CVE-2015-4509

Mozilla Firefox: CVE-2015-4509 is a use-after-free in the HTMLVideoElement interface that could let remote attackers execute arbitrary code via crafted JavaScript manipulating a media element URI table (aka ZDI-CAN-3176). Affected versions are Firefox before 41.0 and Firefox ESR 38.x before 38.3....

CVE-2015-7213

CVE-2015-7213 is an integer overflow in MPEG4Extractor::readMetaData within libstagefright used by Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 on 64-bit platforms. A crafted MP4 file could trigger a buffer/memory overflow, enabling remote code execution. Public advisories from mu...

CVE-2016-2837

In IBM Storwize V7000 Unified, CVE-2016-2837 affects Mozilla Firefox components embedded via ClearKey CDM in the EME API. A heap-based buffer overflow during video playback could allow remote code execution. Affected versions: 1.5.0.0–1.5.2.4. Remediation: upgrade to 1.5.2.5 or later. If no furth...

CVE-2021-23983

Summary: CVE-2021-23983 affects Mozilla Firefox prior to version 87. The issue arises when a transition on a parent node is caused by removing a CSS rule, allowing an invalid property for a marker to be applied, which can lead to memory corruption and a potentially exploitable crash. This vulnera...

CVE-2009-1302

The CVE-2009-1302 entry affects Mozilla Firefox 3.x prior to 3.0.9, Thunderbird prior to 2.0.0.22, and SeaMonkey prior to 1.1.16. The vulnerability enables remote attackers to trigger a denial of service (application crash) and potentially memory corruption via multiple vectors, including nsAsync...

CVE-2011-2373

CVE-2011-2373 concerns a use-after-free in Mozilla Firefox (prior to 3.6.18 and 4.x up to 4.0.1), Thunderbird (before 3.1.11), and SeaMonkey (through 2.0.14). The vulnerability occurs when JavaScript is disabled and an attacker provides a crafted XUL document, enabling remote code execution. The ...

CVE-2014-1487

CVE-2014-1487 affects Mozilla Firefox (Web workers) and related Mozilla suite components. The issue allows remote attackers to bypass Same Origin Policy and obtain sensitive authentication data via error-message handling in Web workers, affecting Firefox versions before 27.0 (and ESR 24.x before ...

CVE-2014-1513

The CVE-2014-1513 issue affects Mozilla Firefox (and related Mozilla suite components) prior to version 28.0, and Firefox ESR 24.x prior to 24.4, with Firefox/SeaMonkey/Thunderbird affecting ArrayBuffer usage. Root cause: TypedArrayObject mishandles a zero-length transition during ArrayBuffer use...

CVE-2014-1567

CVE-2014-1567 is a use-after-free in DirectionalityUtils.cpp in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1, allowing remote attackers to execute arbitrary code via text processed during directionality resol...

CVE-2015-0802

CVE-2015-0802 concerns Mozilla Firefox before 37.0, where access control relied on docshell type information instead of page principal information for Window.webidl, potentially allowing a remote attacker to execute arbitrary JavaScript with chrome privileges via certain content navigation that p...

CVE-2015-7198

CVE-2015-7198 is a buffer overflow in the ANGLE project’s rx::TextureStorage11 class, triggered by crafted texture data. It affects Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, enabling remote memory corruption and potential DoS or other impact. The issue arises from improper bou...

CVE-2015-7214

CVE-2015-7214 affects Mozilla Firefox before 43.0 and Firefox ESR before 38.5. A cross-site read bypass of the Same Origin Policy is possible via data: and view-source: URIs, allowing an attacker to read data from cross-site URLs and local files. Connected sources confirm the bypass vector and in...

CVE-2016-1957

CVE-2016-1957 affects Mozilla Firefox prior to 45.0 and Firefox ESR 38.x prior to 38.7, where a memory leak in libstagefright during MPEG-4 processing can be triggered by an array deletion, potentially enabling a denial-of-service via memory consumption. Mitigations in the referenced advisories i...

CVE-2016-1974

The CVE-2016-1974 issue affects Mozilla Firefox and Firefox ESR, where nsScannerString::AppendUnicodeTo can fail to verify memory allocation success, enabling a remote attacker to crash the browser or potentially execute arbitrary code via crafted Unicode data in HTML/XML/SVG. Affected versions a...

CVE-2016-5274

Mozilla Firefox (and Thunderbird <45.4) is affected by CVE-2016-5274 due to a use-after-free in nsFrameManager::CaptureFrameState, allowing remote attackers to execute arbitrary code by exploiting interactions between restyling and the Web Animations model. Affected products/versions: Firefox ...

CVE-2016-5281

IBM Storwize V7000 Unified is affected by CVE-2016-5281 (Mozilla Firefox use-after-free in DOMSVGLength) as part of a set of Firefox vulnerabilities bundled in IBM advisories. The IBM Security Bulletin lists affected code releases 1.5.1.0 to 1.5.2.4 and states a fix is available in version 1.5.2....

CVE-2017-5454

CVE-2017-5454 describes a sandbox escape in Mozilla products where the file picker can be abused via relative paths to read local files. Affected are Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox

CVE-2017-7774

CVE-2017-7774 is an out-of-bounds read in graphite2::Silf::readGraphite within the Graphite2 library used by Firefox prior to version 54. Affected component: graphite2 library; affected product is Firefox (pre-54). Root cause: out-of-bounds read in readGraphite. Impact per sources: memory disclos...

CVE-2019-11754

The CVE-2019-11754 entry concerns Firefox where pointer lock activated via requestPointerLock() can occur without user notification. Affected product/version: Firefox versions prior to 69.0.1. Impact stated: potential for a malicious site to hijack or confuse users by hijacking mouse pointer beha...

CVE-2020-35114

CVE-2020-35114 affects Mozilla Firefox before 84.0. Mozilla reports memory safety bugs in Firefox 83 that could lead to memory corruption and potentially arbitrary code execution; exploitation would require convincing a user to visit a crafted page. Affected products in the provided documents con...

CVE-2023-25749

CVE-2023-25749 affects Firefox for Android. An Android feature allows a browser to launch external applications via Intents, and this vulnerability arises when unpatched Android apps can be started this way, potentially exposing users to insecure behavior. The description notes this issue is limi...

CVE-2024-3856

A use-after-free vulnerability exists in Firefox (versions

CVE-2010-3180

The CVE-2010-3180 use-after-free affects Mozilla products: Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9. The issue arises in the nsBarProp function when accessing the locationbar property of a closed window, enabling re...

CVE-2012-1967

CVE-2012-1967 affects Mozilla Firefox 4.x–13.0, Firefox ESR 10.x prior to 10.0.6, Thunderbird 5.0–13.0, Thunderbird ESR 10.x prior to 10.0.6, and SeaMonkey prior to 2.11. Root cause: JavaScript sandbox may run javascript: URLs with insufficient context, allowing remote code execution with user pr...

CVE-2013-1725

CVE-2013-1725 affects Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21. The issue is that initialization of JavaScript objects with compartments may not occur, allowing remote attackers to execute a...

CVE-2014-1479

CVE-2014-1479 affects Mozilla Firefox (including ESR 24.x line), Thunderbird, and SeaMonkey before versions around 27.0/24.x 24.3/SeaMonkey 2.24. The flaw, in the System Only Wrapper (SOW) implementation, does not prevent certain cloning operations, allowing remote attackers to bypass restriction...

CVE-2015-7194

CVE-2015-7194 affects Mozilla Firefox and Firefox ESR via a buffer underflow in libjar when parsing crafted ZIP archives. A remote attacker could crash the browser or possibly execute arbitrary code. Affected: Firefox before 42.0 and Firefox ESR 38.x before 38.4. Remediation: upgrade to Firefox 4...

CVE-2016-1966

CVE-2016-1966 affects Mozilla Firefox and Firefox ESR. The issue is a dangling pointer dereference in NPAPI handling (nsNPObjWrapper::GetNewOrUsed) in dom/plugins/base/nsJSNPRuntime.cpp, allowing a crafted NPAPI plugin to cause a remote crash or arbitrary code execution. Exploitation in the wild ...

CVE-2016-5259

CVE-2016-5259 : A use-after-free in the Mozilla Firefox function CanonicalizeXPCOMParticipant allows remote code execution via a script that closes its own Service Worker inside a nested sync event loop. Affected: Firefox before 48.0 and Firefox ESR 45.x before 45.3. Impact per sources: arbitrary...

CVE-2017-7776

Graphite2 (graphite2) contains multiple vulnerabilities including CVE-2017-7776, a heap-based buffer overflow (read) in graphite2::Silf::getClassGlyph, potentially triggering crashes or code execution when processing malformed fonts. This family affects Firefox prior to 54 and various distributio...

CVE-2018-12399

CVE-2018-12399 affects Firefox prior to 63.0. When a new protocol handler is registered, the API accepts a title argument that can mislead the user about which domain is registering the handler, potentially causing the user to approve a protocol handler they otherwise wouldn’t. The vulnerability ...

CVE-2021-23988

CVE-2021-23988 concerns memory safety bugs in Mozilla Firefox leading to potential memory corruption that could allow execution of arbitrary code. Affected products: Mozilla Firefox versions older than 87. Root cause: memory safety issues reported in Firefox 86 (and Firefox ESR 78.x per MFSA note...

CVE-2023-6864

CVE-2023-6864 affects Mozilla Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. The issue is described as memory safety bugs with evidence of memory corruption; with sufficient effort these could be exploited to execute arbitrary code. Impact is high (CVE base score 8.8; confidentiality, int...

