Mozilla CVEs
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2019-9791The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects when compiled through
- CVE-2019-9790A use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is obtained using JavaScript and the element is then
- CVE-2019-9789Mozilla developers and community members reported memory safety bugs present in Firefox 65.
- CVE-2019-9788Mozilla developers and community members reported memory safety bugs present in Firefox 65, Firefox ESR 60.5, and Thunderbird 60.5.
- CVE-2018-18513A crash can occur when processing a crafted S/MIME message or an XPI package containing a crafted signature.
- CVE-2018-18512A use-after-free vulnerability can occur while playing a sound notification in Thunderbird.
- CVE-2018-18511Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method.
- CVE-2018-18510The about:crashcontent and about:crashparent pages can be triggered by web content.
- CVE-2018-18509A flaw during verification of certain S/MIME signatures causes emails to be shown in Thunderbird as having a valid digital signature, even i
- CVE-2019-9807When arbitrary text is sent over an FTP connection and a page reload is initiated, it is possible to create a modal alert message with this
- CVE-2019-9808If WebRTC permission is requested from documents with data: or blob: URLs, the permission notifications do not properly display the originat
- CVE-2019-9809If the source for resources on a page is through an FTP connection, it is possible to trigger a series of modal alert messages for these res
- CVE-2019-9810Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflo
- CVE-2019-9813Incorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arbitrary memory read an
- CVE-2017-7777Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph function.
- CVE-2017-7776Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph.
- CVE-2017-7774Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.
- CVE-2017-7773Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor.
- CVE-2017-7771Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.
- CVE-2017-7772Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.
- CVE-2018-18499A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on a page to cause a re
- CVE-2018-18498A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a raw value is used inste
- CVE-2018-18497Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used with
- CVE-2018-18496When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted content for a clickjacking
- CVE-2018-18495WebExtension content scripts can be loaded into about: pages in some circumstances, in violation of the permissions granted to extensions.
- CVE-2018-18494A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirec
- CVE-2018-18493A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use
- CVE-2018-18492A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select element in the options col
- CVE-2018-12407A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content, when working with the
- CVE-2018-12406Mozilla developers and community members reported memory safety bugs present in Firefox 63.