CVE-2016-2822

Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 are vulnerable to address-bar spoofing. The issue arises from a persistent menu in a SELECT element that can overlay the URL bar, allowing remote attackers to masquerade a malicious site as trusted. Affected products include Firefox des...

CVE-2016-2838

CVE-2016-2838: A heap-based buffer overflow in Mozilla Firefox's nsBidi::BracketData::AddOpening function (affecting Firefox before 48.0 and Firefox ESR 45.x before 45.3) can be triggered by directional content in an SVG document, potentially allowing remote code execution. The vulnerability is c...

CVE-2017-7789

CVE-2017-7789 affects Firefox versions earlier than 55.0. If a server sends two Strict-Transport-Security headers for a single connection, the headers are rejected as invalid, and HSTS is not enabled for that connection. Documented impact is limited to Firefox

CVE-2018-18499

CVE-2018-18499 is a same-origin policy vulnerability in Mozilla Firefox and Thunderbird where a page using a meta http-equiv="refresh" redirects to another site and allows theft of cross-origin URL entries via performance.getEntries(). Affected: Firefox < 62, Firefox ESR < 60.2, Thunderbird

CVE-2018-5093

CVE-2018-5093 is a heap buffer overflow in WebAssembly during Memory/Table resizing, affecting Firefox

CVE-2021-23986

CVE-2021-23986 concerns a vulnerability in Firefox prior to 87 where a malicious extension with the 'search' permission could install a new search engine whose favicon referenced a cross-origin URL. The extension could read the cross-origin response, bypassing same-origin policy, though the reque...

CVE-2021-43544

Summary : CVE-2021-43544 is a Firefox for Android vulnerability where, when a URL is received via SEND intent, Firefox would search for text and later use of the address bar could load the URL unintentionally, enabling Cross‑Site Scripting (XSS) and spoofing. Affected software/versions : Firefox ...

CVE-2009-0352

CVE-2009-0352 affects Mozilla Firefox 3.x <= 3.0.5, Mozilla Thunderbird <= 2.0.0.20, and SeaMonkey

CVE-2010-3183

CVE-2010-3183 affects Mozilla-based products (Firefox/Thunderbird/SeaMonkey/XULRunner) where the LookupGetterOrSetter function in the browser’s JavaScript engine mishandles calls to window.lookupGetter with no arguments. The root cause is an incorrect pointer handling that can dereference a dangl...

CVE-2013-0760

CVE-2013-0760 describes a buffer overflow in Mozilla Firefox’s CharDistributionAnalysis::HandleOneChar, allowing remote code execution via a crafted document. Affected products per the description: Firefox before 18.0, Thunderbird before 17.0.2, and SeaMonkey before 2.15. Root cause is a memory c...

CVE-2013-5604

CVE-2013-5604 affects the XSLT processor in Mozilla Firefox (and related Mozilla components) where txXPathNodeUtils::getBaseURI does not initialize data properly. This allows remote attackers to execute arbitrary code or cause a denial of service via crafted documents, including stack-based buffe...

CVE-2014-1576

CVE-2014-1576 is a heap-based buffer overflow in nsTransformedTextRun used when parsing CSS token sequences that trigger capitalization changes in Mozilla Firefox

CVE-2015-2710

CVE-2015-2710 is a memory-safety vulnerability in Mozilla Firefox and Thunderbird where the SVGTextFrame handles crafted SVG/CSS data, causing a heap-based buffer overflow. A remote attacker could potentially execute arbitrary code by enticing a user to open specially crafted content. The issue a...

CVE-2015-2739

CVE-2015-2739 affects Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1. The issue is in ArrayBufferBuilder::append, which accesses unintended memory locations. The description notes unspecified impact and attack vectors; no explicit explo...

CVE-2016-2797

Graphite 2 before 1.3.6 is affected by CVE-2016-2797 via the TtfUtil::CmapSubtable12Lookup path. The vulnerability exists when Graphite is used by Firefox before 45.0 and Firefox ESR 38.x before 38.7, allowing a crafted Graphite smart font to cause a denial-of-service (buffer over-read) or simila...

CVE-2016-5252

CVE-2016-5252 describes a stack-based buffer underflow in the Mozilla Firefox gfx BasePoint4d during 2D clipping region calculations, enabling remote code execution via crafted graphics data. Affected products include Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3. The issue stems f...

CVE-2016-5265

CVE-2016-5265 affects Mozilla Firefox and Firefox ESR. The initial description states that Firefox before 48.0 and Firefox ESR 45.x before 45.3 can allow a user-assisted remote attacker to bypass the Same Origin Policy, perform UXSS, or read arbitrary files by placing a crafted HTML document and ...

