CVE-2019-17015

CVE-2019-17015 is a Windows-only memory corruption issue during the initialization of a new content process in Mozilla Firefox ESR < 68.4 and Firefox

CVE-2020-12390

CVE-2020-12390 affects Firefox versions prior to 76. The root cause is incorrect origin serialization of URLs containing IPv6 addresses, which could cause security checks to be bypassed or misjudged. The vulnerability is documented in Mozilla advisory mfsa2020-16 and related bug reports, with pub...

CVE-2020-6810

Technical details beyond the high-level description (Firefox

CVE-2022-46880

CVE-2022-46880 describes a missing check related to tex units that could cause a use-after-free and an exploitable crash. Affected products include Firefox (ESR < 102.6, and Firefox < 105) and Thunderbird

CVE-2022-46881

CVE-2022-46881 is a memory safety issue in WebGL where an optimization could cause memory corruption and a potentially exploitable crash. Affected products per provided sources are Firefox releases before 106, Firefox ESR before 102.6, and Thunderbird before 102.6. The root cause is a WebGL optim...

CVE-2017-5373

Summary (CVE-2017-5373) Memory-safety bugs were reported in Firefox 50.1/ESR 45.6 and affect Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox

CVE-2018-12396

CVE-2018-12396 is a Mozilla Firefox/Firefox ESR vulnerability where a WebExtension can run content scripts in disallowed contexts after certain navigation/events, enabling potential privilege escalation on sites where such scripts shouldn’t run. Multiple connected advisories confirm the issue and...

CVE-2020-6809

CVE-2020-6809 : A WebExtension with the all-urls permission could read local files when it made a fetch with mode 'same-origin', affecting Firefox versions older than 74. Root cause is an escalation of file access in WebExtensions via the all-urls permission. The IBM bulletin confirms the CVE-202...

CVE-2021-38510

CVE-2021-38510 describes a Mac‑OS specific flaw where the executable file warning was not shown when downloading .inetloc files, which can cause commands to run on a user’s computer. Affected products and versions from the provided documents: Mozilla Firefox (Mac) < 94, Thunderbird < 91.3, ...

CVE-2023-5723

The CVE-2023-5723 issue affects Mozilla Firefox prior to version 119, where an attacker with temporary script access to a site could set a cookie containing invalid characters via document.cookie, potentially causing unknown errors. Public sources in the connected documents consistently reference...

CVE-2007-3670

CVE-2007-3670 describes an argument-injection vulnerability where Internet Explorer could pass malicious parameters to registered Firefox handlers (FirefoxURL/FirefoxHTML) on Windows, enabling cross-browser scripting and potential remote code execution by exploiting the unescaped URL argument whe...

CVE-2016-9900

CVE-2016-9900 describes that data: URLs used by SVG images can bypass security restrictions, enabling cross-domain data leakage. Affected products include Mozilla Firefox (non-ESR) prior to 50.1, Firefox ESR prior to 45.6, and Thunderbird prior to 45.6. Root cause is the handling of external reso...

CVE-2018-5154

CVE-2018-5154 is a use-after-free in the enumeration of attributes during SVG animations with clip paths, causing a potentially exploitable crash. Affected: Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, Firefox ESR

CVE-2021-38499

Affected software: Mozilla Firefox, specifically versions earlier than 93. Root cause: memory safety bugs leading to memory corruption. Impact: could allow remote code execution or a crash; exploitation would require attacker effort or specific conditions as described in the sources. Exploitation...

CVE-2023-5173

CVE-2023-5173 affects Firefox in non-standard configurations where the non-HTTPS Alternate Services preference is enabled (network.http.altsvc.oe). The issue is an integer overflow that can cause an out-of-bounds write into privileged process memory, with impact described as high and specific to ...

CVE-2023-5732

CVE-2023-5732 affects Firefox (pre-117 and ESR pre-115.4) and Thunderbird (pre-115.4.1). An attacker could craft a link using bidirectional characters to spoof the displayed address in the address bar. Public details in connected advisories confirm this vulnerability and list affected products; r...

CVE-2025-5020

The CVE-2025-5020 issue affects Firefox for iOS (pre-139). The root cause is that opening maliciously crafted URLs from other apps could allow an attacker to spoof website addresses when the URL uses non-HTTP schemes internal to the Firefox iOS client. The impact is spoofing of website addresses,...

