CVE-2010-5074

CVE-2010-5074 affects Mozilla Firefox (before 4.0), Thunderbird (before 3.3), and SeaMonkey (before 2.1). The vulnerability stems from the layout engine comparing visited vs. unvisited links while processing CSS token sequences, causing a timing-based information disclosure. An attacker could rem...

CVE-2013-6167

The CVE-2013-6167 issue affects Mozilla Firefox before version 28 (reported as Firefox through 27) where HTTP Cookie headers are sent without validating required character-set restrictions. The root cause is improper handling/validation of cookie character sets, enabling attackers to craft a para...

CVE-2014-8632

CVE-2014-8632 affects Mozilla Firefox (before 34.0) and SeaMonkey (before 2.31). The issue is in the structured-clone implementation where interactions with XrayWrapper property filtering do not properly enforce restrictions, allowing a remote attacker to bypass intended DOM object restrictions b...

CVE-2025-14861

The Mozilla Firefox browser is affected by memory safety bugs in versions prior to 146.0.1 . These vulnerabilities involve memory security issues that could lead to memory corruption , potentially allowing a remote attacker to execute arbitrary code . The issue has been addressed in Firefox 146.0...

CVE-2026-12307

A memory safety bug has been identified and fixed in Firefox and Thunderbird . This vulnerability affects Firefox 152 , Firefox ESR 140.12 , Thunderbird 152 , and Thunderbird 140.12 . The issue was specifically addressed as a memory safety fix in the Thunderbird client. No specific technical deta...

CVE-2026-16378

Other issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVE-2026-16382

Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVE-2026-16397

Clickjacking issue in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 153.

CVE-2026-16402

Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVE-2026-24869

Mozilla Firefox is affected by a use-after-free vulnerability in the Layout: Scrolling and Overflow component. This memory management flaw allows an attacker to exploit the vulnerability to achieve arbitrary code execution on the target system. This issue has been resolved in Firefox version 147....

CVE-2026-2773

CVE-2026-2773 is a Chrome-like vulnerability in Firefox’s Web Audio component caused by incorrect boundary conditions, fixed in Firefox 148 and corresponding ESR releases (ESR 115.33 and ESR 140.8). The issue is documented across multiple advisories (Firefox security notes and vendor feeds) and i...

CVE-2026-2788

CVE-2026-2788 concerns incorrect boundary conditions in the Audio/Video: GMP component of Mozilla Firefox. Public advisories (e.g., Firefox/Firefox ESR updates in Firefox 148, ESR 115.33, ESR 140.8) and downstream Debian/AlmaLinux advisories confirm the fix was applied in those versions. Connecte...

CVE-2026-2805

CVE-2026-2805 describes an Invalid pointer in the DOM: Core & HTML component affecting Mozilla Firefox and Mozilla Thunderbird. The issue originates from a pointer problem in the DOM Core & HTML, with the vulnerability fixed in version Firefox 148 and Thunderbird 148 . Public CVSS details (CVSS v...

CVE-2026-8963

The Firefox web browser and Thunderbird email client are vulnerable to a spoofing issue within the Web Speech component. This flaw allows an attacker to bypass authentication through spoofing, potentially leading to a compromise of data integrity . The vulnerability has been addressed in Firefox ...

CVE-2026-8966

The IP Protection component in Mozilla Firefox and Mozilla Thunderbird is vulnerable to an information disclosure flaw. This vulnerability allows a remote attacker to potentially gain access to confidential data . The issue has been addressed in Firefox 151 and Thunderbird 151 . No specific explo...

CVE-2026-8969

The Firefox web browser and Thunderbird email client are affected by a mitigation bypass in the DOM: Security component. The root cause is a lack of adequate data security mechanisms, which could allow a malicious actor to access confidential data and compromise its integrity . This vulnerability...

CVE-2026-8972

The WebRTC: Audio/Video component in the Mozilla Firefox web browser and Mozilla Thunderbird email client is affected by a privilege escalation vulnerability caused by insecure privilege management . A remote attacker could exploit this flaw to cause service interruptions or achieve elevated priv...

CVE-2005-3089

Summary of CVE-2005-3089: Firefox 1.0.6 is affected by a denial-of-service condition caused by a Proxy Auto-Config (PAC) script that uses an eval statement. The issue is specifically tied to Firefox 1.0.6 and may depend on whether an untrusted party triggers it; in the provided materials, this un...

CVE-2006-5160

Technical details about CVE-2006-5160 are not publicly provided in the supplied documents; the records cite unspecified vulnerabilities in Mozilla Firefox with dispute from vendor/researchers. Monitor for updates.

