Mozilla CVEs
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-1935Clickjacking the registerProtocolHandler info-bar
- CVE-2025-1942Disclosure of uninitialized memory when .toUpperCase() causes string to get longer
- CVE-2025-1941Lock screen setting bypass in Firefox Focus for Android
- CVE-2025-1934Unexpected GC during RegExp bailout processing
- CVE-2025-1940Android Intent confirmation prompt tapjacking using Select options
- CVE-2025-1933JIT corruption of WASM i32 return values on 64-bit CPUs
- CVE-2025-1932Inconsistent comparator in XSLT sorting led to out-of-bounds access
- CVE-2025-1931Use-after-free in WebTransportChild
- CVE-2025-1939Tapjacking in Android Custom Tabs using transition animations
- CVE-2025-1930AudioIPC StreamData could trigger a use-after-free in the Browser process
- CVE-2025-1414Memory safety bugs fixed in Firefox 135.0.1
- CVE-2025-1015Unsanitized address book fields
- CVE-2025-1020Memory safety bugs fixed in Firefox 135 and Thunderbird 135
- CVE-2025-1017Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7
- CVE-2025-1016Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7
- CVE-2025-0510Address of e-mail sender can be spoofed by malicious email
- CVE-2025-1014Certificate length was not properly checked
- CVE-2025-1013Potential opening of private browsing tabs in normal browsing windows
- CVE-2025-1019Fullscreen notification not properly displayed
- CVE-2025-1012Use-after-free during concurrent delazification
- CVE-2025-1011A bug in WebAssembly code generation could result in a crash
- CVE-2025-1018Fullscreen notification is not displayed when fullscreen is re-requested
- CVE-2025-1010Use-after-free in Custom Highlight
- CVE-2025-1009Use-after-free in XSLT
- CVE-2025-23109Address bar spoofing on iOS using long hostnames
- CVE-2025-23108Firefox Mobile iOS Full Address Bar Spoof Using Open in New Tab and Javascript URI
- CVE-2025-0247Memory safety bugs fixed in Firefox 134 and Thunderbird 134
- CVE-2025-0243Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6
- CVE-2025-0242Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6
- CVE-2025-0241Memory corruption when using JavaScript Text Segmentation