Insecure-Requests (UIR) mechanism under CSP can fail to upgrade same-origin navigations to HTTPS, potentially enabling MITM on linked resources. Affected component: Firefox browser (versions

CVE-2021-29960

The CVE-2021-29960 entry concerns Mozilla Firefox before version 89. The issue is an information disclosure where Firefox caches the last filename used for printing and often uses the web page title as the suggested print filename. The combination of caching and title suggestion could allow the t...

CVE-2022-22736

CVE-2022-22736 concerns Mozilla Firefox prior to 96. It describes a potential local privilege escalation on Windows when Firefox is installed to a world-writable directory or when the install directory is non-default, due to Firefox searching the current directory for system libraries. Affected s...

CVE-2025-3608

CVE-2025-3608 involves a race condition in Mozilla Firefox’s nsHttpTransaction that can lead to memory corruption and an exploitable condition. Affected product: Firefox versions prior to 137.0.2. The root cause is a competing condition in nsHttpTransaction; impact is described as memory corrupti...

CVE-2009-3077

CVE-2009-3077 affects Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3. The issue is a dangling-pointer vulnerability in TreeColumns of a XUL tree, caused by improper pointer management, enabling remote attackers to execute arbitrary code via a crafted HTML document. Affected products: Firefo...

CVE-2009-3389

CVE-2009-3389 is an integer overflow in libtheora (Theora video library) that affects Mozilla Firefox <3.5.6 and SeaMonkey

CVE-2010-3179

CVE-2010-3179 : Stack-based buffer overflow in Firefox’s text rendering when a very long argument is passed to document.write. Affects Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9. Remediation per MFSA advisory:...

CVE-2011-2373

CVE-2011-2373 concerns a use-after-free in Mozilla Firefox (prior to 3.6.18 and 4.x up to 4.0.1), Thunderbird (before 3.1.11), and SeaMonkey (through 2.0.14). The vulnerability occurs when JavaScript is disabled and an attacker provides a crafted XUL document, enabling remote code execution. The ...

CVE-2012-3972

CVE-2012-3972 affects the XSLT format-number functionality in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12. The vulnerability allows remote attackers to obtain sensitive information via unspecif...

CVE-2013-0783

CVE-2013-0783 refers to multiple unspecified vulnerabilities in the Mozilla Firefox browser engine (Firefox <19.0, ESR 17.x <17.0.3, Thunderbird <17.0.3, SeaMonkey

CVE-2013-0800

CVE-2013-0800 : An integer signedness error in the pixman_fill_sse2 function (pixman-sse2.c) used by Cairo and shipped with Mozilla Firefox and related products allows a remote attacker to trigger an out-of-bounds write via crafted values (negative box boundary or negative box size). This affects...

CVE-2013-1687

CVE-2013-1687 affects Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7. The vulnerability arises from insufficient restriction of XBL user-defined functions in the SOW (System Only Wrapper) and COW (Chrome Object Wrappe...

CVE-2015-7212

CVE-2015-7212 describes an integer overflow in mozilla::layers::BufferTextureClient::AllocateForSurface in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5, allowing remote code execution via a graphics operation that allocates a large texture. Affected products/versions: Firefox prio...

CVE-2015-7213

CVE-2015-7213 is an integer overflow in MPEG4Extractor::readMetaData within libstagefright used by Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 on 64-bit platforms. A crafted MP4 file could trigger a buffer/memory overflow, enabling remote code execution. Public advisories from mu...

CVE-2016-5259

CVE-2016-5259 : A use-after-free in the Mozilla Firefox function CanonicalizeXPCOMParticipant allows remote code execution via a script that closes its own Service Worker inside a nested sync event loop. Affected: Firefox before 48.0 and Firefox ESR 45.x before 45.3. Impact per sources: arbitrary...

CVE-2017-7774

CVE-2017-7774 is an out-of-bounds read in graphite2::Silf::readGraphite within the Graphite2 library used by Firefox prior to version 54. Affected component: graphite2 library; affected product is Firefox (pre-54). Root cause: out-of-bounds read in readGraphite. Impact per sources: memory disclos...

CVE-2017-7778

CVE-2017-7778 relates to multiple vulnerabilities in Graphite2 (upstream 1.3.10). The issues include out-of-bounds reads, buffer overflow reads/writes, and use of uninitialized memory in Graphite2, and are addressed by upgrading to Graphite2 1.3.10. Publicly affected products in the CVE record in...

CVE-2019-9789

CVE-2019-9789 affects Mozilla Firefox before 66.0. The issue stems from memory-safety bugs that can lead to memory corruption, with Mozilla stating these could be exploited to run arbitrary code. The consequence is remote code execution or a browser crash, depending on the specific bug. Mitigatio...

CVE-2020-26962

CVE-2020-26962 affects Mozilla Firefox up to version 82 (Firefox

CVE-2021-23988

CVE-2021-23988 concerns memory safety bugs in Mozilla Firefox leading to potential memory corruption that could allow execution of arbitrary code. Affected products: Mozilla Firefox versions older than 87. Root cause: memory safety issues reported in Firefox 86 (and Firefox ESR 78.x per MFSA note...