CVE-2009-0253

Firefox 3.0.5 is vulnerable to a status bar spoofing/clickjacking attack where an onclick action moves a crafted element to the current mouse position to trick the user into visiting an arbitrary URL. This is remote, with public exploit references available (e.g., Exploit-DB). No remediation deta...

CVE-2009-2044

CVE-2009-2044 affects Mozilla Firefox 3.0.10 and earlier on Linux. The vulnerability allows a remote attacker to crash the browser by using a crafted URI for a large GIF image in the BACKGROUND attribute of a BODY element, causing a denial of service. The issue is documented with a published low–...

CVE-2009-3007

CVE-2009-3007 affects Mozilla Firefox 3.5.1, SeaMonkey 1.1.17, and Flock 2.5.1, enabling context-dependent attackers to spoof the address bar via window.open with a relative URI to reveal an arbitrary file: URL after the user navigates to a file: URL. The connected documents corroborate a family ...

CVE-2009-3012

The CVE-2009-3012 entry affects Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre. The vulnerability arises because Firefox does not properly block data: URIs in Location headers in HTTP responses, enabling remote XSS via two vectors: (1) a Location header containing a data:text...

CVE-2009-3378

The CVE-2009-3378 entry concerns the oggplay_data_handle_theora_frame function in liboggplay (used by Mozilla Firefox 3.5.x). The vulnerability arises when a decoding error for the first frame occurs, causing the code to reuse an earlier frame data structure. This can allow a remote attacker to t...

CVE-2010-0166

CVE-2010-0166 affects Mozilla Firefox 3.6 before 3.6.2 on macOS, due to a flaw in gfxTextRun::SanitizeGlyphRuns in gfx/thebes/src/gfxFont.cpp. The Core Text path mishandles deletions of certain invisible Unicode characters (notably U+FEFF, U+FFF9, U+FFFA, U+FFFB), enabling memory corruption that ...

CVE-2011-1300

The CVE-2011-1300 entry affects ANGLE’s WebGLES library (libGLESv2.dll) used by Mozilla Firefox 4.x on Windows and by Chrome’s GPU process, due to an off-by-three error in Program::getActiveUniformMaxLength. This allows remote code execution via unspecified vectors. Public sources indicate Chrome...

CVE-2020-15651

The CVE-2020-15651 issue affects Firefox for iOS prior to 28. A Unicode RTL order character in the downloaded file name can be used in the download UI flow to rename the file and change its extension. Connected sources confirm the vulnerability and indicate Mozilla fixed it in Firefox iOS 28 (MFS...

CVE-2025-14322

A sandbox escape vulnerability exists in the Graphics: CanvasWebGL component of Mozilla Firefox and Thunderbird due to incorrect boundary conditions and insufficient checking of unusual states. This flaw allows a remote attacker to bypass sandboxing protection mechanisms. Affected versions includ...

CVE-2025-14324

CVE-2025-14324 describes a JIT miscompilation in the JavaScript Engine’s JIT component affecting Firefox < 146, Firefox ESR < 115.31 and < 140.6, and Thunderbird

CVE-2025-14331

CVE-2025-14331: Same-origin policy bypass in the Request Handling component affects Firefox <146, Firefox ESR <115.31 and <140.6, Thunderbird <146 and

CVE-2026-0892

Mozilla Firefox and Thunderbird versions 146 (and versions prior to 147) are affected by memory safety bugs that can lead to memory corruption . An attacker could potentially exploit these vulnerabilities to achieve arbitrary code execution on the system or cause a denial-of-service (DoS) attack....

CVE-2026-16398

Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVE-2026-2784

A vulnerability CVE-2026-2784 is a mitigation bypass in the DOM: Security component affecting Mozilla Firefox and Thunderbird. The issue was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. The connected sources (Astra Linux bulletin and Amazon Linux advisories) co...

CVE-2026-2785

CVE-2026-2785 is an Invalid pointer vulnerability in the Firefox JavaScript Engine. Connected sources show it being addressed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. Debian/ALMA and Amazon Linux advisories enumerate Firefox-related fixes including this CVE and l...

CVE-2026-2795

CVE-2026-2795 is a use-after-free in the JavaScript: GC component affecting Mozilla Firefox and Mozilla Thunderbird. Technical details across connected sources consistently identify the flaw in the GC object handling, with exploitation risk implied by the high/critical CVSS data. The vulnerabilit...

CVE-2026-92071

A sandbox escape vulnerability exists in the Widget: Win32 component of Firefox and Thunderbird due to incorrect boundary conditions. This flaw allows an attacker to escape the sandbox environment, potentially leading to broader system impact. The issue was addressed in Firefox 156 , Firefox ESR ...

CVE-2004-1200

CVE-2004-1200 affects Firefox and Mozilla browsers. The vulnerability allows remote attackers to trigger high memory usage via JavaScript that repeatedly creates and sorts nested arrays, causing an application crash (DoS). The NVD entry documents a network-exposed scenario with a partial availabi...

CVE-2006-6971

Mozilla Firefox 2.0 (Windows) vulnerability: phishing-protection can be bypassed by representing an IP address in formats such as dotted-hex, dotted-octal, decimal, hex, or octal, which evade the blacklist filter. Root cause is parsing/format handling that fails to normalize these IP representati...

CVE-2009-2953

CVE-2009-2953 affects Mozilla Firefox 3.0.6–3.0.13 and 3.5.x, where JavaScript processing of location.hash (hash property) can trigger CPU-driven denial of service. The root cause is related to handling of long string values for hash in JavaScript. Public references document the issue as a follow...

CVE-2009-3978

The vulnerability CVE-2009-3978 affects Mozilla Firefox up to version 3.5.4 (libpr0n’s nsGIFDecoder2::GifWrite in decoders/gif/nsGIFDecoder2.cpp). An animated GIF with a large image size could trigger a NULL pointer dereference, causing a denial of service (application crash). This is tied to the...

CVE-2013-0790

CVE-2013-0790 affects Mozilla Firefox for Android prior to 20.0. It stems from a browser-engine memory-safety vulnerability that could lead to a denial of service or remote code execution via an unspecified plug-in path. The linked MFSA advisory group (MFSA 2013-30/31/32…/40) confirms memory-safe...

CVE-2013-5594

CVE-2013-5594 affects Mozilla Firefox prior to version 25. The issue allows modification of anonymous content in the binding of pluginProblem.xml, indicating an integrity-related vulnerability with no confidentiality or availability impact stated in the provided documents; exploitation details ar...

CVE-2025-8043

Mozilla Firefox and Thunderbird are vulnerable to a security flaw where URLs are incorrectly truncated toward the beginning instead of around the origin. This vulnerability exists in products earlier than version 141 . Potential impacts include security bypass , spoofing the user interface , and ...

CVE-2026-0880

A sandbox escape vulnerability exists in the Graphics component of Mozilla Firefox and Thunderbird due to an integer overflow (numerical overflow). This flaw can allow an attacker to execute arbitrary code on a system or disclose sensitive information. Affected versions include Firefox < 147, ...

CVE-2026-3845

A heap buffer overflow exists in the Audio/Video: Playback component of the Mozilla Firefox browser for Android . This vulnerability occurs due to a buffer overflow in dynamic memory during playback. A remote attacker could exploit this flaw to achieve arbitrary code execution . The issue is fixe...

CVE-2026-4713

CVE-2026-4713 is a Firefox graphics vulnerability: incorrect boundary conditions in the Graphics component. Affected: Firefox versions before 149 and ESR before 140.9. Mitigation: update to Firefox 149 or ESR 140.9 (patched). Details on exploitability or broader impact are not provided in the sup...

CVE-2026-84120

A use-after-free vulnerability exists in the Audio/Video component of Mozilla Firefox and Thunderbird . This flaw could potentially allow for the execution of arbitrary code , sandbox escape , or privilege escalation . The issues have been addressed in Firefox 155 , Firefox ESR 115.40 , Firefox E...

CVE-2026-92012

Mozilla Firefox and Thunderbird are affected by CVE-2026-92012, a privilege escalation vulnerability caused by incorrect boundary conditions within the Graphics: CanvasWebGL component. The vulnerability has been addressed in the following versions: Firefox 156, Firefox ESR 115.41, Firefox ESR 140...

CVE-2026-9309

The Firefox for iOS Reader View fails to properly escape HTML tags in JSON-LD metadata , allowing a malicious page to inject markup. This injection can alter Reader View behavior and leak sensitive URL parameters , which may be leveraged to access internal pages. This could potentially result in ...

CVE-2005-1576

Affected software: Mozilla Firefox on Windows (versions 0.10.1 and 1.0). Vulnerability: The file download dialog uses the Content-Type HTTP header to determine file type, but when selecting “Save to Disk,” it preserves the original file extension, allowing remote attackers to mask the true file t...