CVE-2017-5467

CVE-2017-5467 affects Mozilla Firefox and Thunderbird, with memory corruption when drawing Skia content outside the clipping region. Affected: Firefox (<53) and Thunderbird (

CVE-2017-7751

CVE-2017-7751 is a use-after-free vulnerability in Mozilla Firefox and Thunderbird associated with content viewer listeners, affecting Firefox versions before 54, ESR before 52.2, and Thunderbird before 52.2. The underlying issue is a memory safety flaw that can lead to a potentially exploitable ...

CVE-2017-7777

CVE-2017-7777 concerns the Graphite2 font rendering library. Multiple connected sources confirm a defect in graphite2::GlyphCache::Loader::read_glyph due to use of uninitialized memory in the Graphite2 codebase, affecting Firefox before 54 and other products using graphite2. Exploitation could ca...

CVE-2017-7781

CVE-2017-7781 affects Firefox before 55 due to an error in the elliptic-curve point addition using mixed Jacobian–affine coordinates, which can yield a spuriously computed POINT_AT_INFINITY. This could let a man‑in‑the‑middle attacker interfere with a connection and cause the affected party to co...

CVE-2018-5167

The CVE-2018-5167 issue affects Mozilla Firefox prior to version 60, where the web console and JavaScript debugger fail to sanitize all hyperlink-output. This can cause chrome: and javascript: links to render as active hyperlinks, enabling potential user interaction with internal pages via malici...

CVE-2018-5177

CVE-2018-5177 is a vulnerability in Firefox’s XSLT number formatting that can allocate a negative buffer size, leading to a buffer overflow and crash. The issue is documented as affecting Firefox versions before 60, with multiple Nessus/ESA references tying the CVE to Firefox 60-era releases. The...

CVE-2019-9808

CVE-2019-9808 affects Firefox before 66.0. When WebRTC permission is requested from documents using data: or blob: URLs, the permission notifications fail to show the originating domain, displaying Unknown origin instead. Documented impact is user confusion about which site requests permission. R...

CVE-2021-23965

CVE-2021-23965 affects Mozilla Firefox prior to version 85.0. The issue stems from memory safety bugs in Firefox 84 that can lead to memory corruption; Mozilla notes these could potentially be exploited to run arbitrary code. Reported as memory safety vulnerabilities with possible exploitation pa...

CVE-2023-25733

CVE-2023-25733 affects Mozilla Firefox versions earlier than 110. The issue is that the return value of gfx::SourceSurfaceSkia::Map() was not verified, which could lead to a null pointer dereference and a potential crash. The vulnerability is associated with memory safety concerns and is document...

CVE-2025-1935

CVE-2025-1935 is described in connected advisories as a UI/protocol-handler spoof affecting Firefox and Thunderbird before versions 136 (Firefox) / 128.8 (Firefox ESR) and before 136 (Thunderbird) / 128.8 (Thunderbird). The issue allows a malicious web page to coax a user into setting that site a...

CVE-2009-3983

CVE-2009-3983 affects Mozilla Firefox before 3.0.16 and Firefox 3.5.x before 3.5.6, and SeaMonkey before 2.0.1. The issue allows remote attackers to replay NTLM credentials from a browser user, enabling authenticated requests to arbitrary applications. The vulnerability is described as a credenti...

CVE-2010-1585

CVE-2010-1585 affects Mozilla Firefox (ParanoidFragmentSink) where nsIScriptableUnescapeHTML.parseFragment fails to sanitize chrome HTML, enabling remote JavaScript execution via javascript: URIs in input to extensions. Affected products/versions: Firefox <3.5.17 and <3.6.14; SeaMonkey <...

CVE-2011-2995

CVE-2011-2995 is a browser engine vulnerability affecting Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4. The issue allows remote attackers to cause memory corruption and application crashes or possibly execute arbitrary code via unknown vectors;...

CVE-2012-4185

CVE-2012-4185 describes a buffer overflow in Mozilla Firefox’s nsCharTraits::length function that could allow remote code execution or a heap memory corruption in Firefox <16.0, ESR 10.x <10.0.8, Thunderbird <16.0/ESR 10.x <10.0.8, and SeaMonkey

CVE-2013-0776

CVE-2013-0776 affects Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16. The flaw allows a man-in-the-middle attacker to spoof the address bar by using a proxy server that returns a 407 HTTP status...

CVE-2013-1692

CVE-2013-1692 affects Mozilla Firefox (including ESR 17.x) before 22.0 and Thunderbird before 17.0.7. The vulnerability arises from not preventing body data in an XMLHttpRequest HEAD request, enabling CSRF via crafted sites. MiracleLinux/MiracleLinux AXSA advisories map this vulnerability to Fire...

