Mozilla CVEs
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2021-29949When loading the shared library that provides the OTR protocol implementation, Thunderbird will initially attempt to open it using a filenam
- CVE-2021-29950Thunderbird unprotects a secret OpenPGP key prior to using it for a decryption, signing or key import task.
- CVE-2021-29951The Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which, in a domain network, grants normal remote users access
- CVE-2021-29952When Web Render components were destructed, a race condition could have caused undefined behavior, and we presume that with enough effort ma
- CVE-2021-29953A malicious webpage could have forced a Firefox for Android user into executing attacker-controlled JavaScript in the context of another dom
- CVE-2021-29954Proxy functionality built into Hubs Cloud’s Reticulum software allowed access to internal URLs, including the metadata service.
- CVE-2021-29955A transient execution vulnerability, named Floating Point Value Injection (FPVI) allowed an attacker to leak arbitrary memory addresses and
- CVE-2021-29956OpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1 were stored unencrypted on the user's local di
- CVE-2021-29957If a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also contains an additional unprotected part, Thund
- CVE-2021-29958When a download was initiated, the client did not check whether it was in normal or private browsing mode, which led to private mode cookies
- CVE-2021-29959When a user has already allowed a website to access microphone and camera, disabling camera sharing would not fully prevent the website from
- CVE-2021-29960Firefox used to cache the last filename used for printing a file.
- CVE-2021-29961When styling and rendering an oversized `<select>` element, Firefox did not apply correct clipping which allowed an attacker to paint over t
- CVE-2021-29962Firefox for Android would become unstable and hard-to-recover when a website opened too many popups.
- CVE-2021-29963Address bar search suggestions in private browsing mode were re-using session data from normal mode.
- CVE-2021-29964A locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would process incorrectly, leading to an out-of-bounds re
- CVE-2021-29965A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords f
- CVE-2021-29966Mozilla developers reported memory safety bugs present in Firefox 88.
- CVE-2021-29967Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11.
- CVE-2021-29968When drawing text onto a canvas with WebRender disabled, an out of bounds read could occur.
- CVE-2021-23981A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memo
- CVE-2021-23982Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as s
- CVE-2021-23983By causing a transition on a parent node by removing a CSS rule, an invalid property for a marker could have been applied, resulting in memo
- CVE-2021-23984A malicious extension could have opened a popup window lacking an address bar.
- CVE-2021-23985If an attacker is able to alter specific about:config values (for example malware running on the user's computer), the Devtools remote debug
- CVE-2021-23986A malicious extension with the 'search' permission could have installed a new search engine whose favicon referenced a cross-origin URL.
- CVE-2021-23987Mozilla developers and community members reported memory safety bugs present in Firefox 86 and Firefox ESR 78.8.
- CVE-2021-23988Mozilla developers reported memory safety bugs present in Firefox 86.
- CVE-2021-21354Open redirect in pollbot
- CVE-2021-23964Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6.