Mozilla CVEs
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2021-4221If a domain name contained a RTL character, it would cause the domain to be rendered to the right of the path.
- CVE-2021-4140It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox.
- CVE-2021-4129Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, and Masayuki Nakano r
- CVE-2021-4128When transitioning in and out of fullscreen mode, a graphics object was not correctly protected; resulting in memory corruption and a potent
- CVE-2021-4127An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited.
- CVE-2021-4126When receiving an OpenPGP/MIME signed email message that contains an additional outer MIME message layer, for example a message footer added
- CVE-2020-15685During the plaintext phase of the STARTTLS connection setup, protocol commands could have been injected and evaluated within the encrypted s
- CVE-2020-15679An OAuth session fixation vulnerability existed in the VPN login flow, where an attacker could craft a custom login URL, convince a VPN user
- CVE-2022-29167ReDoS vulnerability in header parsing in hawk
- CVE-2021-4138Improved Host header checks to reject requests not sent to a well-known local hostname or IP, or the server-specified hostname.
- CVE-2021-38503The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such as executing scripts
- CVE-2021-38504When interacting with an HTML input element's file picker dialog with webkitdirectory set, a use-after-free could have resulted, leading to
- CVE-2021-38505Microsoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will record data copied to the clipboard to the
- CVE-2021-38506Through a series of navigations, Firefox could have entered fullscreen mode without notification or warning to the user.
- CVE-2021-38507The Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently upgraded to TLS while retaining the visual
- CVE-2021-38508By displaying a form validity message in the correct location at the same time as a permission prompt (such as for geolocation), the validit
- CVE-2021-38509Due to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with arbitrary (although unstyled) contents could be d
- CVE-2021-38510The executable file warning was not presented when downloading .inetloc files, which, due to a flaw in Mac OS, can run commands on a user's
- CVE-2021-43528Thunderbird unexpectedly enabled JavaScript in the composition area.
- CVE-2021-43530A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a URL scanned from a Q
- CVE-2021-43531When a user loaded a Web Extensions context menu, the Web Extension could access the post-redirect URL of the element clicked.
- CVE-2021-43532The 'Copy Image Link' context menu action would copy the final image URL after redirects.
- CVE-2021-43533When parsing internationalized domain names, high bits of the characters in the URLs were sometimes stripped, resulting in inconsistencies t
- CVE-2021-43534Mozilla developers and community members reported memory safety bugs present in Firefox 93 and Firefox ESR 91.2.
- CVE-2021-43535A use-after-free could have occured when an HTTP2 session object was released on a different thread, leading to memory corruption and a pote
- CVE-2021-43536Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL.
- CVE-2021-43537An incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt memory leading to a potentially exploitabl
- CVE-2021-43538By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that had received full scre
- CVE-2021-43539Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing
- CVE-2021-43540WebExtensions with the correct permissions were able to create and install ServiceWorkers for third-party websites that would not have been