1945 matches found
CVE-2023-4585
CVE-2023-4585 describes memory safety bugs in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1, with evidence of memory corruption and the potential for arbitrary code execution. Affected versions are Firefox < 117, Firefox ESR < 115.2, and Thunderbird
CVE-2020-15654
CVE-2020-15654 affects Mozilla Firefox and Thunderbird where a site-based CSS-override cursor can overlay the UI, causing a perceived broken state and interfering with dialogs. Affected: Firefox ESR earlier than 78.1, Firefox earlier than 79, and Thunderbird earlier than 78.1. Root cause: an erro...
CVE-2020-12415
CVE-2020-12415 describes AppCache manifest poisoning in Firefox when a URL contains a %2F, which could allow serving a manifest from a subdirectory and potentially cause the appcache to service top-level directory requests. Public references confirm this vulnerability affects Firefox versions ear...
CVE-2023-4581
CVE-2023-4581 covers a blocklist gap where Excel .xll add-in files could be downloaded without warnings due to Firefox’s executable blocklist lacking an entry. Affected products/versions shown in the documents: Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 10...
CVE-2020-15670
CVE-2020-15670 involves memory safety bugs in Mozilla Firefox components, affecting Firefox for Android 79 and other Firefox variants prior to 80, including Firefox ESR < 78.2 and Thunderbird
CVE-2020-35112
CVE-2020-35112 is a Windows-specific issue in Mozilla Firefox (affecting Firefox <84, Thunderbird <78.6, and Firefox ESR
CVE-2019-11728
CVE-2019-11728 affects Mozilla Firefox prior to 68. The issue arises from the Alt-Svc (HTTP Alt-Svc) header which a malicious site can leverage to scan all TCP ports of hosts reachable by a user when web content is loaded. Impact is limited to information exposure via port discovery; no explicit ...
CVE-2020-15676
CVE-2020-15676 affects Firefox (and related Mozilla products) where the onload handler for SVG elements could run after the DOM sanitizer removed content, enabling JavaScript execution when pasting attacker-controlled data into a contenteditable area. Affected versions: Firefox < 81, Thunderbi...
CVE-2023-5169
CVE-2023-5169 (Firefox/Thunderbird) involves a compromised content process that could feed malicious data into PathRecording, causing an out-of-bounds write and potentially a crash in a privileged process. Affected products include Firefox <118, Firefox ESR <115.3, and Thunderbird
CVE-2018-12392
CVE-2018-12392 is a vulnerability affecting Firefox (pre-63 and ESR pre-60.3) and Thunderbird (pre-60.3) where manipulating user events in nested loops while opening a document via script can trigger a crash due to poor event handling. Public advisories list the impact as a potentially exploitabl...
CVE-2019-11758
CVE-2019-11758 is a memory-safety bug in Mozilla Firefox that can lead to arbitrary code execution when 360 Total Security is installed. The advisory notes it affects Firefox versions before 69, Thunderbird before 68.2, and Firefox ESR before 68.2. Public documentation in connected sources confir...
CVE-2020-12410
Summary of CVE-2020-12410 : Mozilla reported memory safety bugs in Firefox 76 and Firefox ESR 68.8, which could lead to memory corruption and possibly arbitrary code execution. Affected products and versions per provided docs: Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR
CVE-2013-0758
CVE-2013-0758 affects Mozilla Firefox (pre-18.0), Firefox ESR (pre-10.0.12 and pre-17.0.2), Thunderbird (pre-17.0.2, including ESR 10.x pre-10.0.12 and pre-17.0.2), and SeaMonkey (pre-2.15). It allows remote attackers to execute arbitrary JavaScript with chrome privileges due to improper interact...
CVE-2020-15655
CVE-2020-15655 affects Mozilla Firefox (including ESR) and Thunderbird, where a redirected HTTP request observed or modified through a web extension could bypass Same-Origin Policy via extension APIs, potentially disclosing cross-origin information. Affected versions include Firefox ESR <78.1,...
CVE-2023-4573
The CVE-2023-4573 issue is a memory corruption/use-after-free in Mozilla's IPC path (mStream) that can be triggered when rendering data is received via IPC. Connected documents confirm affected products include Firefox and Thunderbird (multiple ESR branches) with vulnerable components tied to IPC...
CVE-2023-4574
CVE-2023-4574 involves a use-after-free in the IPC ColorPickerShownCallback: creating multiple identical callbacks for the Color Picker over IPC, then destroying them all when one finishes. Affected: Firefox < 117, Firefox ESR < 102.15/115.2, Thunderbird
CVE-2023-4580
CVE-2023-4580 : Pushed notifications stored on disk in private browsing mode were not encrypted, potentially leaking sensitive information. Affected: Firefox < 117, Firefox ESR < 115.2, Thunderbird
CVE-2023-5168
CVE-2023-5168 refers to a vulnerability in Firefox on Windows where a compromised content process could supply malicious data to FilterNodeD2D1, causing an out-of-bounds write and potentially crashing a privileged process. The entry notes a high/critical risk with a base score of 9.8 (CVSSv3.1) a...
CVE-2020-12422
CVE-2020-12422 affects Mozilla Firefox (non-standard configurations). The root cause is an integer overflow in nsJPEGEncoder::emptyOutputBuffer when handling a JPEG image created by JavaScript, leading to an out-of-bounds write and memory corruption that could cause a crash. The vulnerability is ...
CVE-2023-4583
CVE-2023-4583 concerns a logic issue in the HTTP/Browsing Context handling within Mozilla Firefox/Thunderbird. The flaw occurs when HttpBaseChannel checks whether a Browsing Context has been discarded; if the load group is unavailable, it may assume discard even for private channels after a priva...
CVE-2020-12416
CVE-2020-12416 describes a use-after-free in the WebRTC path where VideoStreamEncoder may be freed in a race with VideoBroadcaster::AddOrUpdateSink, causing memory corruption and a potentially exploitable crash. The vulnerability affects Mozilla Firefox releases before 78. The issue is mitigated ...
CVE-2020-12424
Vulnerability CVE-2020-12424 affects Firefox earlier than 78, where a WebRTC permission prompt could be bypassed if a URI from the content process was untrusted and potentially the origin that had been previously granted permission. Connected advisories and vendor updates indicate this issue was ...
CVE-2020-12425
CVE-2020-12425 affects Firefox: a one-byte out-of-bounds read in Date.parse() due to hyphen processing could disclose information. Affected product line is Firefox before version 78. Several connected advisories confirm this issue alongside other CVEs and show that fixes were included in subseque...
CVE-2019-9801
CVE-2019-9801 affects Mozilla Firefox and Thunderbird on Windows. The issue allows Firefox/Thunderbird to treat any registered Program ID as an external protocol handler and offer to launch a local application when a matching URL is opened, even if the program is not intended as a URL handler. Ro...
CVE-2019-9818
CVE-2019-9818 is a use-after-free in the crash generation server used by Mozilla Firefox/Thunderbird on Windows. The issue, described as a race condition in the crash reporter server, can lead to a potentially exploitable crash and sandbox escape. Public references indicate the vulnerability affe...
CVE-2021-38498
The CVE-2021-38498 entry describes a use-after-free of the nsLanguageAtomService (languages service object) during process shutdown, causing memory corruption and potentially a crash. Affected products include Firefox < 93, Thunderbird < 91.2, and Firefox ESR
CVE-2019-11735
CVE-2019-11735 is a memory-safety bug in Firefox/Firefox ESR before version 69.0 and 68.1 respectively, with Mozilla noting memory corruption and potentially arbitrary code execution. Public sources (Arch Linux ASA-201909-2, FreeBSD Vuxml, Debian/IBM OS bulletins) confirm it as a Firefox vulnerab...
CVE-2019-11724
CVE-2019-11724 affects Mozilla Firefox prior to version 68. The issue is an access restriction bypass caused by application permissions that granted an unnecessary remote troubleshooting permission to input.mozilla.org, which has since retired and redirects elsewhere. Impact described across conn...
CVE-2019-11749
CVE-2019-11749 describes an information-disclosure vulnerability in WebRTC: malicious content can probe the getUserMedia constraints to reveal camera device properties without user prompt, enabling potential user fingerprinting. Affected products are Firefox prior to 69 and Firefox ESR prior to 6...
CVE-2021-29981
CVE-2021-29981 affects Firefox < 91 and Thunderbird
CVE-2023-25751
CVE-2023-25751 affects Firefox and Thunderbird: root cause is incorrect code generation during JIT code invalidation when following an iterator, which could lead to a potentially exploitable crash. Affected: Firefox <=111 and Firefox ESR <=102.8/9, Thunderbird
CVE-2023-4578
CVE-2023-4578 affects Firefox and Thunderbird: a failure in JS::CheckRegExpSyntax could mishandle an out-of-memory (OOM) condition as a Syntax Error, potentially leading to crashes. Affected versions are Firefox < 117, Firefox ESR < 115.2, and Thunderbird
CVE-2009-2408
CVE-2009-2408 affects Mozilla NSS up to 3.12.2/Firefox up to 3.0.12/ Thunderbird up to 2.0.0.22 and SeaMonkey up to 1.1.17. The issue is improper handling of a '\0' character in the domain name present in the certificate subject’s Common Name (CN) field of an X.509 certificate. This enables a man...
