Mozilla CVEs
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-6615Memory safety bugs fixed in Firefox 128 and Thunderbird 128
- CVE-2024-6614Incorrect listing of stack frames
- CVE-2024-6613Incorrect listing of stack frames
- CVE-2024-6612CSP violation leakage when using devtools
- CVE-2024-6611Incorrect handling of SameSite cookies
- CVE-2024-6610Form validation popups could block exiting full-screen mode
- CVE-2024-6609Memory corruption in NSS
- CVE-2024-6608Cursor could be moved out of the viewport using pointerlock.
- CVE-2024-6607Leaving pointerlock by pressing the escape key could be prevented
- CVE-2024-6606Out-of-bounds read in clipboard component
- CVE-2024-6605Firefox Android missed activation delay to prevent tapjacking
- CVE-2024-6604Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.13
- CVE-2024-6603Memory corruption in thread creation
- CVE-2024-6602Memory corruption in NSS
- CVE-2024-6601Race condition in permission assignment
- CVE-2024-6600Memory corruption in WebGL API
- CVE-2024-38312When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed
- CVE-2024-38313In certain scenarios a malicious website could attempt to display a fake location URL bar which could mislead users as to the actual website
- CVE-2024-5701Memory safety bugs present in Firefox 126.
- CVE-2024-5699In violation of spec, cookie prefixes such as `__Secure` were being ignored if they were not correctly capitalized - by spec they should be
- CVE-2024-5698By manipulating the fullscreen feature while opening a data-list, an attacker could have overlaid a text box over the address bar.
- CVE-2024-5697A website was able to detect when a user took a screenshot of a page using the built-in Screenshot functionality in Firefox.
- CVE-2024-5695If an out-of-memory condition occurs at a specific point using allocations in the probabilistic heap checker, an assertion could have been t
- CVE-2024-5694An attacker could have caused a use-after-free in the JavaScript engine to read memory in the JavaScript string section of the heap.
- CVE-2024-5689In addition to detecting when a user was taking a screenshot (XXX), a website was able to overlay the 'My Shots' button that appeared, and d
- CVE-2024-5687If a specific sequence of actions is performed when opening a new tab, the triggering principal associated with the new tab may have been in
- CVE-2024-5700Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11.
- CVE-2024-5696By manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory leading to a potentially exploitable crash.
- CVE-2024-5693Offscreen Canvas did not properly track cross-origin tainting, which could be used to access image data from another site in violation of sa
- CVE-2024-5692On Windows 10, when using the 'Save As' functionality, an attacker could have tricked the browser into saving the file with a disallowed ext