CVE-2022-34478

Summary: CVE-2022-34478 affects Thunderbird on Windows, where the ms-msdt, search, and search-ms protocols could deliver content to Microsoft apps via prompts opened by user interaction. The underlying risk is exploitation of a prompt-based handling in these protocols that bypasses the browser. T...

CVE-2024-11698

A flaw in handling fullscreen transitions can cause the application to become stuck in fullscreen mode when a modal dialog is opened during the transition. This issue specifically affects macOS and results in a disrupted browsing experience where users cannot exit fullscreen via standard actions ...

CVE-2018-18505

CVE-2018-18505 concerns an IPC privilege-escalation in Mozilla products where an authentication added during IPC process creation is not applied to channels created later, enabling potential sandbox escape through IPC channels. Public advisories tie this to Thunderbird and Firefox releases prior ...

CVE-2020-15664

The CVE-2020-15664 issue arises from a malicious page holding a reference to eval() from an about:blank window, allowing access to InstallTrigger and prompting users to install an extension. Affected products include Firefox < 80, Thunderbird < 78.2/68.12, Firefox ESR < 68.12/78.2, and F...

CVE-2020-6831

CVE-2020-6831 is a bug described in Debian security advisories as a buffer overflow in the SCTP chunk input validation in the usrsctp library. The Debian entries explicitly tie this CVE to Firefox ESR (<68.8), Firefox (<76) and Thunderbird (

CVE-2021-24002

CVE-2021-24002 is a vulnerability observed in Firefox before 88 and Thunderbird before 78.10 where clicking an FTP URL containing encoded newline characters (%0A, %0D) could cause the server to interpret newlines and execute arbitrary commands. Affected products include Firefox ESR < 78.10, Fi...

CVE-2024-4769

This vulnerability exists in Firefox , Firefox ESR , and Thunderbird when importing resources via Web Workers . The underlying cause is that error messages distinguish between application/javascript responses and non-script responses, which could be abused to leak information cross-origin. Affect...

CVE-2025-1018

The Mozilla Firefox browser and Thunderbird email client are affected by a vulnerability where the fullscreen notification is prematurely hidden when a user quickly re-requests fullscreen. This flaw, related to improper restrictions on user interface layers or frames, could be exploited by a remo...

CVE-2020-15683

CVE-2020-15683 : Mozilla Firefox and Thunderbird memory-safety issues reported affecting Firefox ESR < 78.4, Firefox < 82, and Thunderbird

CVE-2021-23981

CVE-2021-23981 describes a memory-safety issue in WebGL where uploading a Texture into a Pixel Buffer Object could confuse WebGL and skip binding the buffer used to unpack it, leading to an out-of-bounds read and potential information leak or crash. Affected software includes Firefox ESR < 78....

CVE-2021-29984

CVE-2021-29984 involves instruction reordering that allowed a GC-related object misevaluation, causing memory corruption and potentially exploitable crashes in Mozilla components. Affected products include Thunderbird and Firefox ESR/Firefox releases prior to 78.13/91; the exploit would require m...

CVE-2024-11696

This vulnerability affects Firefox versions < 133 , Firefox ESR < 128.5 , Thunderbird < 133 , and Thunderbird

CVE-2024-5693

The Offscreen Canvas component in Firefox and Thunderbird failed to properly track cross-origin tainting . This flaw could allow an attacker to access image data from another site, violating the same-origin policy . Affected versions include Firefox < 127 , Firefox ESR < 115.12 , and Thunde...

CVE-2019-11693

CVE-2019-11693 describes a Linux-specific buffer overflow in WebGL’s bufferdata, affecting Thunderbird and Firefox (Thunderbird <60.7, Firefox <67, ESR

CVE-2019-11743

CVE-2019-11743 describes cross-origin access to unload event attributes, enabling timing-side-channel exposure of history in certain browsers. Connected docs confirm affected products and versions, with fixes noted in Thunderbird updates (e.g., Thunderbird 60.9.0) and Firefox/ESR advisories addre...

CVE-2021-29988

The CVE-2021-29988 issue is a memory safety vulnerability in Mozilla code where Firefox incorrectly treated an inline list-item as a block element, leading to an out-of-bounds read or memory corruption and a potentially exploitable crash. Affected products and versions: Thunderbird < 78.13 and...

CVE-2023-4579

CVE-2023-4579 affects Mozilla Firefox when the default search engine may render a well-formed URL from a query as the navigated URL, enabling potential spoofing. Connected advisories confirm the issue targets Firefox versions prior to 117 and involve the default search engine handling, across mul...

