Mozilla CVEs
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-4582Buffer Overflow in WebGL glGetProgramiv
- CVE-2023-4581XLL file extensions were downloadable without warnings
- CVE-2023-4580Push notifications saved to disk unencrypted
- CVE-2023-4579Persisted search terms were formatted as URLs
- CVE-2023-4578Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
- CVE-2023-4577Memory corruption in JIT UpdateRegExpStatics
- CVE-2023-4576Integer Overflow in RecordedSourceSurfaceCreation
- CVE-2023-4575Memory corruption in IPC FilePickerShownCallback
- CVE-2023-4574Memory corruption in IPC ColorPickerShownCallback
- CVE-2023-4573Memory corruption in IPC CanvasTranslator
- CVE-2022-46884A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time.
- CVE-2023-4058Memory safety bugs present in Firefox 115.
- CVE-2023-4057Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0.
- CVE-2023-4056Memory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115.0, and Thunderbird 102.13.
- CVE-2023-4055When the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar sent to the host was no longer consistent wit
- CVE-2023-4054When opening appref-ms files, Firefox did not warn the user that these files may contain malicious code.
- CVE-2023-4053Full screen notification obscured by external program
- CVE-2023-4052The Firefox updater created a directory writable by non-privileged users.
- CVE-2023-4051Full screen notification obscured by file open dialog
- CVE-2023-4050In some cases, an untrusted input stream was copied to a stack buffer without checking its size.
- CVE-2023-4049Race conditions in reference counting code were found through code inspection.
- CVE-2023-4048An out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in low memory situations.
- CVE-2023-4047A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions.
- CVE-2023-4046In some circumstances, a stale value could have been used for a global variable in WASM JIT analysis.
- CVE-2023-4045Offscreen Canvas did not properly track cross-origin tainting, which could have been used to access image data from another site in violatio
- CVE-2023-3417File Extension Spoofing using the Text Direction Override Character
- CVE-2023-37456The session restore helper crashed whenever there was no parameter sent to the message handler.
- CVE-2023-37455The permission request prompt from the site in the background tab was overlaid on top of the site in the foreground tab.
- CVE-2023-3600Use-after-free in workers
- CVE-2023-37212Memory safety bugs present in Firefox 114.