CVE-2015-7203

Mozilla Firefox before 43.0 contains a buffer overflow in DirectWriteFontInfo::LoadFontFamilyData within gfx/thebes/gfxDWriteFontList.cpp that could be triggered by a crafted font-family name, potentially causing a denial of service. The issue is documented under CVE-2015-7203; related advisories...

CVE-2016-1937

The CVE-2016-1937 issue concerns Firefox’s protocol-handler dialog, where a crafted page could trigger a single-click action intended as a double-click. OpenSUSE advisories document the fix as part of Mozilla Firefox updates to version 44.0 (on GA media), with NSS updated to 3.21 and NSPR to 4.11...

CVE-2016-1942

CVE-2016-1942 (address bar spoofing) affects Mozilla Firefox prior to 44.0. The public OpenSUSE/NSS/OpenSUSE advisories describe the vulnerability as address bar spoofing when handling certain URIs. In practice, the issue arises if a user pastes a wyciwyg: or resource: URI, enabling a remote atta...

CVE-2016-1959

CVE-2016-1959 affects Mozilla Firefox prior to 45.0, with the vulnerable component being the ServiceWorkerManager. The root cause is an out-of-bounds read in Service Worker Manager triggered via unspecified use of the Clients API, which could lead to memory corruption and enable remote code execu...

CVE-2016-5292

CVE-2016-5292 : In Firefox

CVE-2016-9903

CVE-2016-9903 is a cross-site scripting (XSS) vulnerability in Mozilla Firefox’s Add-ons SDK. The issue arises from a world-accessible resource that can be loaded as a document due to another vulnerability, enabling an attacker to inject content and script into the add-on context and potentially ...

CVE-2017-5393

CVE-2017-5393: The mozAddonManager allows installation of extensions from addons.mozilla.org CDN. In combination with an XSS on Mozilla AMO sites, a malicious extension could install additional extensions. Affected product: Firefox

CVE-2017-7750

CVE-2017-7750 describes a use-after-free in video control operations when a element holds a reference to an older window that has been replaced in the DOM, leading to a potentially exploitable crash. Affected products and versions from the connected records include Mozilla Firefox < 54, Firef...

CVE-2023-6871

CVE-2023-6871 affects Mozilla Firefox prior to version 121.0, where under certain conditions the browser did not display a warning when a user navigates to a new protocol handler. This is documented in multiple advisories and CVE references (Firefox

CVE-2006-3677

Affected software: Mozilla Firefox 1.5.x (before 1.5.0.5) and SeaMonkey before 1.0.3. Root cause: memory corruption/logic flaw from changing window.navigator properties accessed during Java startup, leading to a crash that enables remote code execution. Impact: remote code execution by an attacke...

CVE-2008-0593

CVE-2008-0593 affects Gecko-based browsers, notably Firefox < 2.0.0.12 and SeaMonkey

CVE-2011-2989

The CVE-2011-2989 entry describes a WebGL memory-corruption flaw in the browser engine affecting Firefox 4.x–5 , SeaMonkey 2.x before 2.3 , and Thunderbird before 6 , with potential for memory corruption, DoS, or arbitrary code execution via unspecified vectors. Connected documents confirm instan...

CVE-2012-3995

CVE-2012-3995 affects Mozilla Firefox and related Mozilla applications. The vulnerability arises from the IsCSSWordSpacingSpace function in Firefox (and Firefox ESR 10.x, Thunderbird, SeaMonkey as listed) where an out-of-bounds read could be exploited to run arbitrary code or trigger a denial-of-...

CVE-2012-5830

CVE-2012-5830 is a use-after-free vulnerability in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 on Mac OS X that allows remote attackers to execute arbitrary code via an HTML document. The con...

CVE-2013-0756

CVE-2013-0756 corresponds to a use-after-free in Mozilla Firefox’s obj_toSource path that can be triggered by a crafted web page referencing JavaScript Proxy objects, allowing remote code execution via standard web-visit attack vectors. Affected products include Firefox (pre-18.0), Firefox ESR 17...

CVE-2013-0765

CVE-2013-0765 affects Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16. Root cause: a WebIDL object can be wrapped again, bypassing intended access restrictions. Impact is described as a bypass of access controls via unspecified vectors. Remediation from connected...

CVE-2013-1724

CVE-2013-1724 is a use-after-free in Mozilla Firefox (and related Mozilla products) where mozilla::dom::HTMLFormElement::IsDefaultSubmitElement can be triggered by a destroyed SELECT element. Affected software includes Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21. The v...

CVE-2013-1728

Affected software: Mozilla Firefox (before 24.0), Thunderbird (before 24.0), and SeaMonkey (before 2.21). Root cause: IonMonkey memory not properly initialized when Valgrind mode is used, enabling potential leakage of sensitive data. Impact: remote attackers could obtain sensitive information via...

CVE-2013-1738

CVE-2013-1738 describes a use-after-free in Mozilla’s JS_GetGlobalForScopeChain, enabling remote code execution via mismanaged garbage collection in default compartments during frame-chain restoration. Affected products from the provided data include Mozilla Firefox (before 24.0), Thunderbird (be...

CVE-2014-1561

CVE-2014-1561 details (Tech detail confirmed from connected docs): Mozilla Firefox before 31.0 did not properly restrict drag-and-drop events used during page, panel, or toolbar customization, enabling a remote attacker to spoof UI customization and alter the placement of icons via crafted JavaSc...

CVE-2014-1583

CVE-2014-1583 affects Mozilla Firefox before 33.0 and Firefox ESR 31.x before 31.2; the Alarm API’s toJSON calls were not properly restricted, allowing remote attackers to bypass the Same Origin Policy by crafting API calls to access sensitive information in an alarm’s JSON data. Impact is cross-...

CVE-2015-0832

CVE-2015-0832 affects Mozilla Firefox before 36.0, where the browser does not treat domain names with and without a trailing dot as equivalent, allowing a MITM by crafting a URL that bypasses HPKP/HSTS protections after gaining access to a certificate for a domain with the trailing dot. The under...

CVE-2015-2718

CVE-2015-2718 – Firefox WebChannel.jsm Same-Origin Policy bypass . Affected software: Mozilla Firefox versions prior to 38.0. The issue allows a remote attacker to obtain sensitive webchannel-response data by loading a crafted page in an IFRAME from a different site, bypassing the Same Origin Pol...

CVE-2015-7195

CVE-2015-7195 affects Mozilla Firefox (and Firefox ESR per related advisories) where the URL parsing in Location headers fails to properly recognize certain escaped characters in hostnames. This leads to the parsing being abandoned when an escaped character is encountered, potentially enabling an...

CVE-2016-1933

CVE-2016-1933 affects Mozilla Firefox and was fixed by upgrading to Firefox 44.0 (NSS/NSPR updated to 3.21). The vulnerability is described as an Out of Memory crash when parsing GIF format images, arising from an integer overflow in the image deinterlacing/GIF parsing path. OpenSUSE security adv...

CVE-2016-2798

The CVE-2016-2798 issue affects the Graphite2 font library (Graphite 2) prior to version 1.3.6 used by Mozilla Firefox/Firefox ESR. The vulnerability arises in Graphite2::GlyphCache::Loader::Loader, allowing a remote attacker to trigger a denial of service via a crafted Graphite font, with potent...

CVE-2016-2824

CVE-2016-2824 involves ANGLE used by Mozilla Firefox on Windows and caused an out-of-bounds write in a WebGL shader, leading to denial of service (crash) or other impact. OpenSUSE/SUSE advisories indicate this was fixed in Firefox ESR updates (e.g., 45.3.0 ESR) and NSS-related patches; Mozilla MF...

CVE-2016-5256

CVE-2016-5256 affects Mozilla Firefox before 49.0. The issue is described as memory safety bugs in the Firefox browser engine that could be exploited by a remote attacker to execute arbitrary code or cause a denial of service. Public sources in connected documents confirm multiple memory-safety v...

CVE-2016-9072

CVE-2016-9072 - Firefox 64-bit NPAPI sandbox not enabled by default Affecting: Mozilla Firefox on 64-bit Windows (Firefox versions older than 50). Root cause: when a new profile is created on 64-bit Windows, the sandbox for 64-bit NPAPI plugins is not enabled by default, leaving the plugin sandbo...

CVE-2016-9073

CVE-2016-9073 : In Firefox, the WebExtensions API window.create schema did not specify format: 'relativeUrl', enabling a WebExtension to load privileged URLs and potentially escape the WebExtension sandbox. Affected: Firefox before 50.0. Impact is sandbox escape and elevation of privilege for ext...

CVE-2017-5422

CVE-2017-5422 describes a denial-of-service crash triggered by repeatedly using the view-source: protocol within a single hyperlink. The issue affects Mozilla Firefox and Thunderbird prior to version 52. The root cause is tied to how the view-source: protocol was handled in a chained hyperlink, a...

CVE-2017-7754

CVE-2017-7754 is an out-of-bounds read in WebGL when processing a malicious ImageInfo object during WebGL operations. Affected products/versions per connected docs: Firefox versions prior to 54 and Firefox ESR prior to 52.2, and Thunderbird prior to 52.2. The vulnerability stems from an improper ...

CVE-2017-7799

CVE-2017-7799 - Firefox before 55 : A cross-site scripting risk exists due to JavaScript on the about:webrtc page being assigned to innerHTML without proper sanitization. The data on this page is supplied by WebRTC usage and not user-controlled, making exploitation possible under certain conditio...

CVE-2018-12400

CVE-2018-12400 : In private browsing mode on Firefox for Android, favicons are cached in cache/icons like in non-private mode, allowing leakage of sites visited during private sessions. Affected: Firefox for Android versions before 63 (Desktop Firefox unaffected). Root cause: favicon caching beha...

