CVE-2017-5454

CVE-2017-5454 describes a sandbox escape in Mozilla products where the file picker can be abused via relative paths to read local files. Affected are Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox

CVE-2017-7778

CVE-2017-7778 relates to multiple vulnerabilities in Graphite2 (upstream 1.3.10). The issues include out-of-bounds reads, buffer overflow reads/writes, and use of uninitialized memory in Graphite2, and are addressed by upgrading to Graphite2 1.3.10. Publicly affected products in the CVE record in...

CVE-2019-11695

CVE-2019-11695 affects Mozilla Firefox prior to version 67.0 and is caused by a scripting-defined custom cursor that can position over the address bar, spoofing the real cursor outside the primary web content area. This enables potential user deception (e.g., clicking permission prompts or UI ele...

CVE-2019-9789

CVE-2019-9789 affects Mozilla Firefox before 66.0. The issue stems from memory-safety bugs that can lead to memory corruption, with Mozilla stating these could be exploited to run arbitrary code. The consequence is remote code execution or a browser crash, depending on the specific bug. Mitigatio...

CVE-2020-26962

CVE-2020-26962 affects Mozilla Firefox up to version 82 (Firefox

CVE-2021-23983

Summary: CVE-2021-23983 affects Mozilla Firefox prior to version 87. The issue arises when a transition on a parent node is caused by removing a CSS rule, allowing an invalid property for a marker to be applied, which can lead to memory corruption and a potentially exploitable crash. This vulnera...

CVE-2023-25738

Mozilla Firefox on Windows is affected by CVE-2023-25738, due to unvalidated DEVMODEW members in the printer driver path that could lead to out-of-bounds access. The issue affects Firefox versions earlier than 110 (Thunderbird <102.8, Firefox ESR

CVE-2024-0749

CVE-2024-0749 is confirmed in the connected documents as a phishing dialog issue where an about: dialog could be repurposed to show phishing content with an incorrect origin in the address bar. Affected products are Mozilla Firefox and Thunderbird, with the vulnerability applying to Firefox versi...

CVE-2025-3608

CVE-2025-3608 involves a race condition in Mozilla Firefox’s nsHttpTransaction that can lead to memory corruption and an exploitable condition. Affected product: Firefox versions prior to 137.0.2. The root cause is a competing condition in nsHttpTransaction; impact is described as memory corrupti...

CVE-2014-1479

CVE-2014-1479 affects Mozilla Firefox (including ESR 24.x line), Thunderbird, and SeaMonkey before versions around 27.0/24.x 24.3/SeaMonkey 2.24. The flaw, in the System Only Wrapper (SOW) implementation, does not prevent certain cloning operations, allowing remote attackers to bypass restriction...

CVE-2014-1497

CVE-2014-1497 affects mozilla::WaveReader::DecodeAudioData in Mozilla Firefox up to 28.0 (and ESR 24.x up to 24.4), Thunderbird up to 24.4, and SeaMonkey up to 2.25. A crafted WAV file can cause information disclosure from process heap memory and can trigger a denial of service via an out-of-boun...

CVE-2014-1513

The CVE-2014-1513 issue affects Mozilla Firefox (and related Mozilla suite components) prior to version 28.0, and Firefox ESR 24.x prior to 24.4, with Firefox/SeaMonkey/Thunderbird affecting ArrayBuffer usage. Root cause: TypedArrayObject mishandles a zero-length transition during ArrayBuffer use...

CVE-2014-1530

CVE-2014-1530 affects Mozilla Firefox family components (Firefox before 29.0, ESR 24.x before 24.5, Thunderbird before 24.5, SeaMonkey before 2.26). The issue arises in the docshell loading logic: a crafted site performing history navigation can set a spoofed baseURI, enabling cross-site scriptin...

CVE-2017-7774

CVE-2017-7774 is an out-of-bounds read in graphite2::Silf::readGraphite within the Graphite2 library used by Firefox prior to version 54. Affected component: graphite2 library; affected product is Firefox (pre-54). Root cause: out-of-bounds read in readGraphite. Impact per sources: memory disclos...

CVE-2017-7830

CVE-2017-7830 involves a cross-origin information disclosure through the Resource Timing API that could reveal navigations loaded in iframes, constituting a same-origin policy violation. Public documentation in Debian and CVE databases tie this to WebKit-related handling in Safari/WebKit componen...

CVE-2018-5151

CVE-2018-5151 affects Mozilla Firefox prior to version 60, where memory safety bugs in Firefox 59 could potentially lead to memory corruption and arbitrary code execution. The issue is documented in multiple sources referencing memory safety bugs in Firefox 59 and the impact is limited to Firefox...