CVE-2022-40961

CVE-2022-40961 affects Firefox for Android and is a stack-based buffer overflow during startup caused by a graphics driver with an unexpected name, leading to a potentially exploitable crash. Affected: Firefox

CVE-2022-46878

CVE-2022-46878 corresponds to memory-safety bugs reported in Thunderbird 102.5 with some cases involving memory corruption; affected products include Firefox < 108, Firefox ESR < 102.6, and Thunderbird

CVE-2023-25728

The CVE-2023-25728 entry describes a CSP-Report-Only header issue where an attacker could leak a child iframe’s unredacted URI during a redirect, affecting Firefox < 110, Thunderbird < 102.8, and Firefox ESR

CVE-2017-5402

CVE-2017-5402 is a use-after-free in FontFace event handling that can crash Firefox/Thunderbird when a FontFace object is destroyed but events are fired. Affected products and versions include Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird

CVE-2018-12361

CVE-2018-12361 is an integer overflow in the SwizzleData code during buffer-size calculation that can lead to a potentially exploitable crash when inputs aren’t sanitized. Affected products include Mozilla Thunderbird before 60 and Firefox family before 61 (Firefox ESR before 60.1). Public remedi...

CVE-2018-12387

Mozilla Firefox and Firefox ESR are affected by CVE-2018-12387 due to a memory-safety bug in the JavaScript JIT where Array.prototype.push is inlined with multiple arguments, causing the stack pointer to be off by 8 bytes after bailout. This results in a memory address leak to the caller, enablin...

CVE-2018-12395

CVE-2018-12395 describes a WebExtension domain restrictions bypass via rewriting Host header using the webRequest API. Affected Firefox ESR < 60.3 and Firefox

CVE-2018-5168

CVE-2018-5168 is a vulnerability in Thunderbird and Firefox where an attacker can bypass permission checks by manipulating the baseURI of the theme element, enabling a user interaction-free installation of a theme that could contain offensive images. Affected products and versions per the records...

CVE-2022-31743

CVE-2022-31743 describes a vulnerability in Mozilla Firefox where the HTML parser incorrectly handles HTML comment tags, creating an inconsistency with other browsers. Affected product: Firefox versions earlier than 101.0. The underlying issue is in how HTML comments are interpreted, enabling pot...

CVE-2022-38478

CVE-2022-38478 refers to memory-safety bugs reported by the Mozilla Fuzzing Team affecting Firefox 103, Firefox ESR 102.1, and Firefox ESR 91.12, with potential for memory corruption and, with sufficient effort, arbitrary code execution. Affected products include Thunderbird (versions older than ...

CVE-2025-4919

CVE-2025-4919 describes an out-of-bounds read/write in JavaScript objects caused by confusing array index sizes, affecting Firefox including aliases (Firefox < 138.0.4, ESR < 128.10.1, ESR < 115.23.1) and Thunderbird (Thunderbird < 128.10.2; Thunderbird

CVE-2020-6808

CVE-2020-6808 affects Mozilla Firefox prior to version 74, where evaluating a javascript: URL that returns a string leads to a parsed HTML document whose origin URL was incorrectly reported as the originating javascript: URL. This could enable spoofing, since the document.location could display t...

CVE-2022-34482

Summary of CVE-2022-34482 (and related advisories): An attacker could coax a user to drag-and-drop an image to the filesystem, allowing manipulation of the resulting filename to include an executable extension. This could potentially trick the user into executing malicious code. Affected product:...

CVE-2022-36314

CVE-2022-36314 affects Firefox on Windows (Windows shortcut handling). A local attacker could induce a user to open a local .lnk that supplies a remote path, causing the OS to make unexpected network requests. Affected: Firefox for Windows; Firefox ESR < 102.1; Firefox < 103; Thunderbird

CVE-2020-26964

Summary (CVE-2020-26964) : This vulnerability concerns Firefox for Android prior to Android 6.0 where the Remote Debugging via USB feature could be accessed by untrusted apps via a UNIX domain socket. The SELinux protection for this socket was not enforced on older Android versions, allowing the ...