CVE-2024-8383

CVE-2024-8383 affects Mozilla Firefox and Firefox ESR. The issue arises when Firefox asks the OS to handle a scheme the browser doesn’t support and doesn’t prompt for confirmation for Usenet-related schemes (news: and snews:). This could allow a malicious webpage or downloaded application to regi...

CVE-2010-0178

CVE-2010-0178 affects Mozilla Firefox up to 3.0.19, Firefox 3.5.x up to 3.5.9, Firefox 3.6.x up to 3.6.2, and SeaMonkey up to 2.0.3 (before 2.0.4). The vulnerability allows an applet to convert a mouse click into a drag‑and‑drop, enabling remote JavaScript execution with Chrome privileges by firs...

CVE-2024-11693

This vulnerability affects Firefox versions prior to 133, Firefox ESR prior to 128.5, Thunderbird versions prior to 133, and Thunderbird prior to 128.5. The issue is specifically restricted to Windows operating systems , where the executable file warning is not presented during the download of .l...

CVE-2024-4777

CVE-2024-4777 concerns memory-safety bugs in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10, potentially allowing arbitrary code execution. Public sources in connected documents confirm affected products and versions: Firefox < 126, Firefox ESR < 115.11, and Thunderbird

CVE-2024-6605

Firefox Android allowed immediate interaction with permission prompts. This could be used for tapjacking. This vulnerability affects Firefox

CVE-2024-6610

The CVE-2024-6610 issue is disclosed across multiple sources as a UI vulnerability in Mozilla Firefox and Thunderbird prior to version 128, caused by form validation popups that can capture escape key presses and block exiting full-screen mode. Affected products: Firefox <128 and Thunderbird

CVE-2019-11715

CVE-2019-11715: HTML parsing error can contribute to content XSS. Affected: Firefox ESR <60.8, Firefox <68, Thunderbird

CVE-2019-9813

CVE-2019-9813 describes an IonMonkey JIT type confusion caused by incorrect handling of proto mutations, enabling potential arbitrary memory read/write. Affected products include Firefox prior to 66.0.1, Firefox ESR prior to 60.6.1, and Thunderbird prior to 60.6.1. The underlying issue is a type-...

CVE-2021-23984

The CVE-2021-23984 entry describes a vulnerability in which a malicious extension could open a popup window without an address bar, allowing spoofing of a site and credential theft. Affected products include Firefox ESR < 78.9, Firefox < 87, and Thunderbird

CVE-2024-7526

The ANGLE component in Firefox and Thunderbird fails to initialize parameters correctly, leading to a read from uninitialized memory . This vulnerability could be exploited to leak sensitive data from memory. Affected versions include Firefox < 129 , Firefox ESR < 115.14 , Firefox ESR < ...

CVE-2025-0243

Mozilla Firefox and Thunderbird are affected by memory safety bugs in versions 133 and 128.5 (ESR). The root cause involves copying buffers without checking the size of the input data , which may lead to memory corruption . A remote attacker could potentially exploit these flaws to execute arbitr...

CVE-2019-11746

CVE-2019-11746 is a use-after-free in video element handling that can cause a crash. Public sources in connected advisories confirm impact on Firefox versions below 69, Thunderbird <68.1 and <60.9 (and ESR branches

CVE-2019-17011

CVE-2019-17011 : A race condition in DocShell antitracking can cause a use-after-free and potentially crash the process. Affected: Thunderbird < 68.3, Firefox ESR < 68.3, Firefox

CVE-2020-6799

CVE-2020-6799 is a vulnerability in Mozilla Firefox where command line arguments could be injected during Firefox invocation when Firefox is the default handler for non-default filetypes and a downloaded file is opened by a third‑party application that does not sanitize URL data. The issue could ...

CVE-2021-29976

CVE-2021-29976 is a memory-safety issue affecting Mozilla code shared by Firefox and Thunderbird. The advisory details indicate memory-safety bugs that could be exploited to run arbitrary code, impacting Thunderbird < 78.12, Firefox ESR < 78.12, and Firefox

CVE-2021-38508

CVE-2021-38508 is a vulnerability affecting Mozilla products where a form validity message shown in the same location as a permission prompt (e.g., geolocation) can obscure the prompt, potentially tricking users into granting permissions. Affected: Firefox < 94, Thunderbird < 91.3, and Fire...

