Mozilla CVEs
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2018-5178A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data.
- CVE-2018-5177A vulnerability exists in XSLT during number formatting where a negative buffer size may be allocated in some instances, leading to a buffer
- CVE-2018-5176The JSON Viewer displays clickable hyperlinks for strings that are parseable as URLs, including "javascript:" links.
- CVE-2018-5175A mechanism to bypass Content Security Policy (CSP) protections on sites that have a "script-src" policy of "'strict-dynamic'".
- CVE-2018-5174In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI" flag associated with downloaded files and
- CVE-2018-5173The filename appearing in the "Downloads" panel improperly renders some Unicode characters, allowing for the file name to be spoofed.
- CVE-2018-5172The Live Bookmarks page and the PDF viewer can run injected script content if a user pastes script from the clipboard into them while viewin
- CVE-2018-5170It is possible to spoof the filename of an attachment and display an arbitrary attachment name.
- CVE-2018-5169If manipulated hyperlinked text with "chrome:" URL contained in it is dragged and dropped on the "home" icon, the home page can be reset to
- CVE-2018-5168Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property of the theme element.
- CVE-2018-5167The web console and JavaScript debugger do not sanitize all output that can be hyperlinked.
- CVE-2018-5166WebExtensions can use request redirection and a "filterReponseData" filter to bypass host permission settings to redirect network traffic an
- CVE-2018-5165In 32-bit versions of Firefox, the Adobe Flash plugin setting for "Enable Adobe Flash protected mode" is unchecked by default even though th
- CVE-2018-5164Content Security Policy (CSP) is not applied correctly to all parts of multipart content sent with the "multipart/x-mixed-replace" MIME type
- CVE-2018-5163If a malicious attacker has used another vulnerability to gain full control over a content process, they may be able to replace the alternat
- CVE-2018-5162Plaintext of decrypted emails can leak through the src attribute of remote images, or links.
- CVE-2018-5161Crafted message headers can cause a Thunderbird process to hang on receiving the message.
- CVE-2018-5160WebRTC can use a "WrappedI420Buffer" pixel buffer but the owning image object can be freed while it is still in use.
- CVE-2018-5159An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possib
- CVE-2018-5158The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious JavaScript to be injected through a crafte
- CVE-2018-5157Same-origin protections for the PDF viewer can be bypassed, allowing a malicious site to intercept messages meant for the viewer.
- CVE-2018-5155A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths.
- CVE-2018-5154A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths.
- CVE-2018-5153If websocket data is sent with mixed text and binary in a single message, the binary data can be corrupted.
- CVE-2018-5152WebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such as accounts.firefox.com and listen to networ
- CVE-2018-5151Memory safety bugs were reported in Firefox 59.
- CVE-2018-5150Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7.
- CVE-2018-5148A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used instead of a refere
- CVE-2018-5147The libtremor library has the same flaw as CVE-2018-5146.
- CVE-2018-5146An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest.