CVE-2020-6823

The CVE-2020-6823 entry concerns Mozilla Firefox (affected versions: below 75). A malicious extension could call browser.identity.launchWebAuthFlow, allowing control of the redirect_uri and through the returned Promise obtain an OAuth authorization code, enabling the attacker to access the user’s...

CVE-2021-38492

CVE-2021-38492 affects Mozilla Firefox on Windows, where delegating navigations to the OS could accept mk: URLs and load Internet Explorer in unprivileged mode. The vulnerability impacts Firefox versions older than 92 (and related Thunderbird/ ESR lines). Remediation is to upgrade to Firefox 92+ ...

CVE-2022-40959

The CVE-2022-40959 entry corresponds to a Mozilla vulnerability where during iframe navigation, FeaturePolicy was not fully initialized, allowing a bypass that leaked device permissions to untrusted subdocuments. Affected products include Firefox ESR before 102.3, Thunderbird before 102.3, and Fi...

CVE-2018-12386

Summary: CVE-2018-12386 is a type-confusion vulnerability in Mozilla Firefox/Firefox ESR related to JavaScript register allocation, which can lead to an arbitrary read/write and remote code execution in the sandboxed content process. Affected versions: Firefox ESR before 60.2.2 and Firefox before...

CVE-2022-31742

CVE-2022-31742 describes a timing-attack flaw in WebAuthn: an attacker could send many allowCredential entries and distinguish valid vs invalid key handles, enabling cross-origin account linking. Affected products in the provided records are Thunderbird < 91.10, Firefox < 101, and Firefox ESR

CVE-2022-34481

The CVE-2022-34481 entry describes an integer overflow in nsTArray_Impl::ReplaceElementsAt() that could occur when replacing too many elements, affecting Firefox <102, Firefox ESR <91.11, Thunderbird <102, and Thunderbird

CVE-2022-46871

CVE-2022-46871 is tied to an out-of-date libusrsctp library in Firefox prior to version 108. The vulnerability affects Firefox and is rated HIGH (CVSSv3.1: 8.8) with NETWORK attack vector, LOW complexity, no privileges required, user interaction needed, and potential HIGH impact on confidentialit...

CVE-2018-5104

CVE-2018-5104 is a use-after-free in font-face manipulation that can trigger a crash when a font face is freed while still in use. Affected products include Mozilla Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox

CVE-2019-11736

CVE-2019-11736 describes a local-privilege-escalation vulnerability in the Mozilla Maintenance Service on Windows. The issue arises because the service does not guard against hardlinks in the updates directory, enabling replacement of local files (including the Maintenance Service executable) and...

CVE-2019-17021

CVE-2019-17021 describes a race condition during the initialization of a new content process in Firefox on Windows that can disclose heap addresses from the parent process. Affected products are Firefox ESR < 68.4 and Firefox

CVE-2020-15648

CVE-2020-15648 involves a framing bypass: using object/embed tags could frame other sites even if X-Frame-Options blocks framing. Affected: Firefox < 78.0.2 and Thunderbird

CVE-2018-12366

CVE-2018-12366 describes an out-of-bounds read during QCMS color profile transformations caused by an invalid grid size. The vulnerability could leak private data in output. Affected products/versions include Thunderbird (and Firefox components) before specific fixed releases: Debian/CentOS advis...

CVE-2025-4919

Mozilla Firefox and Thunderbird are affected by an out-of-bounds read or write vulnerability in a JavaScript object . The root cause is triggered by confusing array index sizes during operations. This security flaw could potentially lead to memory corruption. Remediation is available in Firefox 1...

CVE-2018-12377

CVE-2018-12377 is a use-after-free vulnerability that can occur when refresh driver timers are refreshed during shutdown, potentially causing a crash when the timer is deleted while still in use. The issue affects Thunderbird versions prior to 60.2.1 (and related Firefox/ESR components). The docu...

CVE-2019-17015

CVE-2019-17015 is a Windows-only memory corruption issue during the initialization of a new content process in Mozilla Firefox ESR < 68.4 and Firefox

CVE-2022-34480

Summary: CVE-2022-34480 affects Mozilla Firefox earlier than 102.0. The issue is in the lg_init() routine: when several allocations succeed but one fails, an uninitialized pointer could be freed, even though it was never allocated. This could enable arbitrary code execution or other impacts as de...