CVE-2018-5134

CVE-2018-5134 affects Mozilla Firefox versions older than 59.0. WebExtensions could use view-source: URLs to access local file: URLs and content in about:cache, bypassing content restrictions. This is described as a WebExtensions content-exposure issue. The numbered references indicate the adviso...

CVE-2006-1741

CVE-2006-1741 affects Mozilla Firefox (1.x up to 1.5, and 1.0.x up to 1.0.8), Mozilla Suite up to 1.7.13, and SeaMonkey up to 1.0, enabling remote attackers to inject arbitrary JavaScript into other sites. The root causes involve (1) using a modal alert to suspend an event handler during page loa...

CVE-2007-0775

CVE-2007-0775 involves multiple unspecified vulnerabilities in the layout engine of Mozilla Firefox (pre-1.5.0.10 and pre-2.0.0.2), Thunderbird (pre-1.5.0.10), and SeaMonkey (pre-1.0.8). The issues can cause a denial of service (crash) and potentially allow arbitrary code execution via certain ve...

CVE-2007-3285

CVE-2007-3285 : A Windows-specific issue in Mozilla Firefox before 2.0.0.5 allows remote attackers to bypass file type checks and potentially execute arbitrary programs via a crafted file URL (file:/// or resource:) with a dangerous extension, followed by a NULL byte (%00) and then a safer extens...

CVE-2010-0169

Technical details about CVE-2010-0169 are not provided in the supplied documents. Please monitor official advisories and vendor patches for affected products and versions.

CVE-2012-1945

CVE-2012-1945 affects Mozilla Firefox 4.x–12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0–12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10. The issue occurs when an HTML document loads a shortcut file (.lnk) inside an IFRAME, demonstrated by a network share on Windows or ...

CVE-2013-5607

CVE-2013-5607 describes an integer overflow in Mozilla NSPR’s PL_ArenaAllocate, exploited via crafted X.509 certificates to trigger a crash (possible other impact) in affected Firefox/SeaMonkey builds. Affected products include Firefox before 25.0.1, Firefox ESR 17.x before 17.0.11, Firefox 24.x ...

CVE-2014-1480

Technical details about CVE-2014-1480 are not publicly provided in the connected documents. The available description notes a clickjacking/ unintended file launch issue in Firefox/SeaMonkey, but specifics (affected versions, root cause, exploitability, and fixes) are not included.

CVE-2014-1504

CVE-2014-1504 affects Mozilla Firefox (pre-28.0) and SeaMonkey (pre-2.25). The session-restore feature does not honor the CSP of data: URLs, enabling remote XSS via a crafted document opened after a browser restart. The impact stated is cross-site scripting with partial integrity/complete confide...

CVE-2014-1525

CVE-2014-1525 affects Mozilla Firefox before 29.0 and SeaMonkey before 2.26, due to improper garbage collection in mozilla::dom::TextTrack::AddCue, enabling remote attackers to trigger a use-after-free and heap memory corruption via a crafted HTML5 Video element. Consequences include possible rem...

CVE-2015-0805

The CVE-2015-0805 issue affects Mozilla Firefox’s Off Main Thread Compositing (OMTC). The root cause is an incorrect memset call in the interaction with mozilla::layers::BufferTextureClient::AllocateForSurface, enabling remote attackers to trigger memory corruption via rendering of 2D graphics co...

CVE-2015-0824

CVE-2015-0824 affects Mozilla Firefox before 36.0. The mozilla::layers::BufferTextureClient::AllocateForSurface function can trigger an out-of-bounds write via DrawTarget and the Cairo library for image drawing, causing remote denial of service (crash). The Ubuntu/NVD entries confirm this vulnera...

CVE-2016-1949

CVE-2016-1949 affects Mozilla Firefox prior to 44.0.2 where Service Workers improperly interact with plugins, allowing remote attackers to bypass the Same-Origin Policy by a crafted site that triggers spoofed responses to NPAPI requests (e.g., crossdomain.xml). This is a network‑accessible vulner...

CVE-2016-2793

CVE-2016-2793 affects the Graphite 2 font library (CachedCmap.cpp) up to version 1.3.5 used by Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7. A crafted Graphite font can trigger a buffer over-read, potentially causing a denial of service or other impact. Remediation, where availabl...

CVE-2016-2795

Graphite 2 vulnerability CVE-2016-2795 affects the Graphite font engine library. The function graphite2::FileFace::get_table_fn in Graphite 2 before 1.3.6 does not initialize memory for an unspecified data structure, enabling a remote attacker to cause denial of service (and possibly other impact...

CVE-2016-5253

Mozilla Firefox updater on Windows (pre-48.0) is affected. The Updater can be abused via the callback application-path parameter and a hard link to write arbitrary files (local privilege escalation). A fix is to upgrade to Firefox 48.0 or later; apply vendor advisories for the exact patched versi...