CVE-2012-1955

The CVE applies to Mozilla Firefox 4.x–13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0–13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11. It enables remote attackers to spoof the address bar using navigation history (history.forward/history.back). Root cause is likely a fl...

CVE-2012-1961

CVE-2012-1961 affects Mozilla Firefox 4.x–13.0, Firefox ESR 10.x prior to 10.0.6, Thunderbird 5.0–13.0, Thunderbird ESR 10.x prior to 10.0.6, and SeaMonkey prior to 2.11. The issue is a UI security flaw in how duplicate values in the X-Frame-Options header are handled, which can enable remote att...

CVE-2013-5596

Affected software: Mozilla Firefox (before 25.0), Firefox ESR (before 24.1, 24.x line), Thunderbird (before 24.1), SeaMonkey (before 2.22). Vulnerability: cycle-collection (CC) in Firefox may misdetermine the thread for releasing an image object, enabling a remote attacker to trigger arbitrary co...

CVE-2013-5607

CVE-2013-5607 describes an integer overflow in Mozilla NSPR’s PL_ArenaAllocate, exploited via crafted X.509 certificates to trigger a crash (possible other impact) in affected Firefox/SeaMonkey builds. Affected products include Firefox before 25.0.1, Firefox ESR 17.x before 17.0.11, Firefox 24.x ...

CVE-2014-1480

Technical details about CVE-2014-1480 are not publicly provided in the connected documents. The available description notes a clickjacking/ unintended file launch issue in Firefox/SeaMonkey, but specifics (affected versions, root cause, exploitability, and fixes) are not included.

CVE-2015-0803

CVE-2015-0803 affects Mozilla Firefox prior to 37.0, where HTMLSourceElement::AfterSetAttr does not properly constrain the original data type of a casted value when setting a SOURCE element attribute. This can allow a remote attacker to execute arbitrary code or cause a denial of service (use-aft...

CVE-2015-0824

CVE-2015-0824 affects Mozilla Firefox before 36.0. The mozilla::layers::BufferTextureClient::AllocateForSurface function can trigger an out-of-bounds write via DrawTarget and the Cairo library for image drawing, causing remote denial of service (crash). The Ubuntu/NVD entries confirm this vulnera...

CVE-2016-1949

CVE-2016-1949 affects Mozilla Firefox prior to 44.0.2 where Service Workers improperly interact with plugins, allowing remote attackers to bypass the Same-Origin Policy by a crafted site that triggers spoofed responses to NPAPI requests (e.g., crossdomain.xml). This is a network‑accessible vulner...

CVE-2016-1976

CVE-2016-1976 is a use-after-free in the DesktopDisplayDevice class of Firefox WebRTC on Windows, allowing remote denial of service (and possibly other impacts) before Firefox 45.0. Vulnerable component: WebRTC implementation in Mozilla Firefox; root cause is use-after-free in DesktopDisplayDevic...

CVE-2016-2793

CVE-2016-2793 affects the Graphite 2 font library (CachedCmap.cpp) up to version 1.3.5 used by Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7. A crafted Graphite font can trigger a buffer over-read, potentially causing a denial of service or other impact. Remediation, where availabl...

CVE-2016-2795

Graphite 2 vulnerability CVE-2016-2795 affects the Graphite font engine library. The function graphite2::FileFace::get_table_fn in Graphite 2 before 1.3.6 does not initialize memory for an unspecified data structure, enabling a remote attacker to cause denial of service (and possibly other impact...

CVE-2016-5253

Mozilla Firefox updater on Windows (pre-48.0) is affected. The Updater can be abused via the callback application-path parameter and a hard link to write arbitrary files (local privilege escalation). A fix is to upgrade to Firefox 48.0 or later; apply vendor advisories for the exact patched versi...

CVE-2016-9069

CVE-2016-9069 describes a use-after-free in Mozilla Firefox during DOM operations, specifically in nsINode::ReplaceOrInsertBefore, which could lead to exploitable crashes. Affected product: Mozilla Firefox (desktop) versions before 50. Root cause (as stated): heap-use-after-free in ReplaceOrInser...

CVE-2017-5412

CVE-2017-5412 is a buffer overflow read in SVG filter color value processing that results in data exposure. Affected products are Firefox and Thunderbird versions older than 52. The root cause is a memory safety/overflow issue in SVG filter handling. Remediation is to update to Firefox 52.0+ and ...

CVE-2017-7782

CVE-2017-7782 affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox

CVE-2017-7794

CVE-2017-7794 concerns Linux-specific vulnerability in Firefox where a compromised content process allows the sandbox broker to truncate files despite read-only permissions. Affects Firefox versions earlier than 55 on Linux; other OSes are not affected. Root cause and impact are described as a br...