CVE-2026-16367

A sandbox escape vulnerability exists in the Disability Access APIs component due to an invalid pointer . This vulnerability affects Mozilla Firefox and Mozilla Thunderbird . The issue was addressed and fixed in Firefox 153 and Thunderbird 153 . No information regarding practical consequences, ex...

CVE-2023-32207

CVE-2023-32207 describes a missing delay in popup notifications that could let an attacker trick a user into granting permissions. Affected software includes Firefox < 113, Firefox ESR < 102.11, and Thunderbird

CVE-2023-4054

CVE-2023-4054 affects Firefox on Windows (Firefox < 116; ESR < 102.14, 115.1) and Thunderbird

CVE-2022-46874

CVE-2022-46874 describes a filename truncation issue where a long filename could lose its valid extension, leaving a malicious extension that could confuse users or lead to execution of malicious code. Public reports indicate affected products include Firefox versions before 108 and Thunderbird v...

CVE-2025-1414

Mozilla Firefox is affected by memory safety bugs in versions prior to 135.0.1 . These issues involve operations exceeding buffer boundaries in memory, which could allow a remote attacker to achieve arbitrary code execution (ACE) . The vulnerability was addressed in version 135.0.1 . No specific ...

CVE-2017-5380

CVE-2017-5380 is a use-after-free vulnerability related to SVG content processing. Connected IBM advisories confirm this CVE ID is present and tie it to vulnerabilities in Mozilla Firefox shipped with IBM Storwize V7000 Unified and IBM SONAS. Affected IBM products and versions are IBM Storwize V7...

CVE-2018-12378

CVE-2018-12378 is a use-after-free in Thunderbird/Firefox related to deleting an IndexedDB index while it is still in use by JavaScript, causing a potentially exploitable crash. Affected: Thunderbird

CVE-2023-25744

CVE-2023-25744 describes memory-safety bugs in Firefox 109 and Firefox ESR 102.7 that led Mozilla to assess potential for arbitrary-code execution with enough effort. The issue affects Firefox versions earlier than 110 and Firefox ESR versions earlier than 102.8. Public notices in connected docum...

CVE-2017-5462

The CVE-2017-5462 issue is a DRBG generation flaw in the NSS library where the internal state V does not correctly carry bits over. This vulnerability affects Mozilla products including Thunderbird (<52.1), Firefox ESR (<52.1), Firefox (

CVE-2023-5723

The CVE-2023-5723 issue affects Mozilla Firefox prior to version 119, where an attacker with temporary script access to a site could set a cookie containing invalid characters via document.cookie, potentially causing unknown errors. Public sources in the connected documents consistently reference...

CVE-2017-5386

CVE-2017-5386 : WebExtension scripts can use the data: protocol to affect pages loaded by other web extensions, enabling potential data disclosure or privilege escalation. Public disclosures show the issue affects Mozilla Firefox releases including ESR builds and Firefox versions prior to 51.0.1 ...

CVE-2018-12383

CVE-2018-12383 describes an information disclosure in Thunderbird (and Firefox components) where, if a user saved passwords before migrating to the new password format (pre-Firefox 58) and later set a master password, an unencrypted copy of those passwords could remain accessible because the lega...

CVE-2018-12360

CVE-2018-12360 is a use-after-free vulnerability in Thunderbird (and Firefox components) triggered by deleting an input element during a mutation event handler invoked by focusing that element. Affected versions include Thunderbird before 60 and Thunderbird before 52.9.1; Firefox ESR before 60.1/...

CVE-2025-1937

Memory safety bugs in Firefox and Thunderbird (including ESR versions) can lead to memory corruption . If exploited, these vulnerabilities could allow an attacker to run arbitrary code . This issue affects Firefox versions prior to 136 , Firefox ESR versions prior to 115.21 and 128.8 , Thunderbir...

CVE-2017-5378

CVE-2017-5378 involves hashed codes of JavaScript objects enabling pointer leaks and potential data leakage. The vulnerability affects Mozilla products as noted in connected sources: Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox

CVE-2018-5117

CVE-2018-5117 describes a URL spoofing issue where, when right-to-left text is used in the address bar with left-to-right alignment, the displayed URL can be scrolled to mislead users about the actual site. The vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox

CVE-2018-5125

CVE-2018-5125 is a memory-safety issue reported in Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox

CVE-2022-34482

Summary of CVE-2022-34482 (and related advisories): An attacker could coax a user to drag-and-drop an image to the filesystem, allowing manipulation of the resulting filename to include an executable extension. This could potentially trick the user into executing malicious code. Affected product:...