CVE-2024-10460

The CVE-2024-10460 issue is a data: URL-based spoofing vulnerability in an iframe that obscures the origin of an external protocol handler prompt. Affected: Firefox <132, Firefox ESR <128.4, Thunderbird <128.4, and Thunderbird

CVE-2024-7518

CVE-2024-7518 describes that select options could obscure the fullscreen notification dialog, enabling spoofing by a malicious site. Affected products and versions identified in connected docs include Mozilla Firefox (older builds: Firefox < 129 and Firefox ESR < 128.1) and Mozilla Thunderb...

CVE-2024-7527

The CVE-2024-7527 issue (use-after-free at the start of sweeping) affects Firefox <129 and Thunderbird

CVE-2021-38504

The CVE-2021-38504 issue is a real vulnerability affecting Firefox < 94, Thunderbird < 91.3, and Firefox ESR

CVE-2024-10466

CVE-2024-10466: A specially crafted push message can hang the parent process, making the browser unresponsive. Affected: Firefox < 132, Firefox ESR < 128.4, Thunderbird

CVE-2024-11706

A null pointer dereference vulnerability exists in the pk12util component, specifically within the SEC_ASN1DecodeItem_Util function. This issue occurs when the software processes malformed or improperly formatted input files. The vulnerability impacts Firefox versions prior to 133 and Thunderbird...

CVE-2024-6613

The frame iterator in Firefox and Thunderbird can become stuck in a loop when processing certain WebAssembly (WASM) frames. This flaw leads to the generation of incorrect stack traces . This vulnerability affects Firefox < 128 and Thunderbird

CVE-2024-7520

CVE-2024-7520 is a type confusion vulnerability in WebAssembly that could enable code execution. The available documents confirm impact on Mozilla Firefox (pre-129 and ESR pre-128.1) and Mozilla Thunderbird (pre-128.1). The underlying issue is a WebAssembly type confusion, with several advisories...

CVE-2024-8384

CVE-2024-8384 describes a memory safety issue in the JavaScript engine’s garbage collector where cross-compartment objects could be mis-colored under certain OOM timing, leading to memory corruption. Affected products per connected sources include Firefox and Thunderbird up to specific versions: ...

CVE-2025-0238

Mozilla Firefox and Thunderbird are affected by a use-after-free vulnerability triggered by a controlled failed memory allocation when breaking lines in text. This flaw could lead to a potentially exploitable crash or service interruption via a specially crafted web page. The vulnerability impact...

CVE-2020-26960

CVE-2020-26960 is a use-after-free vulnerability caused by reallocation during Compact() on nsTArray, affecting Firefox <83, Firefox ESR <78.5, and Thunderbird

CVE-2024-7531

CVE-2024-7531 involves Mozilla Firefox and Firefox ESR. The connected documents confirm the underlying vulnerability: calling PK11_Encrypt() in NSS with CKM_CHACHA20 and using the same buffer for input and output can expose plaintext on Intel Sandy Bridge CPUs. In Firefox, the impact is limited t...

CVE-2024-8385

CVE-2024-8385 is a WASM type confusion vulnerability caused by how StructFields and ArrayTypes are handled. Affects Firefox (versions before 130) and Firefox ESR (before 128.2) and Thunderbird (before 128.2). Exploitation could lead to high-impact outcomes per the CVE. Remediation in the public d...

CVE-2024-9396

A memory corruption vulnerability exists in Firefox and Thunderbird due to a condition where the structured clone of certain objects occurs. This vulnerability affects Firefox < 131 , Firefox ESR < 128.3 , Thunderbird < 128.3 , and Thunderbird

CVE-2024-9397

CVE-2024-9397 is a concrete issue: a missing delay in the directory upload UI could enable clickjacking to trick users into granting permissions. Affected products include Firefox (versions prior to 131 and ESR prior to 128.3) and Thunderbird (prior to 131/128.3). Connected advisories (ALSA/ALAS)...

CVE-2025-0245

The Mozilla Firefox Focus browser for Android is vulnerable to an authentication bypass. Under certain circumstances, the user opt-in setting requiring authentication before use could be bypassed through an alternative path or channel . This flaw allows a malicious actor to circumvent screen lock...

CVE-2019-11712

CVE-2019-11712 describes a vulnerability where NPAPI plugins (e.g., Flash) performing POST requests that follow a 308 redirect can bypass CORS, enabling CSRF. Affected products include Mozilla Firefox ESR < 60.8, Firefox < 68, and Thunderbird