Mozilla CVEs
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2017-5397The cache directory on the local file system is set to be world writable.
- CVE-2017-5396A use-after-free vulnerability in the Media Decoder when working with media files when some events are fired after the media elements are fr
- CVE-2017-5394A location bar spoofing attack where the location bar of loaded page will be shown over the content of another tab due to a series of JavaSc
- CVE-2017-5393The "mozAddonManager" allows for the installation of extensions from the CDN for addons.mozilla.org, a publicly accessible site.
- CVE-2017-5392Weak proxy objects have weak references on multiple threads when they should only have them on one, resulting in incorrect memory usage and
- CVE-2017-5391Special "about:" pages used by web content, such as RSS feeds, can load privileged "about:" pages in an iframe.
- CVE-2017-5390The JSON viewer in the Developer Tools uses insecure methods to create a communication channel for copying and viewing JSON or HTTP headers
- CVE-2017-5389WebExtensions could use the "mozAddonManager" API by modifying the CSP headers on sites with the appropriate permissions and then using host
- CVE-2017-5388A STUN server in conjunction with a large number of "webkitRTCPeerConnection" objects can be used to send large STUN packets in a short peri
- CVE-2017-5387The existence of a specifically requested local file can be found due to the double firing of the "onerror" when the "source" attribute on a
- CVE-2017-5386WebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions using this protocol, leading to potential d
- CVE-2017-5385Data sent with in multipart channels, such as the multipart/x-mixed-replace MIME type, will ignore the referrer-policy response header, lead
- CVE-2017-5384Proxy Auto-Config (PAC) files can specify a JavaScript function called for all URL requests with the full URL path which exposes more inform
- CVE-2017-5383URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display, allowing for domain name
- CVE-2017-5382Feed preview for RSS feeds can be used to capture errors and exceptions generated by privileged content, allowing for the exposure of intern
- CVE-2017-5381The "export" function in the Certificate Viewer can force local filesystem navigation when the "common name" in a certificate contains slash
- CVE-2017-5380A potential use-after-free found through fuzzing during DOM manipulation of SVG content.
- CVE-2017-5379Use-after-free vulnerability in Web Animations when interacting with cycle collection found through fuzzing.
- CVE-2017-5378Hashed codes of JavaScript objects are shared between pages.
- CVE-2017-5377A memory corruption vulnerability in Skia that can occur when using transforms to make gradients, resulting in a potentially exploitable cra
- CVE-2017-5376Use-after-free while manipulating XSL in XSLT documents.
- CVE-2017-5375JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks.
- CVE-2017-5374Memory safety bugs were reported in Firefox 50.1.
- CVE-2017-5373Memory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6.
- CVE-2016-9905A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents.
- CVE-2016-9904An attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by another compartment/zone in specific contex
- CVE-2016-9903Mozilla's add-ons SDK had a world-accessible resource with an HTML injection vulnerability.
- CVE-2016-9902The Pocket toolbar button, once activated, listens for events fired from it's own pages but does not verify the origin of incoming events.
- CVE-2016-9901HTML tags received from the Pocket server will be processed without sanitization and any JavaScript code executed will be run in the "about:
- CVE-2016-9900External resources that should be blocked when loaded by SVG images can bypass security restrictions through the use of "data:" URLs.