CVE-2024-3855

Firefox versions prior to 125 are vulnerable to an out-of-bounds read caused by incorrect optimization of MSubstr operations by the JIT compiler. This security flaw can lead to memory safety issues or potentially exploitable behavior. Exploitation details are not provided in the documents. Vulner...

CVE-2026-7323

Memory safety bugs exist in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0 . These vulnerabilities involve memory corruption and could potentially be exploited to execute arbitrary code . The issues have been addressed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 . Exploitation details a...

CVE-2009-2654

CVE-2009-2654 affects Mozilla Firefox 3.0.x and 3.5.x before certain fixed releases. A remote attacker could spoof the address bar via a crafted page that uses window.open with an invalid URL character, followed by document.write to the created object and a stop during the error page load, enabli...

CVE-2013-0744

CVE-2013-0744 is a use-after-free in the TableBackgroundPainter::TableBackgroundData::Destroy function of Mozilla Firefox prior to 18.0 (and Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2), Thunderbird prior to 17.0.2/ESR 10.x before 10.0.12/17.x before 17.0.2, and SeaMonkey prior to 2.15...

CVE-2013-0796

CVE-2013-0796 is a WebGL/Mesa driver interaction flaw in Mozilla Firefox (and related Mozilla apps like Thunderbird and SeaMonkey) on Linux that could allow remote code execution or DoS. The issue arises from how WebGL interacts with Mesa drivers, enabling exploitation via unspecified vectors. Pu...

CVE-2013-1709

CVE-2013-1709 is a Firefox/XUL/SeaMonkey family XSS issue caused by improper handling of FRAME elements and history, allowing remote attackers to spoof a relative location in a previously visited document. Affected products are Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderb...

CVE-2013-1714

CVE-2013-1714 concerns Mozilla Firefox and related Mozilla components. The affected products are Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20. Root cause (per the connected MiracleLinux/Nessus entry):...

CVE-2013-1717

CVE-2013-1717: Local-filesystem access via Java applets not properly restricted in Mozilla Firefox (before 23.0; ESR 17.x before 17.0.8), SeaMonkey (before 2.20), and Thunderbird (before 17.0.8). This allows user‑assisted reading of arbitrary files through downloads to fixed/predictable paths. Co...

CVE-2013-1735

CVE-2013-1735 : A use-after-free in Mozilla's ScrollbarActivity in Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code via image-document scrolling vectors. Ex...

CVE-2014-1530

CVE-2014-1530 affects Mozilla Firefox family components (Firefox before 29.0, ESR 24.x before 24.5, Thunderbird before 24.5, SeaMonkey before 2.26). The issue arises in the docshell loading logic: a crafted site performing history navigation can set a spoofed baseURI, enabling cross-site scriptin...

CVE-2014-1574

CVE-2014-1574 affects Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2. The vulnerability arises from memory safety issues in the browser engine that could be exploited to cause a denial of service (memory corruption and application crash) or possibly ex...

CVE-2014-1578

CVE-2014-1578 affects Mozilla Firefox (Firefox 33.0 and Firefox ESR 31.x before 31.2) and Thunderbird; the issue is an out-of-bounds write in get_tile() when buffering WebM frames with invalid tile sizes, leading to a crash or potentially arbitrary code execution. Connected sources confirm fixes:...

CVE-2015-2743

CVE-2015-2743 affects Mozilla Firefox and Firefox ESR where PDF.js in the built-in PDF viewer could execute internal Worker code with elevated privileges, enabling a Same Origin Policy bypass and potential remote code execution. Affected versions include Firefox < 39.0 and Firefox ESR < 31....

CVE-2015-4477

CVE-2015-4477 is a use-after-free vulnerability in Firefox’s MediaStream playback, triggered by the Web Audio API during audio processing. The issue allows remote attackers to potentially execute arbitrary code and is associated with Firefox versions before 40.0. Remediation is to update to Firef...

CVE-2015-4492

CVE-2015-4492 describes a use-after-free vulnerability in Mozilla Firefox’s XMLHttpRequest::Open implementation (SharedWorker context). The issue could let a remote attacker run arbitrary code by inducing a victim to visit a crafted page that triggers recursive open() calls on an XMLHttpRequest i...

CVE-2015-4498

CVE-2015-4498 affects Mozilla Firefox and Firefox ESR. The vulnerability arises in the add-on installation flow: an attacker can bypass the user-confirmation prompt by crafting a data: URL and navigating to an arbitrary http: or https: URL early in the installation process, enabling installation ...

CVE-2017-7771

CVE-2017-7771 is an out-of-bounds read in the Graphite2 font-rendering library, specifically in graphite2::Pass::readPass, reported for Firefox prior to 54. Public advisories and vendor notes confirm Graphite2 vulnerabilities that can lead to crashes or memory disclosure when processing malformed...