CVE-2006-0297

CVE-2006-0297 involves integer overflow vulnerabilities in Mozilla-based products. Affects Mozilla Firefox 1.5, Thunderbird 1.5, and SeaMonkey before 1.0 when JavaScript is enabled in mail. The issues stem from three vulnerable code paths: (1) EscapeAttributeValue in jsxml.c (E4X), (2) nsSVGCairo...

CVE-2009-1306

CVE-2009-1306 affects Mozilla Firefox (before 3.0.9), Thunderbird, and SeaMonkey due to an improper handling of the Content-Disposition header in inner jar: URIs. The inner URI’s Content-Disposition: attachment can enable remote XSS and possibly other attacks when a malicious .jar is uploaded. Co...

CVE-2010-2767

CVE-2010-2767 is a dangling-pointer vulnerability in Mozilla’s navigator.plugins handling. The issue occurs when the DOM plugin array is destroyed but a pointer to it remains, potentially allowing a remote attacker to crash the browser or execute arbitrary code. Affected products and versions (pe...

CVE-2012-0445

Vulnerability summary: Mozilla Firefox 4.x–9.0, Thunderbird 5.0–9.0, and SeaMonkey

CVE-2012-3978

CVE-2012-3978 affects Mozilla Firefox (and related Mozilla components) where nsLocation::CheckURL does not properly follow the location object security model, enabling remote attackers to bypass content-loading restrictions via chrome code vectors. MiracleLinux advisories list this as part of mul...

CVE-2013-1722

CVE-2013-1722 describes a use-after-free in nsAnimationManager::BuildAnimations within the Mozilla Firefox animation system. The vulnerability affects Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.2...

CVE-2013-5599

CVE-2013-5599 is a use-after-free vulnerability in the PresShell path: nsIPresShell::GetPresContext in Mozilla Firefox before 25.0 (and related ESR/Thunderbird/SeaMonkey branches) that can be triggered via a CANVAS element, a mozTextStyle attribute, and an onresize event. The underlying issue is ...

CVE-2013-5604

CVE-2013-5604 affects the XSLT processor in Mozilla Firefox (and related Mozilla components) where txXPathNodeUtils::getBaseURI does not initialize data properly. This allows remote attackers to execute arbitrary code or cause a denial of service via crafted documents, including stack-based buffe...

CVE-2017-5451

CVE-2017-5451 describes an address bar spoofing vulnerability via the onblur event, enabling a script to affect text display and make the loaded site appear different from what’s in the address bar. The issue affects Mozilla products including Thunderbird < 52.1, Firefox ESR < 52.1, and Fir...

CVE-2017-5467

CVE-2017-5467 affects Mozilla Firefox and Thunderbird, with memory corruption when drawing Skia content outside the clipping region. Affected: Firefox (<53) and Thunderbird (

CVE-2017-7751

CVE-2017-7751 is a use-after-free vulnerability in Mozilla Firefox and Thunderbird associated with content viewer listeners, affecting Firefox versions before 54, ESR before 52.2, and Thunderbird before 52.2. The underlying issue is a memory safety flaw that can lead to a potentially exploitable ...

CVE-2018-18499

CVE-2018-18499 is a same-origin policy vulnerability in Mozilla Firefox and Thunderbird where a page using a meta http-equiv="refresh" redirects to another site and allows theft of cross-origin URL entries via performance.getEntries(). Affected: Firefox < 62, Firefox ESR < 60.2, Thunderbird

CVE-2023-37207

The provided connected documents confirm CVE-2023-37207 affects Firefox and Thunderbird (Firefox < 115, ESR < 102.13, Thunderbird

CVE-2025-2817

The CVE-2025-2817 issue describes a vulnerability in Thunderbird’s update mechanism where a medium-integrity user process could interfere with the SYSTEM updater by manipulating file-locking, enabling privilege escalation via code injection into a user-privileged process. Affected products includ...

CVE-2008-2785

The CVE-2008-2785 issue affects Mozilla Firefox (before 2.0.0.16 and 3.x before 3.0.1), Thunderbird (before 2.0.0.16), and SeaMonkey (before 1.1.11). It stems from using an incorrect integer data type as the CSS object reference counter in the CSSValue array (nsCSSValue:Array) data structure, all...

CVE-2009-0352

CVE-2009-0352 affects Mozilla Firefox 3.x <= 3.0.5, Mozilla Thunderbird <= 2.0.0.20, and SeaMonkey

CVE-2010-2769

CVE-2010-2769 is a cross-site scripting (XSS) vulnerability affecting Mozilla Firefox (before 3.5.12 and 3.6.x before 3.6.9), Thunderbird (before 3.0.7 and 3.1.x before 3.1.3), and SeaMonkey (before 2.0.7). The issue arises when a selection is added to a document with designMode enabled, allowing...

CVE-2010-3167

CVE-2010-3167 : The nsTreeContentView in Mozilla Firefox (before 3.5.12 and 3.6.x before 3.6.9), Thunderbird (before 3.0.7 and 3.1.x before 3.1.3), and SeaMonkey (before 2.0.7) contains a dangling-pointer vulnerability in XUL trees when removing nodes. This could allow remote attackers to execute...

CVE-2011-3005

CVE-2011-3005 is a use-after-free in Mozilla Firefox (4.x–6) that can be triggered via crafted OGG headers in a .ogg file, potentially leading to remote code execution or a crash. Affected products/versions include Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4. Root caus...

CVE-2011-3659

CVE-2011-3659 is a use-after-free in Mozilla Firefox (before 3.6.26 and 4.x through 9.0), Thunderbird (before 3.1.18 and 5.0 through 9.0), and SeaMonkey (before 2.7). The root cause is premature notification of AttributeChildRemoved that affects access to removed nsDOMAttribute child nodes, enabl...

CVE-2013-0776

CVE-2013-0776 affects Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16. The flaw allows a man-in-the-middle attacker to spoof the address bar by using a proxy server that returns a 407 HTTP status...

CVE-2013-1674

CVE-2013-1674 is a use-after-free vulnerability in Mozilla Firefox (and related Thunderbird components) that can be triggered by an onresize event during video playback, allowing remote code execution. Affected products include Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderb...

CVE-2013-1692

CVE-2013-1692 affects Mozilla Firefox (including ESR 17.x) before 22.0 and Thunderbird before 17.0.7. The vulnerability arises from not preventing body data in an XMLHttpRequest HEAD request, enabling CSRF via crafted sites. MiracleLinux/MiracleLinux AXSA advisories map this vulnerability to Fire...

CVE-2013-1730

CVE-2013-1730 affects Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0/ESR 17.x before 17.0.9, and SeaMonkey before 2.21. A crafted web site can move XBL-backed nodes across documents, enabling remote code execution or a denial of service (JavaScript compartmen...

CVE-2014-1576

CVE-2014-1576 is a heap-based buffer overflow in nsTransformedTextRun used when parsing CSS token sequences that trigger capitalization changes in Mozilla Firefox

CVE-2014-1590

CVE-2014-1590 affects Mozilla Firefox (before 34.0), Firefox ESR (31.x before 31.3), Thunderbird (before 31.3), and SeaMonkey (before 2.31). The issue is a denial of service caused by an error when passing a crafted JavaScript object to XMLHttpRequest.prototype.send. Remediation is to upgrade to ...

CVE-2015-2710

CVE-2015-2710 is a memory-safety vulnerability in Mozilla Firefox and Thunderbird where the SVGTextFrame handles crafted SVG/CSS data, causing a heap-based buffer overflow. A remote attacker could potentially execute arbitrary code by enticing a user to open specially crafted content. The issue a...

CVE-2018-5144

CVE-2018-5144 describes an integer overflow during Unicode text conversion caused by an unchecked length parameter. Affected products: Firefox ESR and Thunderbird (pre-52.7). Root cause: overflow during Unicode conversion. Impact: potential remote code execution or memory issues as implied by the...

CVE-2009-3983

CVE-2009-3983 affects Mozilla Firefox before 3.0.16 and Firefox 3.5.x before 3.5.6, and SeaMonkey before 2.0.1. The issue allows remote attackers to replay NTLM credentials from a browser user, enabling authenticated requests to arbitrary applications. The vulnerability is described as a credenti...

CVE-2010-1196

CVE-2010-1196 is a heap-based buffer overflow triggered by an integer overflow in nsGenericDOMDataNode::SetTextInternal. Affected products include Mozilla Firefox 3.5.x before 3.5.10, Firefox 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5, allowing remote code execution ...

CVE-2010-3174

CVE-2010-3174 is a memory-safety/remote-code issue described in MFSA 2010-64 affecting the Mozilla browser engine. Public data ties the CVE to Firefox (and related Mozilla-based products) versions around the 3.x line; the initial entry notes Firefox 3.5.x before 3.5.14, Thunderbird before 3.0.9, ...

CVE-2011-0069

CVE-2011-0069 affects Mozilla Firefox 3.5.x prior to 3.5.19, Firefox 3.6.x prior to 3.6.17, and Firefox 4.x prior to 4.0.1; Thunderbird prior to 3.1.10; and SeaMonkey prior to 2.0.14. The issue is an unspecified vulnerability in the browser engine that can cause memory corruption, leading to a de...

CVE-2012-3982

CVE-2012-3982 affects Mozilla Firefox before 16.0, Firefox ESR before 10.0.8, Thunderbird before 16.0, Thunderbird ESR before 10.0.8, and SeaMonkey before 2.13. The description notes multiple unspecified vulnerabilities in the browser engine that can cause memory corruption and application crashe...

CVE-2013-0793

CVE-2013-0793 affects Mozilla Firefox family (Firefox, Firefox ESR, Thunderbird, SeaMonkey) and related XUL/XPCOM runtimes where the address bar could be manipulated during history navigation, enabling cross-site scripting (XSS) or phishing by timing navigation. Affected products in scope include...

CVE-2013-1676

CVE-2013-1676 affects Mozilla Firefox prior to 21.0, Firefox ESR 17.x prior to 17.0.6, Thunderbird prior to 17.0.6, and Thunderbird ESR 17.x prior to 17.0.6. The flaw is in SelectionIterator::GetNextSegment and is exploitable via unspecified vectors to trigger remote code execution or a denial of...

CVE-2014-1529

CVE-2014-1529 affects Mozilla Firefox and related Mozilla products (Firefox before 29.0, ESR 24.x before 24.5, Thunderbird before 24.5, SeaMonkey before 2.26). The Web Notification API vulnerability allows remote attackers to bypass source-component restrictions and run arbitrary JavaScript in a ...

CVE-2006-0294

Affected software: Mozilla Firefox <1.5.0.1, Thunderbird 1.5, and SeaMonkey

CVE-2009-0771

CVE-2009-0771 is a vulnerability described in the MiracleLinux AXSA-2009-348:01 advisory as affecting the Mozilla layout engine. The exposed products and versions include Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15. The issue allows remote attackers to cause a ...

CVE-2010-1213

The CVE-2010-1213 vulnerability affects Mozilla Firefox (3.5.x before 3.5.11; 3.6.x before 3.6.7), Thunderbird (3.0.x before 3.0.6; 3.1.x before 3.1.1), and SeaMonkey before 2.0.6. The importScripts Web Worker method does not verify that content is valid JavaScript, allowing remote attackers to b...

CVE-2010-2766

CVE-2010-2766 is a memory/DOM handling flaw in Mozilla’s browser engines where the normalization code could remove DOM nodes during traversal, leading to an access of a deleted object and potential code execution. Affected products and versions per the provided documents: Mozilla Firefox before 3...

CVE-2010-3183

CVE-2010-3183 affects Mozilla-based products (Firefox/Thunderbird/SeaMonkey/XULRunner) where the LookupGetterOrSetter function in the browser’s JavaScript engine mishandles calls to window.lookupGetter with no arguments. The root cause is an incorrect pointer handling that can dereference a dangl...

CVE-2012-4185

CVE-2012-4185 describes a buffer overflow in Mozilla Firefox’s nsCharTraits::length function that could allow remote code execution or a heap memory corruption in Firefox <16.0, ESR 10.x <10.0.8, Thunderbird <16.0/ESR 10.x <10.0.8, and SeaMonkey

CVE-2013-0749

CVE-2013-0749 describes multiple unspecified vulnerabilities in the Mozilla Firefox browser engine (before 18.0) and related products (Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2 and ESR 17.x before 17.0.1, SeaMonkey before 2.15). The description states that remote attackers could c...

CVE-2026-16367

CVE-2026-16367 affects Mozilla Firefox versions earlier than 153.0. The Sandboxing escape is due to an invalid pointer in the Disability Access APIs component, with the vulnerability fixed in Firefox 153. The CVSS v3.1 base score is 10.0 (CRITICAL), with Network attack vector, Low attack complexi...

CVE-2010-1200

CVE-2010-1200 is reported across multiple advisories as part of Mozilla Firefox family vulnerabilities. Affected products include Firefox 3.5.x before 3.5.10, Firefox 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5. The issue is described as multiple unspecified vulnerabi...

CVE-2010-1585

CVE-2010-1585 affects Mozilla Firefox (ParanoidFragmentSink) where nsIScriptableUnescapeHTML.parseFragment fails to sanitize chrome HTML, enabling remote JavaScript execution via javascript: URIs in input to extensions. Affected products/versions: Firefox <3.5.17 and <3.6.14; SeaMonkey <...

CVE-2012-0449

CVE-2012-0449 affects Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7. Description: remote attackers can cause memory corruption and application crash, or possibly execute arbitrary code via a malformed XSLT stylesheet emb...

CVE-2012-0459

CVE-2012-0459 affects Mozilla Firefox (4.x–10.0), Firefox ESR (10.x up to before 10.0.3), Thunderbird (5.0–10.0) and SeaMonkey (before 2.8). It is caused by remote exploitation via dynamic modification of a keyframe followed by access to the keyframe’s cssText, enabling denial of service (applica...

CVE-2013-1737

CVE-2013-1737 affects Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0/ESR 17.x before 17.0.9, and SeaMonkey before 2.21. The issue is that the attacker-controlled getter on DOM proxies may fail to correctly identify the this object, potentially bypassing acces...

CVE-2013-5602

CVE-2013-5602 describes a vulnerability in the Web workers implementation of Mozilla Firefox and related Mozilla products where the function Worker::SetEventListener is susceptible to memory corruption/use-after-free. Affected products include Firefox before 25.0, ESR 17.x before 17.0.10 and 24.x...