CVE-2022-46877

CVE-2022-46877 describes a fullscreen notification bypass in Firefox prior to version 108, where the fullscreen notification could be delayed or suppressed, potentially allowing user confusion or spoofing. Affected product: Firefox (

CVE-2023-28162

CVE-2023-28162 affects Firefox <111, Firefox ESR <102.9, and Thunderbird

CVE-2025-1414

CVE-2025-1414 affects Mozilla Firefox earlier than 135.0.1, with memory-safety bugs in Firefox 135 that show evidence of memory corruption and could, with sufficient effort, be exploited to execute arbitrary code. The vulnerability is tied to Firefox’s memory safety issues and impacts versions pr...

CVE-2016-9904

CVE-2016-9904 describes a timing-attack vulnerability in JavaScript Map/Set usage that can leak information across websites. Affected products include Firefox versions before 50.1, Firefox ESR before 45.6, and Thunderbird before 45.6. The issue enables an attacker to determine if an atom is used ...

CVE-2017-5383

CVE-2017-5383 describes spoofing via specific Unicode glyphs used to alter the location bar content. The initial entry notes impact on Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox

CVE-2017-5396

CVE-2017-5396 describes a use-after-free vulnerability in the Media Decoder when handling media files, where certain events fire after the media elements are freed. The initial document indicates affected products include Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox

CVE-2017-5443

The CVE-2017-5443 entry describes an out-of-bounds write during BinHex decoding that affects Mozilla products: Thunderbird before 52.1, Firefox ESR before 52.1, and Firefox before 53. The impact is memory corruption with potential crashes and possible arbitrary code execution. Upstream fixes are ...

CVE-2017-5447

CVE-2017-5447 is an out-of-bounds read in glyph widths processing during text layout that can cause a crash and potentially expose memory. Affected products include Mozilla Thunderbird (<52.1) and Mozilla Firefox/Firefox ESR (ESR <52.1; Firefox

CVE-2018-12389

CVE-2018-12389 relates to memory safety bugs in Mozilla Firefox ESR 60.x affecting Firefox ESR < 60.3 and Thunderbird

CVE-2023-32215

CVE-2023-32215 refers to memory-safety bugs in Mozilla Firefox and Firefox ESR (112/ESR 102.10) with potential for arbitrary code execution. Affected are Firefox < 113, Firefox ESR < 102.11, and Thunderbird

CVE-2017-7801

CVE-2017-7801 is a use-after-free in marquee layout during window resize that frees the updated style object while still in use, potentially allowing a crash or exploit. Affected products include Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox

CVE-2018-12379

CVE-2018-12379 describes an out-of-bounds write triggered when the Mozilla Updater opens a MAR file containing a very long item filename. This requires that the updater is run locally with the malicious MAR file, potentially allowing a crash exploitable by an attacker. Affected products include F...

CVE-2018-5125

CVE-2018-5125 is a memory-safety issue reported in Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox

CVE-2019-17025

CVE-2019-17025 is a Firefox memory-safety vulnerability affecting Firefox prior to 72.0. Connected advisories enumerate multiple memory-corruption–related issues in Firefox 71 that Mozilla presumes could be exploited to run arbitrary code. The Arch Linux advisory additionally details several rela...

CVE-2021-23970

CVE-2021-23970 affects Mozilla Firefox prior to version 86. The issue arises from context-specific code included in a shared jump table, triggering assertions in multithreaded WebAssembly code. Affected product: Firefox (older than 86). Root cause: shared jump-table context-specific code leading ...

CVE-2025-49709

The CVE-2025-49709 entry affects Mozilla Firefox versions earlier than 139.0.4. Affected component/issue: certain canvas operations can lead to memory corruption (root cause is stated as memory corruption from canvas processing). Impact is described as high across confidentiality, integrity, and ...

CVE-2012-5829

CVE-2012-5829 is a heap-based buffer overflow in the nsWindow::OnExposeEvent function affecting Mozilla Firefox before 17.0, Firefox ESR before 10.0.11, Thunderbird before 17.0, Thunderbird ESR before 10.0.11, and SeaMonkey before 2.14. Connected documents confirm this vulnerability across multip...

CVE-2020-12394

CVE-2020-12394 describes a logic flaw in the Firefox location bar that could allow a local attacker to spoof the current location by selecting a different origin and removing focus from the input. Affected product: Firefox versions prior to 76.0. Root cause: input/origin handling in the address b...