CVE-2017-7808

CVE-2017-7808 affects Mozilla Firefox prior to 55.0. A CSP policy using a frame-ancestors directive with origins that include paths allows a cross-origin leak by comparing against the path instead of the origin. The vulnerability is described for Firefox

CVE-2017-7813

CVE-2017-7813 affects Firefox versions earlier than 56.0. Root cause: in the JavaScript parser, casting an integer to a narrower type can cause data read from outside the buffer to be parsed. Impact: typically results in a non-exploitable crash, but may leak a limited amount of memory information...

CVE-2007-0981

CVE-2007-0981 affects Mozilla-based browsers (Firefox up to 1.5.0.10 and 2.x up to 2.0.0.2; SeaMonkey up to 1.0.8). The root cause is a handling flaw when location.hostname is modified via a URI containing a null byte, interacting with DNS resolver code, which can bypass the same-origin policy an...

CVE-2007-0996

The CVE-2007-0996 issue affects Mozilla Firefox versions before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8. The root cause is that child frames inherit the default charset from the parent window, enabling cross-site scripting (XSS) when using certain character sets (demonstrated ...

CVE-2008-0418

CVE-2008-0418 is a directory-traversal flaw in Chrome URL handling that could allow remote attackers to read local files (Javascript, images, stylesheets) and potentially exfiltrate session data. Affected: Mozilla Firefox <= 2.0.0.11/12, Thunderbird <= 2.0.0.11/12, SeaMonkey

CVE-2008-4063

CVE-2008-4063 affects Mozilla Firefox 3.x up to 3.0.2. The issue involves memory corruption in the layout engine via multiple vectors: (1) this==0 in nsContentList::Item, (2) Hindi/Indic IME interaction with the g key, and (3) inline frame protection when SortByContentOrder is invoked. Impact is ...

CVE-2011-2363

CVE-2011-2363 is a use-after-free vulnerability in the nsSVGPointList::AppendElement function affecting Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14. It can cause application crashes or possibly allow arbitrary code execution via vectors involving a user-...

CVE-2011-2366

CVE-2011-2366 : Gecko-based browsers (Firefox < 5.0, Thunderbird

CVE-2011-2370

CVE-2011-2370 is associated with Mozilla Firefox prior to 5.0, where the xpinstall whitelist is not properly enforced. This can allow a remote attacker to trigger an installation dialog for an add-on or a theme via unspecified vectors. The connected documents confirm the vulnerability reference b...

CVE-2012-3988

CVE-2012-3988 is a use-after-free vulnerability in Mozilla Firefox (pre-16.0), Firefox ESR (pre-10.0.8), Thunderbird (pre-16.0), Thunderbird ESR (pre-10.0.8), and SeaMonkey (pre-2.13). It can be triggered via mozRequestFullScreen with full-screen mode and navigation via history.back, potentially ...

CVE-2012-3989

CVE-2012-3989 affects Mozilla Firefox (and related Mozilla products) prior to version 16.0, Thunderbird prior to 16.0, and SeaMonkey prior to 2.13. The vulnerability is a crash caused by an invalid cast when using the instanceof operator on certain JavaScript objects, which could allow remote att...

CVE-2013-0767

CVE-2013-0767 affects Mozilla Firefox (and related Mozilla components) with the nsSVGPathElement::GetPathLengthScale path handling. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via an out-of-bounds read, reported for Firefox before 18.0, ESR 10....

CVE-2013-0774

CVE-2013-0774 affects Mozilla Firefox

CVE-2013-1705

CVE-2013-1705 is a heap-based buffer underflow in the cryptojs_interpret_key_gen_type function affecting Mozilla Firefox before 23.0 and SeaMonkey before 2.20, enabling remote code execution or crash via a crafted CRMF request. Affected products are Firefox (<23.0) and SeaMonkey (

CVE-2013-6671

CVE-2013-6671 affects Mozilla Firefox before 26.0 (and corresponding ESR/Thunderbird/SeaMonkey releases listed) where nsGfxScrollFrameInner::IsLTR can be abused by crafted JavaScript used with ordered list elements to trigger remote code execution. The vulnerability is a browser-engine issue that...

CVE-2014-1589

CVE-2014-1589 affects Mozilla Firefox (before 34.0) and SeaMonkey (before 2.31). The issue is an incorrect primary namespace in stylesheets, which allows remote attackers to bypass access restrictions via an XBL binding. Public references in the provided documents confirm the vulnerability and re...

CVE-2015-0823

CVE-2015-0823 describes multiple use-after-free vulnerabilities in the OpenType Sanitiser (OTS) used by Mozilla Firefox prior to 36.0, related to the ots_gasp_parse function. The issue could allow a remote attacker to trigger problematic Developer Console output or potentially cause other impacts...

