CVE-2022-46880

CVE-2022-46880 describes a missing check related to tex units that could cause a use-after-free and an exploitable crash. Affected products include Firefox (ESR < 102.6, and Firefox < 105) and Thunderbird

CVE-2007-3670

CVE-2007-3670 describes an argument-injection vulnerability where Internet Explorer could pass malicious parameters to registered Firefox handlers (FirefoxURL/FirefoxHTML) on Windows, enabling cross-browser scripting and potential remote code execution by exploiting the unescaped URL argument whe...

CVE-2019-17015

CVE-2019-17015 is a Windows-only memory corruption issue during the initialization of a new content process in Mozilla Firefox ESR < 68.4 and Firefox

CVE-2020-6809

CVE-2020-6809 : A WebExtension with the all-urls permission could read local files when it made a fetch with mode 'same-origin', affecting Firefox versions older than 74. Root cause is an escalation of file access in WebExtensions via the all-urls permission. The IBM bulletin confirms the CVE-202...

CVE-2020-6813

CVE-2020-6813 affects Firefox prior to 74, where protecting CSS blocks with the Content Security Policy nonce could be bypassed via an @import in a CSS block, allowing style injection and bypass of CSP intent. The IBM bulletin for IBM Cloud App Management documents this exact CVE and notes the vu...

CVE-2022-46878

CVE-2022-46878 corresponds to memory-safety bugs reported in Thunderbird 102.5 with some cases involving memory corruption; affected products include Firefox < 108, Firefox ESR < 102.6, and Thunderbird

CVE-2025-5020

The CVE-2025-5020 issue affects Firefox for iOS (pre-139). The root cause is that opening maliciously crafted URLs from other apps could allow an attacker to spoof website addresses when the URL uses non-HTTP schemes internal to the Firefox iOS client. The impact is spoofing of website addresses,...

CVE-2017-5373

Summary (CVE-2017-5373) Memory-safety bugs were reported in Firefox 50.1/ESR 45.6 and affect Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox

CVE-2018-5154

CVE-2018-5154 is a use-after-free in the enumeration of attributes during SVG animations with clip paths, causing a potentially exploitable crash. Affected: Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, Firefox ESR

CVE-2023-5723

The CVE-2023-5723 issue affects Mozilla Firefox prior to version 119, where an attacker with temporary script access to a site could set a cookie containing invalid characters via document.cookie, potentially causing unknown errors. Public sources in the connected documents consistently reference...

CVE-2025-4919

CVE-2025-4919 describes an out-of-bounds read/write in JavaScript objects caused by confusing array index sizes, affecting Firefox including aliases (Firefox < 138.0.4, ESR < 128.10.1, ESR < 115.23.1) and Thunderbird (Thunderbird < 128.10.2; Thunderbird

CVE-2021-38499

Affected software: Mozilla Firefox, specifically versions earlier than 93. Root cause: memory safety bugs leading to memory corruption. Impact: could allow remote code execution or a crash; exploitation would require attacker effort or specific conditions as described in the sources. Exploitation...

CVE-2021-38510

CVE-2021-38510 describes a Mac‑OS specific flaw where the executable file warning was not shown when downloading .inetloc files, which can cause commands to run on a user’s computer. Affected products and versions from the provided documents: Mozilla Firefox (Mac) < 94, Thunderbird < 91.3, ...

CVE-2022-31743

CVE-2022-31743 describes a vulnerability in Mozilla Firefox where the HTML parser incorrectly handles HTML comment tags, creating an inconsistency with other browsers. Affected product: Firefox versions earlier than 101.0. The underlying issue is in how HTML comments are interpreted, enabling pot...

CVE-2022-38478

CVE-2022-38478 refers to memory-safety bugs reported by the Mozilla Fuzzing Team affecting Firefox 103, Firefox ESR 102.1, and Firefox ESR 91.12, with potential for memory corruption and, with sufficient effort, arbitrary code execution. Affected products include Thunderbird (versions older than ...

CVE-2022-46877

CVE-2022-46877 describes a fullscreen notification bypass in Firefox prior to version 108, where the fullscreen notification could be delayed or suppressed, potentially allowing user confusion or spoofing. Affected product: Firefox (

CVE-2023-28162

CVE-2023-28162 affects Firefox <111, Firefox ESR <102.9, and Thunderbird

CVE-2023-5732

CVE-2023-5732 affects Firefox (pre-117 and ESR pre-115.4) and Thunderbird (pre-115.4.1). An attacker could craft a link using bidirectional characters to spoof the displayed address in the address bar. Public details in connected advisories confirm this vulnerability and list affected products; r...

