Mozilla CVEs
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2016-5295This vulnerability allows an attacker to use the Mozilla Maintenance Service to escalate privilege by having the Maintenance Service invoke
- CVE-2016-5294The Mozilla Updater can be made to choose an arbitrary target working directory for output files resulting from the update process.
- CVE-2016-5293When the Mozilla Updater is run, if the Updater's log file in the working directory points to a hardlink, data can be appended to an arbitra
- CVE-2016-5292During URL parsing, a maliciously crafted URL can cause a potentially exploitable crash.
- CVE-2016-5291A same-origin policy bypass with local shortcut files to load arbitrary local content from disk.
- CVE-2016-5290Memory safety bugs were reported in Firefox 49 and Firefox ESR 45.4.
- CVE-2016-5289Memory safety bugs were reported in Firefox 49.
- CVE-2016-5288Web content could access information in the HTTP cache if e10s is disabled.
- CVE-2016-5287A potentially exploitable use-after-free crash during actor destruction with service workers.
- CVE-2017-5461Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3.30.x before 3.30.1 a
- CVE-2017-5031A use after free in ANGLE in Google Chrome prior to 57.0.2987.98 for Windows allowed a remote attacker to perform an out of bounds memory re