CVE-2021-4129

CVE-2021-4129 is a memory-safety issue originally reported in Firefox 94, affecting Firefox < 95, Firefox ESR < 91.4.0, and Thunderbird

CVE-2023-28177

CVE-2023-28177 corresponds to memory safety bugs in Firefox 110, with the issue affecting Firefox versions before 111. The supplied documents indicate memory corruption evidence and a theoretical path to arbitrary code execution, though no exploit details are provided. Affected component scope is...

CVE-2024-8900

CVE-2024-8900 describes a vulnerability where an attacker could write data to the user’s clipboard, bypassing the user prompt, during a specific sequence of navigational events. Affected products and versions per the provided data are Mozilla Firefox before version 129, Firefox ESR before 128.3, ...

CVE-2025-3030

CVE-2025-3030 : Memory safety bugs in Firefox 136/ESR 128.8 and Thunderbird 136/128.8 allow memory corruption; could enable arbitrary code execution if exploited. Affected products include Firefox < 137 and Thunderbird

CVE-2010-3180

The CVE-2010-3180 use-after-free affects Mozilla products: Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9. The issue arises in the nsBarProp function when accessing the locationbar property of a closed window, enabling re...

CVE-2013-0746

CVE-2013-0746 affects Mozilla products including Firefox (before 18.0), Firefox ESR (before 10.0.12 and 17.x before 17.0.2), Thunderbird (before 17.0.2, and ESR 10.x before 10.0.12 and 17.x before 17.0.2), and SeaMonkey (before 2.15). The issue is a quickstubs/jsval return-value handling flaw tha...

CVE-2013-0787

CVE-2013-0787 is a Use-after-free in Mozilla Firefox’s editor component (nsEditor::IsPreformatted) that could allow remote code execution. Affected: Firefox <19.0.2, Firefox ESR <17.0.4, Thunderbird <17.0.4, Thunderbird ESR <17.0.4, and SeaMonkey

CVE-2014-1481

CVE-2014-1481 affects Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24. It enables remote attackers to bypass restrictions on window objects by exploiting inconsistencies in native JavaScript engine getter methods. Impact per sources is...

CVE-2014-1578

CVE-2014-1578 affects Mozilla Firefox (Firefox 33.0 and Firefox ESR 31.x before 31.2) and Thunderbird; the issue is an out-of-bounds write in get_tile() when buffering WebM frames with invalid tile sizes, leading to a crash or potentially arbitrary code execution. Connected sources confirm fixes:...

CVE-2015-0802

CVE-2015-0802 concerns Mozilla Firefox before 37.0, where access control relied on docshell type information instead of page principal information for Window.webidl, potentially allowing a remote attacker to execute arbitrary JavaScript with chrome privileges via certain content navigation that p...

CVE-2015-0807

CVE-2015-0807 affects Mozilla Firefox (before 37.0, and Firefox ESR 31.x before 31.6) and Thunderbird (before 31.6). The issue is in navigator.sendBeacon: after a preflight request, HTTP 30x redirects are processed, allowing bypass of CORS access-control checks and enabling cross-site request for...

CVE-2015-4509

Mozilla Firefox: CVE-2015-4509 is a use-after-free in the HTMLVideoElement interface that could let remote attackers execute arbitrary code via crafted JavaScript manipulating a media element URI table (aka ZDI-CAN-3176). Affected versions are Firefox before 41.0 and Firefox ESR 38.x before 38.3....

CVE-2016-5296

CVE-2016-5296 is a heap-based buffer overflow in Cairo when processing SVG content, caused by compiler optimization. It affects Mozilla Thunderbird and Firefox/Firefox ESR as described in Mozilla advisories, and is also present in IBM Storwize V7000 Unified (Affecting 1.5.0.0–1.5.2.5; fixed in 1....

CVE-2017-7776

Graphite2 (graphite2) contains multiple vulnerabilities including CVE-2017-7776, a heap-based buffer overflow (read) in graphite2::Silf::getClassGlyph, potentially triggering crashes or code execution when processing malformed fonts. This family affects Firefox prior to 54 and various distributio...

CVE-2018-12398

CVE-2018-12398 affects Firefox versions earlier than 63.0 and allows CSP bypass via stylesheet injection using a reflected URL in certain resource URIs (e.g., chrome:). Affected products are Firefox

CVE-2018-12402

CVE-2018-12402 affects Firefox up to version 62 and concerns the internal WebBrowserPersist code used when saving pages (“Save Page As…”). The vulnerability arises from not using the correct origin context for sub-resources, enabling access to resources that could reveal a visitor’s Windows usern...

CVE-2018-5151

CVE-2018-5151 affects Mozilla Firefox prior to version 60, where memory safety bugs in Firefox 59 could potentially lead to memory corruption and arbitrary code execution. The issue is documented in multiple sources referencing memory safety bugs in Firefox 59 and the impact is limited to Firefox...

CVE-2018-5173

CVE-2018-5173 : In Firefox, the filename shown in the Downloads panel can be spoofed by rendering certain Unicode characters differently, allowing a deception of the file name and potentially masking the extension of executable files. The dialog used to open the file still shows the true filename...