2141 matches found
CVE-2012-4217
CVE-2012-4217 is a use-after-free in Mozilla Firefox <17.0, Thunderbird <17.0, and SeaMonkey
CVE-2013-0777
CVE-2013-0777 affects Mozilla Firefox, Thunderbird and SeaMonkey. The related openSUSE security update (openSUSE-SU-2013:0323-1) notes MFSA 2013-28 family fixes for Firefox/Thunderbird/SeaMonkey, including CVE-2013-0777, and lists fixed versions: Firefox 19.0, Thunderbird 17.0.3, SeaMonkey 2.16 (...
CVE-2017-7763
CVE-2017-7763 : On macOS OS X, default fonts render some Tibetan characters as whitespace, enabling spoofing when used in an IDN in the address bar. Affected products/versions (per connected docs): Firefox versions before 54, Firefox ESR before 52.2, and Thunderbird before 52.2. The issue is spec...
CVE-2025-14327
CVE-2025-14327 is a spoofing vulnerability in the Downloads Panel component affecting Firefox < 146, Thunderbird < 146, Firefox ESR < 140.7, and Thunderbird
CVE-2026-12303
The Firefox web browser and Thunderbird email client are affected by an information disclosure vulnerability in the Graphics: WebGPU component. The root cause is incorrect boundary conditions , which allows an attacker to read data from buffer areas beyond the allowed limits and potentially acces...
CVE-2026-12319
The Firefox web browser and Thunderbird email client are affected by a Denial-of-Service (DoS) vulnerability in the Audio/Video: Playback component. The flaw is caused by an uncontrolled consumption of resources , which can allow a remote attacker to trigger service interruptions or cause a servi...
CVE-2026-2769
A use-after-free vulnerability exists in the Storage: IndexedDB component of the Firefox browser and the Thunderbird email client. This flaw occurs because the software uses memory after it has been released, which could allow a remote attacker to induce a service failure . The issue is fixed in ...
CVE-2026-2801
CVE-2026-2801 concerns an issue in the JavaScript: WebAssembly component where incorrect boundary conditions were present. Affected software includes Mozilla Firefox and Mozilla Thunderbird; reports indicate the problem was fixed in Firefox 148 and Thunderbird 148. Some sources also reference Thu...
CVE-2017-5471
Summary (CVE-2017-5471): Firefox
CVE-2026-0885
A use-after-free vulnerability exists in the JavaScript: GC component of the Mozilla Firefox and Thunderbird products. This memory safety issue can allow a remote attacker to execute arbitrary code on the affected system. The vulnerability affects versions of Firefox earlier than 147 and Firefox ...
CVE-2026-2771
CVE-2026-2771 is an undefined-behavior vulnerability in the DOM: Core & HTML component of Mozilla Firefox/Thunderbird family that was fixed in Firefox 148, Firefox ESR 115.33 and 140.8, Thunderbird 148 and 140.8. The issue is reported across multiple advisories (Astra Linux bulletin and Amazon Li...
CVE-2026-2790
CVE-2026-2790 is a same-origin policy bypass in the Networking: JAR component affecting Firefox and Thunderbird. Connected sources confirm the issue and its remediation: Firefox versions 148 and ESR 140.8, as well as Thunderbird 148 and 140.8, include the fix. Astra Linux bulletin also cites the ...
CVE-2026-2794
CVE-2026-2794: Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android. Affected: Firefox/Firefox Focus for Android; root cause is uninitialized memory. Status: fixed in Firefox 148.0. Remediation: upgrade to Firefox 148 or later (per Mozilla advisory). Practic...
CVE-2026-2799
CVE-2026-2799 is a use-after-free vulnerability in the DOM: Core & HTML components of Mozilla Firefox and Thunderbird. The issue, identified across multiple advisories, is resolved in Firefox 148 and Thunderbird 148. Public exploit activity is noted in connected sources. Affected products include...
CVE-2026-5734
CVE-2026-5734 involves memory safety bugs in Mozilla products. Affected: Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1, and Thunderbird 149.0.1. Some bugs show memory corruption and could potentially be exploited to run arbitrary code. The issue is addressed by fixes in Firefox 14...
CVE-2026-6775
The WebRTC component in Mozilla Firefox and Mozilla Thunderbird is vulnerable to incorrect boundary conditions, specifically involving the execution of operations outside of the buffer in memory. This vulnerability could allow an attacker to gain unauthorized access to protected information . The...
CVE-2026-8961
A spoofing issue exists in the Form Autofill component of the Firefox web browser and the Thunderbird email client. This vulnerability allows a malicious actor to potentially compromise data integrity and may facilitate authentication bypass through spearfishing . The issue is fixed in Firefox 15...
CVE-2026-8963
The Firefox web browser and Thunderbird email client are vulnerable to a spoofing issue within the Web Speech component. This flaw allows an attacker to bypass authentication through spoofing, potentially leading to a compromise of data integrity . The vulnerability has been addressed in Firefox ...
CVE-2026-8968
A Denial-of-Service (DoS) vulnerability exists in the Audio/Video: Web Codecs component due to an invalid pointer . This flaw can lead to service interruptions or program crashes. The vulnerability affects the Firefox web browser and Thunderbird email client. Remediation is available in Firefox 1...
CVE-2026-8972
The WebRTC: Audio/Video component in the Mozilla Firefox web browser and Mozilla Thunderbird email client is affected by a privilege escalation vulnerability caused by insecure privilege management . A remote attacker could exploit this flaw to cause service interruptions or achieve elevated priv...
CVE-2026-92011
The Graphics: CanvasWebGL component in Mozilla Firefox and Mozilla Thunderbird is vulnerable to privilege escalation due to incorrect boundary conditions . This security flaw affects multiple versions, including Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 1...
CVE-2026-92029
A use-after-free vulnerability exists in the SVG component of Mozilla Firefox and Mozilla Thunderbird . This flaw can potentially lead to memory corruption or execution flow issues. Affected versions include various releases, and the vulnerability has been addressed in Firefox 156 , Firefox ESR 1...
CVE-2026-92076
CVE-2026-92076 is a vulnerability in the Networking component of Firefox and Thunderbird caused by incorrect boundary conditions . The issue has been addressed in Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbird 153.3 . While the initial description notes the Networking compone...
CVE-2026-9309
The Firefox for iOS Reader View fails to properly escape HTML tags in JSON-LD metadata , allowing a malicious page to inject markup. This injection can alter Reader View behavior and leak sensitive URL parameters , which may be leveraged to access internal pages. This could potentially result in ...
CVE-2025-23108
The Firefox iOS client is vulnerable to a flaw where opening Javascript links in a new tab via a long-press allows a malicious script to spoof the URL of the new tab. This issue specifically affects versions prior to Firefox for iOS 134 . Attackers can also leverage long hostnames in URLs to obsc...
CVE-2026-24868
Mozilla Firefox is affected by a mitigation bypass vulnerability in the Privacy: Anti-Tracking component. This flaw allows a remote attacker to bypass security restrictions and compromise the integrity of protected information by violating data protection mechanisms. The vulnerability is present ...
CVE-2026-2787
CVE-2026-2787 is a use-after-free in the DOM: Window and Location component, with fixes in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. Connected sources corroborate the issue in Firefox-related components and list the affected products as Firefox/Th...
CVE-2026-4688
CVE-2026-4688 describes a sandbox escape caused by a use-after-free in the Disability Access APIs component. The vulnerability affects Firefox versions prior to 149 and Firefox ESR versions prior to 140.9. The available documents do not provide exploit details or specific remediation steps beyond...
CVE-2026-92026
A use-after-free vulnerability exists in the Networking component of the Mozilla Firefox and Thunderbird applications. This issue is addressed in the following versions: Firefox 156 , Firefox ESR 140.16 , Firefox ESR 153.3 , Thunderbird 156 , Thunderbird 140.16 , and Thunderbird 153.3 . No specif...
CVE-2011-2670
CVE-2011-2670 affects Mozilla Firefox prior to 3.6. The vulnerability arises in the rendering of Cascading Style Sheets (CSS), enabling cross-site scripting (XSS). The impact per sources is arbitrary script execution in the affected browser. Affected product/version: Firefox
CVE-2017-5463
CVE-2017-5463 affects Firefox for Android prior to version 53.0. The issue arises when Android intents can launch Firefox in reader mode with a user-supplied URL, allowing spoofing of the address bar contents shown to users. Public details in the provided sources confirm the affected product (Fir...
CVE-2017-7755
CVE-2017-7755 affects Mozilla Firefox and Thunderbird installers on Windows. The Firefox installer can be made to load malicious DLLs stored in the same directory as the installer, enabling privilege escalation when the installer runs with elevated privileges. Affected products/versions include F...
CVE-2025-13013
A mitigation bypass vulnerability exists in the DOM: Core & HTML component of Mozilla Firefox and Thunderbird . This flaw in the data protection mechanisms allows an attacker to bypass existing security restrictions remotely. Affected versions include Firefox < 145 , Firefox ESR < 140.5 , a...
CVE-2025-14322
A sandbox escape vulnerability exists in the Graphics: CanvasWebGL component of Mozilla Firefox and Thunderbird due to incorrect boundary conditions and insufficient checking of unusual states. This flaw allows a remote attacker to bypass sandboxing protection mechanisms. Affected versions includ...
CVE-2026-0878
Mozilla Firefox , Firefox ESR , and Thunderbird are vulnerable to a sandbox escape caused by incorrect boundary conditions in the Graphics:CanvasWebGL component. An attacker could exploit this vulnerability to execute arbitrary code on the system or cause the application to crash. The issue is ad...
CVE-2026-2762
CVE-2026-2762 is an integer overflow in the JavaScript: Standard Library component that affects Firefox (non-ESR) and related Mozilla products. The issue is confirmed fixed in Firefox 148 and Firefox ESR 140.8, as well as Thunderbird 148 and Thunderbird 140.8. Connected advisories (Astra Linux bu...
CVE-2026-2773
CVE-2026-2773 is a Chrome-like vulnerability in Firefox’s Web Audio component caused by incorrect boundary conditions, fixed in Firefox 148 and corresponding ESR releases (ESR 115.33 and ESR 140.8). The issue is documented across multiple advisories (Firefox security notes and vendor feeds) and i...
CVE-2026-2789
CVE-2026-2789 — Use-after-free in Graphics: ImageLib Affected software: Mozilla Firefox (and Firefox ESR) and Thunderbird. The vulnerability arises from a use-after-free in the Graphics: ImageLib component. Affected versions are fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunder...
CVE-2026-4701
CVE-2026-4701 is a use-after-free vulnerability in the JavaScript Engine. It affects Firefox and Thunderbird products and is fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. Exploitation status is not provided in the connected documents.
CVE-2026-4719
CVE-2026-4719 is a vulnerability described as incorrect boundary conditions in the Graphics: Text component. The connected advisories show affected products as Firefox (and Firefox ESR) and Thunderbird, with fixes implemented in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140...
CVE-2026-8966
The IP Protection component in Mozilla Firefox and Mozilla Thunderbird is vulnerable to an information disclosure flaw. This vulnerability allows a remote attacker to potentially gain access to confidential data . The issue has been addressed in Firefox 151 and Thunderbird 151 . No specific explo...
CVE-2026-92039
A mitigation bypass exists in the DOM: Notifications component of the Mozilla Firefox browser and Thunderbird. This vulnerability was addressed in Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbird 153.3 . No specific details regarding the root cause or exploit vectors are provid...
CVE-2026-92078
A Denial-of-Service vulnerability exists in the Security component of Mozilla Firefox and Thunderbird . This issue has been addressed in Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbird 153.3 . No specific root cause or exploit information is provided in the documentation.
CVE-2012-3983
CVE-2012-3983 affects Mozilla Firefox (pre-16.0), Thunderbird (pre-16.0), and SeaMonkey (pre-2.13). Reported memory safety vulnerabilities could cause memory corruption and crashes and potentially allow arbitrary code execution via unknown vectors. Remediation evidenced in connected documents inc...
CVE-2017-7765
CVE-2017-7765 corresponds to a Mark of the Web bypass on Windows when saving files with very long names, bypassing the security warning before running downloaded executables. Affected products include Firefox < 54, Firefox ESR < 52.2, and Thunderbird
CVE-2026-100785
A use-after-free vulnerability exists in the DOM: Core & HTML component of the Firefox browser. This flaw was addressed in various releases, including Firefox ESR 153.4 , Firefox 157 , Firefox ESR 115.42 , and Firefox ESR 140.17 . While the specific root cause is not detailed beyond the memory sa...
CVE-2026-100816
A site isolation issue exists in the DOM: Networking component of Mozilla products. This vulnerability affects Firefox ESR 153.4 , Thunderbird 157 , Thunderbird 153.4 , and Firefox 157 . The issue has been addressed in these specific versions. No specific exploit details or in-the-wild exploitati...
CVE-2026-12323
The Firefox web browser and Thunderbird email client are affected by a DOM spoofing issue within the Core & HTML components. The root cause is attributed to improper restrictions on the visible layers of the user interface , which could allow a remote attacker to trigger service interruptions . R...
CVE-2026-2759
The CVE-2026-2759 issue is concrete: it concerns incorrect boundary conditions in the Graphics: ImageLib component affecting Firefox/Thunderbird products. The description explicitly states the vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thun...