CVE-2018-5183

CVE-2018-5183 is a memory corruption vulnerability in Mozilla’s Skia library used by Firefox/Thunderbird ESR 52.x. The issue involves invalid reads/writes during graphic operations and was addressed by backporting changes to Skia, with fixed versions shipped as Thunderbird/Firefox ESR 52.8.0 (and...

CVE-2021-23988

CVE-2021-23988 concerns memory safety bugs in Mozilla Firefox leading to potential memory corruption that could allow execution of arbitrary code. Affected products: Mozilla Firefox versions older than 87. Root cause: memory safety issues reported in Firefox 86 (and Firefox ESR 78.x per MFSA note...

CVE-2021-4129

CVE-2021-4129 is a memory-safety issue originally reported in Firefox 94, affecting Firefox < 95, Firefox ESR < 91.4.0, and Thunderbird

CVE-2022-22736

CVE-2022-22736 concerns Mozilla Firefox prior to 96. It describes a potential local privilege escalation on Windows when Firefox is installed to a world-writable directory or when the install directory is non-default, due to Firefox searching the current directory for system libraries. Affected s...

CVE-2022-22749

CVE-2022-22749 affects Firefox for Android. When scanning QR codes, it could navigate to URLs that do not point to web content. Other OSes are unaffected. Mozilla fixed this as part of MFSA2022-01; remediation is to upgrade to Firefox 96 or newer.

CVE-2023-6861

The CVE-2023-6861 issue is a heap buffer overflow in nsWindow::PickerOpen(void) when Firefox/Thunderbird run in headless mode. Affected products: Firefox ESR <115.6, Thunderbird <115.6, and Firefox

CVE-2025-3029

CVE-2025-3029 describes a URL spoofing vulnerability caused by crafted URLs with specific Unicode characters that can mask the true origin of a page. The advisory text in connected sources confirms affected products include Firefox (versions before 137 and ESR before 128.9) and Thunderbird (versi...

CVE-2012-1972

CVE-2012-1972 is a use-after-free in the nsHTMLEditor::CollapseAdjacentTextNodes function in Mozilla Firefox, with remote code execution/denial of service via heap memory corruption. Affected products/versions include Firefox prior to 15.0, Firefox ESR 10.x prior to 10.0.7, and Thunderbird prior ...

CVE-2014-1482

CVE-2014-1482 affects Mozilla Firefox and related Mozilla products. The issue is that RasterImage.cpp does not prevent access to discarded image data, enabling remote attackers to run arbitrary code or cause a denial of service via crafted image data (Goo Create demonstrated). Affected versions i...

CVE-2016-5296

CVE-2016-5296 is a heap-based buffer overflow in Cairo when processing SVG content, caused by compiler optimization. It affects Mozilla Thunderbird and Firefox/Firefox ESR as described in Mozilla advisories, and is also present in IBM Storwize V7000 Unified (Affecting 1.5.0.0–1.5.2.5; fixed in 1....

CVE-2018-5173

CVE-2018-5173 : In Firefox, the filename shown in the Downloads panel can be spoofed by rendering certain Unicode characters differently, allowing a deception of the file name and potentially masking the extension of executable files. The dialog used to open the file still shows the true filename...

CVE-2019-9803

CVE-2019-9803 affects Mozilla Firefox prior to 66.0. The Upgrade-Insecure-Requests (UIR) mechanism under CSP can fail to upgrade same-origin navigations to HTTPS, potentially enabling MITM on linked resources. Affected component: Firefox browser (versions

CVE-2021-29947

CVE-2021-29947 is a Firefox memory-safety issue reported in Firefox 87 and prior builds, with memory corruption that could potentially allow arbitrary code execution. Connected sources (e.g., Alpine Arch ASA-202104-3, Arch Linux ASA entries, CNVD/CNNVD summaries, and MFSA 2021-16) consistently de...

CVE-2023-28177

CVE-2023-28177 corresponds to memory safety bugs in Firefox 110, with the issue affecting Firefox versions before 111. The supplied documents indicate memory corruption evidence and a theoretical path to arbitrary code execution, though no exploit details are provided. Affected component scope is...

CVE-2023-37211

CVE-2023-37211 involves memory safety bugs in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some bugs show memory corruption and could potentially be exploited to run arbitrary code. Affected versions are Firefox < 115, Firefox ESR < 102.13, and Thunderbird

CVE-2023-6858

CVE-2023-6858 : Firefox was vulnerable to a heap buffer overflow in the nsTextFragment code path due to insufficient OOM handling. Affected products include Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox

CVE-2025-1933

CVE-2025-1933: On 64-bit CPUs, Firefox/Thunderbird JIT compilation of WASM i32 return values may read leftover memory and misclassify the value type. Affects Firefox (including ESR branches) and Thunderbird prior to 136/128.x. Remediation per sources: upgrade to Firefox 136 (and ESR 115.21 / 128....

CVE-2025-1934

CVE-2025-1934 is a Firefox/Thunderbird memory-safety issue caused by interrupting the RegExp bailout, which could trigger garbage collection when not expected. Affected: Firefox before 136, Firefox ESR before 128.8, Thunderbird before 136, and Thunderbird before 128.8. Exploitation status is not ...

CVE-2025-3030

CVE-2025-3030 : Memory safety bugs in Firefox 136/ESR 128.8 and Thunderbird 136/128.8 allow memory corruption; could enable arbitrary code execution if exploited. Affected products include Firefox < 137 and Thunderbird

CVE-2012-3972

CVE-2012-3972 affects the XSLT format-number functionality in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12. The vulnerability allows remote attackers to obtain sensitive information via unspecif...

CVE-2013-0746

CVE-2013-0746 affects Mozilla products including Firefox (before 18.0), Firefox ESR (before 10.0.12 and 17.x before 17.0.2), Thunderbird (before 17.0.2, and ESR 10.x before 10.0.12 and 17.x before 17.0.2), and SeaMonkey (before 2.15). The issue is a quickstubs/jsval return-value handling flaw tha...

CVE-2013-0783

CVE-2013-0783 refers to multiple unspecified vulnerabilities in the Mozilla Firefox browser engine (Firefox <19.0, ESR 17.x <17.0.3, Thunderbird <17.0.3, SeaMonkey

CVE-2017-7772

CVE-2017-7772 describes a heap-based buffer overflow in the Graphite2 library, specifically in lz4::decompress, affecting Firefox prior to 54. The issue is triggered when processing crafted font data, potentially allowing a crash or arbitrary code execution in the context of an application using ...

CVE-2017-7776

Graphite2 (graphite2) contains multiple vulnerabilities including CVE-2017-7776, a heap-based buffer overflow (read) in graphite2::Silf::getClassGlyph, potentially triggering crashes or code execution when processing malformed fonts. This family affects Firefox prior to 54 and various distributio...

CVE-2018-12402

CVE-2018-12402 affects Firefox up to version 62 and concerns the internal WebBrowserPersist code used when saving pages (“Save Page As…”). The vulnerability arises from not using the correct origin context for sub-resources, enabling access to resources that could reveal a visitor’s Windows usern...

CVE-2018-12403

This CVE affects Mozilla Firefox before version 63. The issue arises when a site is loaded over HTTPS but a favicon is loaded over HTTP, causing the mixed-content warning not to display to users. Impact is the missing warning indicator (no direct exploit details provided here). Remediation: upgra...

CVE-2018-12407

CVE-2018-12407 describes a buffer overflow in the ANGLE graphics library used for WebGL content, triggered when drawing/validating elements in the VertexBuffer11 module. Affected software is Mozilla Firefox versions before 64; the vulnerability can lead to a crash and potentially exploitable cond...

CVE-2019-9799

CVE-2019-9799 affects Mozilla Firefox before 66.0. The issue is caused by insufficient bounds checking of data during inter-process communication, which can allow a compromised content process to read memory from the parent process under certain conditions. Connected advisories/plugins corroborat...

CVE-2020-35114

CVE-2020-35114 affects Mozilla Firefox before 84.0. Mozilla reports memory safety bugs in Firefox 83 that could lead to memory corruption and potentially arbitrary code execution; exploitation would require convincing a user to visit a crafted page. Affected products in the provided documents con...

CVE-2021-38494

CVE-2021-38494 maps to memory-safety bugs in Firefox 91 that could be triggered to run arbitrary code. Affected products: Mozilla Firefox earlier than 92. Root cause: memory corruption vulnerabilities disclosed by Mozilla; impact ranges to arbitrary code execution with potential for exploitation ...

CVE-2023-25748

CVE-2023-25748 is a public vulnerability affecting Firefox for Android (not other OSes). The issue arises when a prompt with a long description is displayed, potentially hiding the fullscreen notification and enabling user confusion or spoofing. Connected sources confirm this CVE is fixed in Fire...

CVE-2023-29547

The CVE-2023-29547 issue affects Mozilla Firefox and Firefox-based products: when a secure cookie existed in the Firefox cookie jar, an insecure cookie for the same domain could be created instead of silently failing, causing desynchronization when reading the secure cookie. Affected versions inc...

CVE-2023-34415

Affected software: Mozilla Firefox. Issue: a site-isolation bypass vulnerability where a document loaded from a data: URL that was the result of a redirect could be loaded in the same process as the redirecting site, bypassing Spectre-like protections. Root cause: bypass of site-isolation protect...

CVE-2026-15719

The CVE-2026-15719 entry refers to Firefox Site isolation in the DOM: Navigation component. Publicly disclosed exploit code exists, but none are documented as in-the-wild attacks in the provided sources. Affected software is Firefox; the vulnerability was fixed in Firefox 152.0.6. The Mozilla adv...