CVE-2022-46880

CVE-2022-46880 describes a missing check related to tex units that could cause a use-after-free and an exploitable crash. Affected products include Firefox (ESR < 102.6, and Firefox < 105) and Thunderbird

CVE-2025-49709

Mozilla Firefox (including firefox-esr ) is vulnerable to a memory corruption flaw within the CanvasHandler component. The issue is caused by a buffer overflow during certain canvas operations , specifically when writing beyond the buffer limit. If successfully exploited, a remote attacker could ...

CVE-2019-17009

CVE-2019-17009 affects Mozilla Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox

CVE-2016-9899

CVE-2016-9899 describes a use-after-free in Firefox/Thunderbird caused by errors in node adoption handling during DOM event manipulation and audio element removal. Affected: Firefox < 50.1, Firefox ESR < 45.6, Thunderbird

CVE-2018-5097

CVE-2018-5097 is a use-after-free vulnerability in XSL transformations where the source document is manipulated by script content during transformation. Affected products include Mozilla Thunderbird and Firefox variants prior to version 52.6/58, with upstream fixes targeting Thunderbird 52.6.0 (a...

CVE-2022-45410

CVE-2022-45410 : When a ServiceWorker intercepted a request with a FetchEvent, the origin of the request could be lost after the ServiceWorker took ownership, negating SameSite cookie protections. Affected: Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox

CVE-2022-45416

CVE-2022-45416 affects Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox

CVE-2016-9893

CVE-2016-9893 relates to memory safety bugs reported in Thunderbird 45.5, with evidence of memory corruption. Affected products include Firefox <50.1, Firefox ESR <45.6, and Thunderbird

CVE-2018-12385

CVE-2018-12385 describes a potentially exploitable crash in TransportSecurityInfo used for SSL, triggered by data stored in the local cache within the user profile. Affected products include Thunderbird < 60.2.1, Firefox ESR < 60.2.1, and Firefox

CVE-2018-12393

CVE-2018-12393 concerns 32‑bit Firefox builds (not 64‑bit) where an integer overflow during scripts-to-UTF-16 conversion can allocate a too-small buffer, causing an out-of-bounds write. Affected products include Firefox < 63, Firefox ESR < 60.3, and Thunderbird

CVE-2018-5091

CVE-2018-5091 describes a use-after-free in Firefox/Firefox ESR during WebRTC connections when handling DTMF timers, leading to a potentially exploitable crash. Public sources indicate affected products are Firefox ESR versions prior to 52.6 and Firefox prior to 58. Upstream/agency advisories con...

CVE-2021-38510

CVE-2021-38510 describes a Mac‑OS specific flaw where the executable file warning was not shown when downloading .inetloc files, which can cause commands to run on a user’s computer. Affected products and versions from the provided documents: Mozilla Firefox (Mac) < 94, Thunderbird < 91.3, ...

CVE-2022-36320

CVE-2022-36320 involves memory safety bugs found in Firefox 102 that, in some cases, could lead to memory corruption and potentially arbitrary code execution. Affected software: Firefox versions older than 103 (per multiple sources in connected documents). Root cause described as memory safety is...

CVE-2025-3028

The Mozilla Firefox browser and Thunderbird email client are vulnerable to a use-after-free memory corruption issue. The vulnerability exists in the XSLTProcessor component, where JavaScript code running during document transformation can trigger the flaw. A remote attacker could potentially exec...

CVE-2018-5095

CVE-2018-5095 is an integer overflow in the Skia library during edge-builder memory allocation on systems with 8 GB+ RAM, causing uninitialized memory usage and a potentially exploitable crash. Public disclosures show affected products include Thunderbird < 52.6, Firefox ESR < 52.6, and Fir...

CVE-2018-5103

CVE-2018-5103 is a use-after-free vulnerability that can occur during mouse event handling due to multiprocess-related issues, leading to potentially exploitable crashes. Affected products include Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox