CVE-2024-7519

CVE-2024-7519 describes memory corruption due to insufficient checks when processing graphics shared memory, enabling sandbox escape. Affected products include Firefox <129, Firefox ESR <115.14, Firefox ESR <128.1, Thunderbird <128.1, and Thunderbird

CVE-2016-9078

CVE-2016-9078 affects Mozilla Firefox prior to the 50.0.2 update. The issue is a redirect from an HTTP connection to a data: URL that can cause the data: URL to inherit the referring site’s origin, enabling potential same-origin policy violations when loading resources from malicious sites. Cross...

CVE-2024-4770

A use-after-free vulnerability exists in Firefox , Firefox ESR , and Thunderbird when saving a page to PDF. The flaw is triggered by specific font styles , which could lead to a crash . This affects Firefox < 126 , Firefox ESR < 115.11 , and Thunderbird

CVE-2024-8381

CVE-2024-8381 describes a potentially exploitable type confusion triggered when looking up a property name on an object used as the with environment. Affected products include Firefox (pre-130 and ESR pre-128.2/115.15) and Thunderbird (pre-128.2/115.15). The root cause is type confusion during pr...

CVE-2024-6602

A mismatch between allocator and deallocator could lead to memory corruption in affected software. This vulnerability impacts Firefox < 128 , Firefox ESR < 115.13 , Thunderbird < 115.13 , and Thunderbird

CVE-2025-1010

A use-after-free vulnerability exists in the Custom Highlight API component of Mozilla Firefox , Firefox ESR , and Thunderbird . An attacker could exploit this flaw to cause a potentially exploitable crash or service failure. This issue affects Firefox versions prior to 135 , Firefox ESR versions...

CVE-2021-29970

CVE-2021-29970 concerns a use-after-free/memory corruption issue triggered by a malicious webpage when accessibility is enabled. Affected products include Thunderbird < 78.12, Firefox ESR < 78.12, and Firefox

CVE-2021-29989

CVE-2021-29989 covers memory safety bugs in Firefox 90/ESR 78.12 that could lead to memory corruption and potentially arbitrary code execution; affected products include Thunderbird <78.13, Firefox ESR <78.13, and Firefox

CVE-2023-4055

CVE-2023-4055 concerns cookies per domain in the browser’s cookie jar. When domain cookie count exceeded, the actual sent cookie jar could diverge from the expected state, causing some cookies to be missing from requests. This affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR

CVE-2019-11744

CVE-2019-11744 concerns an XSS in HTML elements such as and where literal angle brackets can be left unescaped, allowing a crafted closing tag to be injected via innerHTML and make subsequent content appear outside the tag. Affected products include Firefox (versions before 69), Thunderbird (be...

CVE-2024-5688

A use-after-free vulnerability exists in Firefox and Thunderbird due to a race condition where garbage collection can trigger during an object transplant . This issue affects Firefox < 127 , Firefox ESR < 115.12 , and Thunderbird

CVE-2024-6600

A memory corruption vulnerability in the WebGL API of Mozilla Firefox (and associated products) allows a remote attacker to trigger an out-of-bounds access . The root cause is due to Angle for GLSL shaders having lenient allocation checks when allocating more than 8192 integers in private shader ...

CVE-2023-23597

Summary: CVE-2023-23597 affects Mozilla Firefox and concerns a compromised web child process that could bypass web security opening restrictions, allowing a new child process to spawn in the file:// context and potentially read arbitrary files. The issue is described as a vulnerability in Firefox...

CVE-2024-9393

Summary: CVE-2024-9393 describes a cross-origin JavaScript execution in PDFs via a crafted multipart response, allowing access to cross-origin content under the resource://pdf.js origin. Affected software (from provided docs): Mozilla Firefox and Thunderbird (including ESR branches). Desktop Site...

CVE-2019-9820

The CVE-2019-9820 issue is a use-after-free in the ChromeEventHandler by DocShell that can cause a crash in Thunderbird and Firefox (including ESR). Affected products and versions, per sources: Thunderbird < 60.7, Firefox < 67, and Firefox ESR

CVE-2021-23969

The CVE-2021-23969 entry concerns a Content Security Policy (CSP) violation report handling issue in Firefox and related Mozilla products. Affected components: Firefox (and Thunderbird) CSP violation reporting when redirects occur. Root cause: during certain redirects, the reporter could set the ...

CVE-2016-1947

CVE-2016-1947 pertains to Firefox 43.x where the Application Reputation service was disabled, enabling a remote attacker to trigger an unintended download by exploiting the absence of reputation data. The connected openSUSE advisories confirm this issue as part of MFSA 2016-11 and list CVE-2016-1...

CVE-2019-11713

CVE-2019-11713 is a use-after-free in HTTP/2 when a cached stream is closed while still in use, leading to a potentially exploitable crash. Affected products include Firefox ESR < 60.8, Firefox < 68, and Thunderbird

CVE-2020-6798

CVE-2020-6798 involves incorrect parsing when a template tag is used inside a select tag, enabling JavaScript injection under browser-like contexts. The vulnerability affects Thunderbird versions prior to 68.5 (and Firefox before 73 / ESR 68.5); exploitation is discussed in the context of cross-s...

CVE-2024-2605

An attacker could leverage the Windows Error Reporter to execute arbitrary code on the system while escaping the sandbox. This vulnerability specifically affects Windows operating systems and impacts Firefox < 124 , Firefox ESR < 115.9 , and Thunderbird

CVE-2024-9936

The Firefox web browser is vulnerable to a flaw in its selection node cache management. By manipulating this cache, an attacker could cause unexpected behavior, which may lead to an exploitable crash . This vulnerability specifically impacts Firefox versions prior to 131.0.3 . While the technical...

CVE-2025-2857

A critical sandbox escape vulnerability exists in Mozilla Firefox on Windows due to an issue in the IPC code . A compromised child process can trick the parent process into returning an unintentionally powerful handle , allowing an attacker to escape the sandbox. The original vulnerability was ex...

CVE-2024-6606

A vulnerability in the clipboard code of Firefox and Thunderbird allows for an out-of-bounds read because the software fails to verify the index during an array access. This flaw affects versions of Firefox and Thunderbird older than 128 . No specific exploit information or remediation details ar...

CVE-2024-11691

Certain WebGL operations on Apple silicon M series devices could lead to an out-of-bounds write and memory corruption . This vulnerability stems from a flaw in Apple's GPU driver and specifically affects the application when running on Apple M series hardware ; other platforms remain unaffected. ...

CVE-2024-6615

Memory safety bugs present in Firefox 127 and Thunderbird 127. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 128 and Thunderbird

CVE-2023-4056

Memory safety bugs in Firefox 115/Thunderbird 115 and older (Firefox <116, ESR <102.14/115.1; Thunderbird

CVE-2019-11691

CVE-2019-11691 is a use-after-free vulnerability in XMLHttpRequest (XHR) triggered by an event loop, causing the XHR main thread to be invoked after the object is freed. Affects Thunderbird versions < 60.7 and Firefox/Firefox ESR versions

CVE-2020-12401

CVE-2020-12401: In ECDSA signature generation, padding used to ensure constant-time scalar multiplication was removed, causing variable-time execution based on secret data. Affected: Firefox < 80 and Firefox for Android

CVE-2024-9392

A compromised content process in Firefox and Thunderbird could allow for the arbitrary loading of cross-origin pages . This vulnerability affects Firefox < 131 , Firefox ESR < 128.3 , Firefox ESR < 115.16 , Thunderbird < 128.3 , and Thunderbird

CVE-2023-25735

CVE-2023-25735 describes a use-after-free caused by cross-compartment wrappers wrapping a scripted proxy, which could cause objects from other compartments to be stored in the main compartment during unwrapping. Affected products include Firefox <110, Thunderbird <102.8, and Firefox ESR

CVE-2025-0247

Mozilla Firefox and Thunderbird versions prior to 134 are affected by memory safety bugs. The root cause involves copying buffers without checking the size of the input data , which can lead to memory corruption . A malicious actor could potentially exploit these flaws to execute arbitrary code t...

CVE-2024-6601

A race condition in permission assignment allows a cross-origin container to obtain the permissions of the top-level origin . This vulnerability affects Firefox (versions < 128 and ESR < 115.13), Thunderbird (versions < 115.13 and

CVE-2020-6829

CVE-2020-6829 is a vulnerability in NSS (Network Security Services) libraries (nss, nss-util, nss-softokn, nspr) where the wNAF scalar point multiplication during ECDSA signature generation leaks partial nonce information. This side-channel can enable an attacker with electromagnetic traces from ...

CVE-2022-1887

CVE-2022-1887: A SQL injection vulnerability in Firefox for iOS, triggered when the search term is supplied externally, affects Firefox for iOS versions prior to 101. The NVD and Red Hat entries confirm the issue and describe the impact as high confidentiality, integrity, and availability risk (C...

CVE-2024-10458

CVE-2024-10458 describes a permission leak from a trusted site to an untrusted site via embed/object in Firefox and Thunderbird. Affected products and ranges shown in the connected documents include Firefox and Thunderbird before 132 (and ESR before 128.4/115.17 for Firefox, and Thunderbird befor...

CVE-2024-2612

This vulnerability affects Firefox versions < 124, Firefox ESR < 115.9, and Thunderbird

CVE-2016-9905

CVE-2016-9905 is tied to a crash in EnumerateSubDocuments when adding or removing sub-documents, affecting Thunderbird and Firefox ESR prior to 45.6. The connected sources consistently identify a crash/memory safety context (e.g., use-after-free and memory corruption patterns across related CVEs)...

CVE-2019-11752

CVE-2019-11752 is a use-after-free in IndexedDB: deleting a key value during conversion may allow a crash and potential exploitation. Affected products include Firefox versions before 69 and Thunderbird versions before 68.1/60.9 (and corresponding ESR lines). Several connected advisories note fix...

CVE-2021-29946

CVE-2021-29946 affects Firefox/Thunderbird components where ports written as an integer overflow beyond 16-bit bounds could bypass port blocking when used in the Alt-Svc header. Connected advisories show the issue is labeled as port blocking bypass (access restriction bypass) with remediation via...

CVE-2024-5696

CVE-2024-5696 is a Memory Corruption vulnerability affecting Firefox (versions < 127), Firefox ESR (versions < 115.12), and Thunderbird (versions < 115.12). The issue is caused by manipulating text within an tag, which can result in corrupt memory and a potentially exploitable crash . T...

CVE-2020-6821

CVE-2020-6821: WebGL copyTexSubImage reads outside the source resource; memory that should be zero is uninitialized, enabling potential data disclosure. Affected products include Thunderbird < 68.7.0, Firefox ESR < 68.7, and Firefox

CVE-2024-5690

Vulnerability CVE-2024-5690 affects Mozilla Firefox and Thunderbird components via a timing-attack on external protocol handler detection. Affected products explicitly include Firefox < 127, Firefox ESR < 115.12, and Thunderbird

CVE-2023-4049

CVE-2023-4049: Race conditions in Firefox reference counting can lead to use-after-free. Affected: Firefox <116, ESR <102.14, ESR

CVE-2024-5697

CVE-2024-5697 : A website could detect when a user took a page screenshot via Firefox’s built-in Screenshot feature. Affected: Firefox versions before 127. The connected documents confirm Firefox as the vulnerable product and the issue as a UI/behavioral flaw; no exploitation details or in-the-wi...

CVE-2024-8897

Technical details about CVE-2024-8897 are not publicly available in the provided documents; no specifics on affected products, versions, impact, or remediation are given here.

CVE-2019-9790

CVE-2019-9790 is a use-after-free vulnerability triggered when a raw pointer to a DOM element is obtained via JavaScript and the element is removed while still in use. Affected products include Thunderbird (<60.6), Firefox ESR (<60.6), and Firefox (

CVE-2024-10459

CVE-2024-10459 is a use-after-free vulnerability triggered when accessibility features are enabled, potentially causing a crash. The issue affects Firefox versions earlier than 132, Firefox ESR prior to 128.4 and 115.17, and Thunderbird versions earlier than 132 or 128.4, as noted across multiple...

CVE-2024-7528

A use-after-free vulnerability exists in IndexedDB due to an incorrect garbage collection interaction . This flaw impacts Firefox versions earlier than 129, Firefox ESR versions earlier than 128.1, and Thunderbird versions earlier than 128.1. The vulnerability could lead to memory corruption. No ...

CVE-2021-38503

The CVE-2021-38503 issue: the iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such as executing scripts or navigating the top-level frame. Affected products include Firefox (versions before 94), Thunderbird (before 91.3), and Firefox ...

CVE-2023-4050

CVE-2023-4050 affects Mozilla Firefox and Firefox ESR (and related Linux distro advisories). The root cause is untrusted input streams being copied to a stack buffer without proper size checks, leading to a potentially exploitable crash that could enable sandbox escape. Public-facing details acro...