CVE-2018-12387

Mozilla Firefox and Firefox ESR are affected by CVE-2018-12387 due to a memory-safety bug in the JavaScript JIT where Array.prototype.push is inlined with multiple arguments, causing the stack pointer to be off by 8 bytes after bailout. This results in a memory address leak to the caller, enablin...

CVE-2022-36314

CVE-2022-36314 affects Firefox on Windows (Windows shortcut handling). A local attacker could induce a user to open a local .lnk that supplies a remote path, causing the OS to make unexpected network requests. Affected: Firefox for Windows; Firefox ESR < 102.1; Firefox < 103; Thunderbird

CVE-2025-49709

The CVE-2025-49709 entry affects Mozilla Firefox versions earlier than 139.0.4. Affected component/issue: certain canvas operations can lead to memory corruption (root cause is stated as memory corruption from canvas processing). Impact is described as high across confidentiality, integrity, and ...

CVE-2026-10702

CVE-2026-10702 relates to a JIT miscompilation in the JavaScript Engine (JIT component) of Firefox. It is fixed in Firefox 151.0.3. The connected documents confirm the affected product as Firefox and the root cause as a JIT miscompilation, with remediation being upgrade to 151.0.3. No exploitatio...

CVE-2017-5402

CVE-2017-5402 is a use-after-free in FontFace event handling that can crash Firefox/Thunderbird when a FontFace object is destroyed but events are fired. Affected products and versions include Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird

CVE-2021-23970

CVE-2021-23970 affects Mozilla Firefox prior to version 86. The issue arises from context-specific code included in a shared jump table, triggering assertions in multithreaded WebAssembly code. Affected product: Firefox (older than 86). Root cause: shared jump-table context-specific code leading ...

CVE-2022-38472

The CVE-2022-38472 issue is a cross-origin spoofing vulnerability where XSLT error handling could allow attacker‑controlled content to be displayed as a different origin in the address bar, potentially tricking users into submitting data to a spoofed site. Affected products/versions (as stated in...

CVE-2018-12361

CVE-2018-12361 is an integer overflow in the SwizzleData code during buffer-size calculation that can lead to a potentially exploitable crash when inputs aren’t sanitized. Affected products include Mozilla Thunderbird before 60 and Firefox family before 61 (Firefox ESR before 60.1). Public remedi...

CVE-2018-12389

CVE-2018-12389 relates to memory safety bugs in Mozilla Firefox ESR 60.x affecting Firefox ESR < 60.3 and Thunderbird

CVE-2018-5168

CVE-2018-5168 is a vulnerability in Thunderbird and Firefox where an attacker can bypass permission checks by manipulating the baseURI of the theme element, enabling a user interaction-free installation of a theme that could contain offensive images. Affected products and versions per the records...

CVE-2023-25728

The CVE-2023-25728 entry describes a CSP-Report-Only header issue where an attacker could leak a child iframe’s unredacted URI during a redirect, affecting Firefox < 110, Thunderbird < 102.8, and Firefox ESR

CVE-2023-25737

CVE-2023-25737 describes an invalid downcast from nsTextNode to SVGElement that could lead to undefined behavior. The vulnerability is observed in Mozilla Firefox (versions before 110), Thunderbird (versions before 102.8), and Firefox ESR (versions before 102.8). Connected advisories consistently...

CVE-2025-1414

CVE-2025-1414 affects Mozilla Firefox earlier than 135.0.1, with memory-safety bugs in Firefox 135 that show evidence of memory corruption and could, with sufficient effort, be exploited to execute arbitrary code. The vulnerability is tied to Firefox’s memory safety issues and impacts versions pr...

CVE-2017-5383

CVE-2017-5383 describes spoofing via specific Unicode glyphs used to alter the location bar content. The initial entry notes impact on Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox

CVE-2020-6808

CVE-2020-6808 affects Mozilla Firefox prior to version 74, where evaluating a javascript: URL that returns a string leads to a parsed HTML document whose origin URL was incorrectly reported as the originating javascript: URL. This could enable spoofing, since the document.location could display t...

CVE-2022-40961

CVE-2022-40961 affects Firefox for Android and is a stack-based buffer overflow during startup caused by a graphics driver with an unexpected name, leading to a potentially exploitable crash. Affected: Firefox

CVE-2014-1510

CVE-2014-1510 is a WebIDL-related remote code execution in Mozilla Firefox family (Firefox, Thunderbird, SeaMonkey) where an IDL fragment can trigger window.open with chrome privileges. Affected products and versions are Mozilla Firefox (pre-28.0 and ESR 24.x before 24.4 for some branches), Thund...

CVE-2016-9904

CVE-2016-9904 describes a timing-attack vulnerability in JavaScript Map/Set usage that can leak information across websites. Affected products include Firefox versions before 50.1, Firefox ESR before 45.6, and Thunderbird before 45.6. The issue enables an attacker to determine if an atom is used ...

CVE-2017-5396

CVE-2017-5396 describes a use-after-free vulnerability in the Media Decoder when handling media files, where certain events fire after the media elements are freed. The initial document indicates affected products include Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox

CVE-2017-5443

The CVE-2017-5443 entry describes an out-of-bounds write during BinHex decoding that affects Mozilla products: Thunderbird before 52.1, Firefox ESR before 52.1, and Firefox before 53. The impact is memory corruption with potential crashes and possible arbitrary code execution. Upstream fixes are ...

CVE-2017-7814

This CVE (CVE-2017-7814) affects Mozilla products (Firefox < 56, Firefox ESR < 52.4, Thunderbird

CVE-2018-12395

CVE-2018-12395 describes a WebExtension domain restrictions bypass via rewriting Host header using the webRequest API. Affected Firefox ESR < 60.3 and Firefox

CVE-2017-7798

The CVE-2017-7798 issue is a XUL injection vulnerability in Firefox Developer Tools (style editor) caused by improper sanitization of the web page source. A malicious page could trigger arbitrary code execution via the style editor, affecting Firefox ESR versions <52.3 and Firefox

CVE-2022-36319

CVE-2022-36319 involves a mouse position spoofing issue caused by combining CSS overflow and transform properties, affecting Firefox ESR and Thunderbird prior to certain fixed versions. Affected are Firefox ESR < 102.1, Firefox ESR < 91.12, Firefox < 103, Thunderbird < 102.1, and Thun...

CVE-2023-6204

CVE-2023-6204 describes an out-of-bounds read that can leak memory data into images created on the canvas element. The issue affects Firefox versions older than 120, Firefox ESR older than 115.5.0, and Thunderbird older than 115.5.0. The available connected advisories corroborate the vulnerabilit...

CVE-2012-5829

CVE-2012-5829 is a heap-based buffer overflow in the nsWindow::OnExposeEvent function affecting Mozilla Firefox before 17.0, Firefox ESR before 10.0.11, Thunderbird before 17.0, Thunderbird ESR before 10.0.11, and SeaMonkey before 2.14. Connected documents confirm this vulnerability across multip...

CVE-2017-7801

CVE-2017-7801 is a use-after-free in marquee layout during window resize that frees the updated style object while still in use, potentially allowing a crash or exploit. Affected products include Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox

CVE-2018-12379

CVE-2018-12379 describes an out-of-bounds write triggered when the Mozilla Updater opens a MAR file containing a very long item filename. This requires that the updater is run locally with the malicious MAR file, potentially allowing a crash exploitable by an attacker. Affected products include F...

CVE-2020-12394

CVE-2020-12394 describes a logic flaw in the Firefox location bar that could allow a local attacker to spoof the current location by selecting a different origin and removing focus from the input. Affected product: Firefox versions prior to 76.0. Root cause: input/origin handling in the address b...

CVE-2021-38505

The CVE describes a Windows 10 Cloud Clipboard issue where copied data could be recorded to the cloud if Cloud Clipboard is enabled. Affected products/versions identified are Firefox before 94, Thunderbird before 91.3, and Firefox ESR before 91.3 on Windows 10+. The root cause is that application...

CVE-2022-31745

CVE-2022-31745 affects Mozilla Firefox older than 101.0. The issue arises when array shift operations are not used, potentially confusing the Garbage Collector about valid objects, leading to memory corruption and a potentially exploitable crash. The CVSS v3.1 base score is 4.3 (Medium). Mitigati...

CVE-2023-32215

CVE-2023-32215 refers to memory-safety bugs in Mozilla Firefox and Firefox ESR (112/ESR 102.10) with potential for arbitrary code execution. Affected are Firefox < 113, Firefox ESR < 102.11, and Thunderbird