CVE-2019-11723
CVE-2019-11723 affects Mozilla Firefox prior to version 68, where during add-on installation the initial fetch ignored origin attributes of the browsing context, potentially leaking cookies in private browsing or across Firefox Multi-Account Containers. The issue is documented in multiple sources...
CVE-2019-11750
CVE-2019-11750 : A type confusion in Spidermonkey causes a non-exploitable crash in Firefox versions before 69 and Firefox ESR before 68.1. Affected products include Firefox <69 / ESR
CVE-2021-38501
CVE-2021-38501 is a memory-safety issue affecting Firefox up to version 92/ESR 91.1 with memory-corruption risks; impacted products include Firefox <93, Thunderbird <91.2, and Firefox ESR
CVE-2023-5728
CVE-2023-5728 : In the Firefox/Thunderbird stack, during garbage collection extra operations on an object that should not be touched could lead to a potentially exploitable crash. Affected: Firefox < 119, Firefox ESR < 115.4, and Thunderbird
CVE-2019-11694
CVE-2019-11694 is a Windows-only vulnerability in the Mozilla Firefox/Thunderbird stack where an uninitialized memory value can leak from a broker into a renderer when accessing an otherwise unavailable file in the Windows sandbox. Affected products include Thunderbird < 60.7, Firefox < 67,...
CVE-2023-4575
CVE-2023-4575 describes a memory safety risk in Mozilla components where IPC FilePickerShownCallback could suffer a use-after-free due to multiple identical callbacks being created and destroyed concurrently during File Picker window invocation. Affected products include Firefox (all listed varia...
CVE-2024-0741
CVE-2024-0741 describes an out-of-bounds write in ANGLE that could corrupt memory and cause a potentially exploitable crash. Affected software includes Firefox up to version 121/122 and Firefox ESR up to 115.7, as well as Thunderbird up to 115.7. The connected advisories indicate the root cause i...
CVE-2020-12423
CVE-2020-12423 (Windows only) is a DLL hijacking vulnerability in Firefox: if webauthn.dll is missing and a malicious DLL with the same name is placed in a folder on the user’s PATH, Firefox may load it and execute arbitrary code. Affected products are Firefox versions earlier than 78 on Windows....
CVE-2024-0743
CVE-2024-0743 describes an unchecked return value in TLS handshake code that could cause a potentially exploitable crash. Affected products per the provided documents are Mozilla Firefox (including ESR) and Thunderbird prior to the patched versions: Firefox < 122, Firefox ESR < 115.9, and T...
CVE-2017-5390
CVE-2017-5390 concerns the JSON viewer in Mozilla/Thunderbird Developer Tools that uses insecure methods to copy/view JSON or HTTP header data, enabling potential privilege escalation. Concrete details in connected docs show this affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox
CVE-2019-11747
CVE-2019-11747 affects Mozilla Firefox and Firefox ESR. The vulnerability stems from a bug in the History pane’s “Forget about this site” feature which, while intended to delete site-visit data, also removes HSTS settings for sites on the pre-load list. As a result, on the next visit, if a user u...
CVE-2020-12426
CVE-2020-12426 references memory-safety bugs in Firefox 77 that could potentially allow arbitrary code execution and affect Firefox versions earlier than 78. The connected advisories consistently indicate that fixes were implemented in Firefox 78 (and Thunderbird-related components) and that this...
CVE-2023-4577
CVE-2023-4577 is a memory-corruption issue in the Firefox/Thunderbird code path where UpdateRegExpStatics could access initialStringHeap after it had been garbage collected, potentially causing an exploitable crash. Connected advisories corroborate that affected products include Firefox versions ...
CVE-2019-11738
CVE-2019-11738 describes a Content Security Policy bypass in Firefox before 69 and Firefox ESR before 68.1: a hash-based CSP source that takes the empty string as input can allow execution of javascript: URIs, bypassing CSP permissions. Affected products: Firefox <69 and Firefox ESR
CVE-2019-9821
CVE-2019-9821 : A use-after-free in AssertWorkerThread caused by a race with shared workers affects Mozilla Firefox versions before 67. The issue can lead to a potentially exploitable crash (no exploitation details provided in the documents). Affected product: Mozilla Firefox; vulnerable componen...
CVE-2023-29536
The CVE-2023-29536 entry applies to Mozilla products (Firefox, Focus, Thunderbird, Firefox ESR, and Firefox for Android) with memory-management weakness in freeing a pointer to attacker-controlled memory. Impacted versions include Firefox <112, Focus for Android <112, Firefox ESR <102.10...