CVE-2015-0826

CVE-2015-0826 accuracy: The vulnerability affects Mozilla Firefox before 36.0, where nsTransformedTextRun::SetCapitalization can be triggered by a crafted CSS token sequence during restyle or reflow. The underlying issue is an out-of-bounds read of heap memory, enabling remote code execution or a...

CVE-2015-2711

CVE-2015-2711 affects Mozilla Firefox before 38.0. The vulnerability arises because Firefox does not recognize a referrer policy delivered by a referrer META element in contexts such as context-menu navigation or middle-click navigation, enabling a remote attacker to obtain sensitive data by read...

CVE-2015-2742

Affected software. Mozilla Firefox on macOS (OS X) prior to version 39.0. Vulnerability summary. When Firefox crashes, native key press information can be included in crash reports, which may be read via the crash-reporting data stream. Root cause. Information disclosure arises from crash log dat...

CVE-2015-7199

Mozilla Firefox vulnerability CVE-2015-7199 affects Firefox (including ESR) with memory corruption via crafted SVG content. The root cause is missing status checks in AddWeightedPathSegLists and SVGPathSegListSMILType::Interpolate, allowing remote attackers to cause a denial of service or potenti...

CVE-2015-7215

CVE-2015-7215 affects Mozilla Firefox before 43.0 (and ESR 38.x) via the Web Workers importScripts implementation. The underlying issue is that triggering no-cors fetch via importScripts can bypass the Same Origin Policy, leading to information disclosure after a rethrow. Impact reported across m...

CVE-2016-2816

CVE-2016-2816 affects Mozilla Firefox prior to 46.0, where CSP protection can be bypassed for pages served with the multipart/x-mixed-replace content type. Technical details in connected references show the vulnerability stems from CSP not being applied to content sent via multipart/x-mixed-repla...

CVE-2016-2836

CVE-2016-2836 is a memory-safety vulnerability in Mozilla Firefox’s browser engine. The issue affects Firefox versions prior to 48.0 and Firefox ESR 45.x prior to 45.3, enabling a remote attacker to potentially execute arbitrary code or cause a denial of service through various vectors related to...

CVE-2016-5282

Mozilla Firefox is affected by CVE-2016-5282. Affects Firefox

CVE-2017-5374

CVE-2017-5374 corresponds to memory safety bugs in Firefox 50.1 that could lead to memory corruption and possibly arbitrary code execution. The vulnerability affects Firefox versions older than 51.0. Remediation in public advisories shows Firefox 51.0.1 and later as fixes for related memory-safet...

CVE-2017-5379

CVE-2017-5379 is a use-after-free vulnerability in Web Animations when interacting with cycle collection, affecting Mozilla Firefox versions earlier than 51. It stems from memory safety issues in the Web Animations code path and is associated with the Firefox

CVE-2017-5414

CVE-2017-5414 affects Mozilla Firefox (and Thunderbird) prior to version 52. The file picker dialog can instantiate and display the wrong local default directory, potentially disclosing OS or local account name. Remediation from connected docs: upgrade to Firefox 52.0+ (and Thunderbird 52.0+ as a...

CVE-2017-7816

CVE-2017-7816 affects Mozilla Firefox versions before 56.0. WebExtensions could use popups or panels in the extension UI to load an "about:" privileged URL, bypassing security checks that disallow this behavior. Root cause: the extension UI could navigate to a privileged page, enabling potential ...

CVE-2017-7821

CVE-2017-7821 : A vulnerability in Firefox (WebExtensions) allows downloading and attempting to open certain non-executable file types without user interaction, potentially triggering vulnerabilities in handlers for those document types. The issue affects Firefox versions older than 56 (per mfsa2...

CVE-2022-45407

The CVE-2022-45407 entry describes a Firefox vulnerability where loading a font via FontFace() on a background worker could trigger a use-after-free, potentially enabling a crash. Affected product: Mozilla Firefox prior to version 107. Root cause: memory safety issue in handling FontFace() usage ...

CVE-2023-37204

CVE-2023-37204 affects Mozilla Firefox before 115. The issue arises from obscuring fullscreen notifications via an option element and inducing lag with an expensive computation, potentially causing user confusion and spoofing. Remediation: update Firefox to the latest version (per MFSA2023-22 / A...

CVE-2008-0591

CVE-2008-0591 concerns Mozilla Firefox (pre-2.0.0.12) and Thunderbird (pre-2.0.0.12). The issue arises from how a delay timer protecting security-sensitive dialogs is handled; an attacker could exploit window focus changes to bypass the timer and trick a user into confirming an unsafe action (pot...

CVE-2008-2785

The CVE-2008-2785 issue affects Mozilla Firefox (before 2.0.0.16 and 3.x before 3.0.1), Thunderbird (before 2.0.0.16), and SeaMonkey (before 1.1.11). It stems from using an incorrect integer data type as the CSS object reference counter in the CSSValue array (nsCSSValue:Array) data structure, all...