CVE-2015-4500

CVE-2015-4500 concerns Mozilla Firefox before 41.0 (and ESR 38.x before 38.3). It stems from memory safety bugs in the browser engine that could allow remote attackers to execute arbitrary code or cause a denial of service via unknown vectors; remediation is to upgrade to Firefox 41.0 or newer (a...

CVE-2015-7196

Affected software: Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4. Problem: When a Java plugin is enabled, the Java plugin can deallocate a JavaScript wrapper that is still in use, leading to a JavaScript garbage collection crash. This may result in a denial of service and, potentia...

CVE-2015-7208

CVE-2015-7208 affects Mozilla Firefox before 43.0. The issue arises from cookies containing vertical tab characters ('\v') being stored, enabling a remote attacker to read HTTP Cookie headers and obtain sensitive information. The vulnerability is tied to the cookie handling/tokenization logic and...

CVE-2016-1962

CVE-2016-1962 is a use-after-free in Mozilla Firefox’s mozilla::DataChannelConnection::Close, enabling remote code execution via mishandled WebRTC data-channel connections. Affected: Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7. Consequence: potentially exploitable crash with arbi...

CVE-2016-1965

Mozilla Firefox prior to 45.0 and Firefox ESR before 38.7 are affected by CVE-2016-1965, an address bar spoofing flaw triggered by history.back and the Location protocol. The vulnerability allows a remote attacker to spoof the displayed URL when users navigate back to a previously loaded page, po...

CVE-2016-5276

The CVE-2016-5276 entry details a use-after-free in mozilla::a11y::DocAccessible::ProcessInvalidationList in Mozilla Firefox before 49.0, Firefox ESR before 45.4 (45.x), and Thunderbird

CVE-2016-5278

CVE-2016-5278 describes a heap-based buffer overflow in Firefox’s nsBMPEncoder::AddImageFrame. When processing crafted image data, memory corruption could allow remote code execution. Affected software includes Mozilla Firefox prior to 49.0, Firefox ESR prior to 45.4, and Thunderbird prior to 45....

CVE-2017-5388

CVE-2017-5388 affects Firefox versions prior to 51.0. It describes WebRTC can be used to generate a large amount of UDP traffic, enabling potential Distributed Denial of Service (DDoS) against e10s systems. Remediation in the connected documents shows Firefox 51.0.1 as the fixed release (openSUSE...

CVE-2017-5451

CVE-2017-5451 describes an address bar spoofing vulnerability via the onblur event, enabling a script to affect text display and make the loaded site appear different from what’s in the address bar. The issue affects Mozilla products including Thunderbird < 52.1, Firefox ESR < 52.1, and Fir...

CVE-2017-7773

CVE-2017-7773 is a Graphite2 heap-based buffer overflow in the lz4::decompress implementation (src/Decompressor) that affects Firefox prior to 54. The issue can cause a crash and, per advisories, may allow arbitrary code execution under certain conditions. Affected products are those using Graphi...

CVE-2018-18497

CVE-2018-18497 : In Firefox, limitations on URIs allowed to WebExtensions via the browser.windows.create API can be bypassed by placing a pipe in the URL field, causing multiple pages to load as a single argument. This may allow a malicious WebExtension to open privileged locations such as about:...

CVE-2018-18504

CVE-2018-18504 affects Mozilla Firefox prior to 65.0. A memory corruption/out-of-bounds read occurs when the buffer of a texture client is freed while still in use during graphic operations, potentially causing a crash and allowing reading the memory of freed buffers. This is described for Firefox

CVE-2018-5100

Technical details about CVE-2018-5100 are not publicly provided in the supplied connected documents. Monitor for updates from vendor advisories and security feeds.

CVE-2018-5116

The CVE-2018-5116 entry concerns Mozilla Firefox prior to version 58.0 where WebExtensions with the ActiveTab permission can access cross-origin frames within the active tab, allowing malicious extensions to inject and interact with frames from arbitrary origins and bypass same-origin expectation...

CVE-2019-9806

CVE-2019-9806 affects Mozilla Firefox before 66.0. The flaw occurs during FTP-auth prompt handling, where successive modal prompts cannot be dismissed, enabling a denial-of-service condition. Affected software: Firefox versions prior to 66.0. Impact: potential browser DOS; no confirmed remote cod...

CVE-2019-9807

CVE-2019-9807 affects Firefox prior to 66.0. When arbitrary text is sent over an FTP connection and a page reload is initiated, Firefox could display a modal alert containing that text, enabling potential social engineering. Affected product: Firefox (pre-66). Root cause described in connected so...

CVE-2019-9809

CVE-2019-9809 affects Mozilla Firefox before 66.0. The issue arises when a page sources resources over FTP; invalid credentials or locations can trigger a series of modal alerts that cannot be dismissed, causing a denial of service. Affected product/version: Firefox