Mozilla Security Vulnerabilities (CVEs)

This CVE describes a use-after-free vulnerability in Firefox's SafeRefPtr component that could allow an attacker to trigger a crash or potentially exe...

This CVE describes memory safety bugs in Firefox, Firefox ESR, and Thunderbird that could lead to memory corruption. With sufficient effort, attackers...

This vulnerability allows attackers to execute arbitrary code on affected systems by overwriting return registers. It specifically impacts Armv7-A sys...

This vulnerability in Thunderbird allows encrypted email subjects to be incorrectly assigned to other cached emails. When replying to contaminated ema...

This vulnerability in Firefox Focus for iOS allows attackers to execute unauthorized JavaScript on top origin sites by exploiting a race condition whe...

This vulnerability in Firefox for iOS allows attackers to execute JavaScript on bookmarked AMP pages by manipulating canonical URLs. It affects Firefo...

CVE-2024-1557 is a memory safety vulnerability in Firefox that could allow attackers to execute arbitrary code through memory corruption. This affects...

This vulnerability allows attackers to read memory outside the intended buffer boundaries when Firefox, Firefox ESR, or Thunderbird processes network ...

This vulnerability involves incorrect code generation in Mozilla products that could cause unexpected numeric conversions and undefined behavior on 32...

This vulnerability involves an unchecked return value in TLS handshake code in Mozilla products, which could cause a potentially exploitable crash. It...

A stack buffer overflow vulnerability in Firefox's WebAudio OscillatorNode could allow attackers to cause a crash or potentially execute arbitrary cod...

A timing vulnerability in Firefox, Firefox ESR, and Thunderbird allows attackers to manipulate popup notification delays, tricking users into granting...

This CVE describes memory safety bugs in Firefox, Firefox ESR, and Thunderbird that could lead to memory corruption. With sufficient effort, attackers...

This vulnerability allows attackers to execute unauthorized JavaScript on websites by exploiting a race condition with javascript: URIs in the URL bar...

CVE-2023-6873 is a memory corruption vulnerability in Firefox that could allow an attacker to execute arbitrary code on a victim's system. It affects ...

This CVE describes a heap buffer overflow vulnerability in Firefox's WebGL DrawElementsInstanced method when used with Mesa VM driver. An attacker cou...

CVE-2023-6858 is a heap buffer overflow vulnerability in Firefox's nsTextFragment component caused by insufficient out-of-memory handling. Attackers c...

This vulnerability allows remote attackers to execute arbitrary code via a heap buffer overflow in Firefox's nsWindow::PickerOpen method when running ...

This vulnerability in Firefox, Firefox ESR, and Thunderbird involves undefined behavior in the ShutdownObserver() function due to missing virtual dest...

This vulnerability involves improper exception handling in TypedArrays in Firefox, which can be exploited through other APIs that expect TypedArrays t...

This CVE describes memory safety bugs in Firefox, Firefox ESR, and Thunderbird that could lead to memory corruption. With sufficient effort, attackers...

This vulnerability is a use-after-free memory corruption flaw in Firefox, Firefox ESR, and Thunderbird's ReadableByteStreams implementation. It allows...

This vulnerability in Mozilla graphics drivers allows attackers to cause denial of service through large draw calls. It affects Firefox versions befor...

A use-after-free vulnerability in Firefox, Firefox ESR, and Thunderbird garbage collection could allow attackers to cause a crash or potentially execu...

This vulnerability in Firefox's canvas rendering allows a compromised content process to cause unexpected surface changes, leading to memory leaks in ...

This vulnerability is an integer overflow in Firefox's RecordedSourceSurfaceCreation function on Windows, leading to a heap buffer overflow. It could ...

This vulnerability allows buffer overflow attacks in Firefox on macOS due to insufficient memory allocation checks in Angle's GLSL shader processing. ...

CVE-2023-4584 is a memory corruption vulnerability in Mozilla products that could allow attackers to execute arbitrary code on affected systems. This ...

This vulnerability in Firefox causes cookie jar inconsistencies when domain cookie limits are exceeded, potentially sending requests with missing cook...

This vulnerability allows an attacker to cause a stack buffer overflow by sending untrusted input without proper size validation. If exploited, it cou...

This vulnerability allows attackers to manipulate popup notification timing in Firefox browsers, tricking users into granting unintended permissions. ...

Thunderbird email client vulnerability allows attackers to disguise executable files as document attachments using Unicode text direction override cha...

This CVE describes a use-after-free vulnerability in Firefox, Firefox ESR, and Thunderbird that occurs during worker lifecycle management. If exploite...

This CVE describes memory safety bugs in Firefox, Firefox ESR, and Thunderbird that could lead to memory corruption. With sufficient effort, attackers...

This vulnerability in Firefox's Drag and Drop API allows attackers to trick users into creating shortcuts to local system files through social enginee...

This CVE describes a use-after-free vulnerability in Firefox's history handling mechanism. Attackers could potentially exploit this to execute arbitra...

Firefox and Thunderbird failed to warn users when opening Diagcab files, which could contain malicious code. This vulnerability allows attackers to ex...

This vulnerability allows an attacker to trigger a use-after-free condition when establishing a WebRTC connection over HTTPS, potentially leading to a...