Mozilla
Page 10 of 38 — Mozilla CVEs from a corpus of 3730, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-29533 | Medium | 4.3 | 2023-06-02 | A website could have obscured the fullscreen notification by using a combination of <code>window.open</code>, fullscreen requests, <code>window.name</code> ass… |
CVE-2023-28177 | High | 8.8 | 2023-06-02 | Memory safety bugs present in Firefox 110. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could h… |
CVE-2023-28176 | High | 8.8 | 2023-06-02 | Memory safety bugs present in Firefox 110 and Firefox ESR 102.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort… |
CVE-2023-28164 | Medium | 6.5 | 2023-06-02 | