Mozilla Security Vulnerabilities (CVEs)

This vulnerability allows a malicious program already running on a Windows system to send specially crafted WM_COPYDATA messages to Firefox, causing a...

CVE-2021-29966 is a memory corruption vulnerability in Firefox that could allow attackers to execute arbitrary code on affected systems. This affects ...

This vulnerability allows an attacker to read memory outside the bounds of a canvas buffer when Firefox renders text with WebRender disabled, potentia...

This vulnerability allows attackers to exploit uninitialized WebGL framebuffers in Mozilla browsers, leading to memory corruption and potential arbitr...

This vulnerability in Mozilla Firefox involves a use-after-free condition in the font cache due to unexpected data type conversions. Attackers could p...

This vulnerability in Mozilla Firefox, Firefox ESR, and Thunderbird allows malicious web content to gain elevated system privileges through Blob URL m...

This vulnerability allows attackers to inject arbitrary FTP commands by tricking users into clicking malicious FTP URLs containing encoded newline cha...

This vulnerability allows attackers to bypass port blocking restrictions by crafting Alt-Svc headers with integer overflow values above 65535. It affe...

This vulnerability allows Thunderbird to load a malicious shared library instead of the legitimate OTR protocol library due to an incorrect filename s...

A race condition in Firefox's Web Render components during destruction could lead to undefined behavior, potentially allowing arbitrary code execution...

This CVE describes memory safety bugs in Firefox and Thunderbird that could lead to memory corruption. With sufficient effort, attackers could exploit...

CVE-2021-23964 is a memory corruption vulnerability in Mozilla products that could allow attackers to execute arbitrary code on affected systems. The ...

This CVE describes memory safety bugs in Firefox and Thunderbird that could lead to memory corruption. With sufficient effort, attackers could potenti...

CVE-2021-23962 is a use-after-poison vulnerability in Firefox's '<RowCountChanged>' method that could lead to memory corruption and potentially exploi...

This vulnerability involves a type confusion bug in JavaScript's logical assignment operators within switch statements, which can lead to memory corru...

This vulnerability in Firefox for Android allowed malicious websites to bypass iframe sandbox restrictions using Android-specific intent URLs. Only Fi...

This vulnerability in Mozilla's JavaScript engine allows attackers to trigger a use-after-poison condition during garbage collection of re-declared va...

This vulnerability in Firefox allows attackers to bypass phishing warnings when using HTTP authentication in malicious URLs. By exploiting cached redi...

This vulnerability in Firefox for Android allows malicious apps to send crafted intents that trick Firefox into loading webapp manifests from arbitrar...

This vulnerability involves a type confusion bug in Firefox's CSS flexbox implementation where a StyleGenericFlexBasis object could be incorrectly cas...

This vulnerability allows attackers to execute malicious code on Windows systems when users download files without extensions and open them from Firef...

This CVE describes memory safety bugs in Firefox that could lead to memory corruption. With sufficient effort, attackers could potentially exploit the...

This vulnerability allows attackers to trigger a heap buffer overflow by providing specially crafted blit values to video drivers. Successful exploita...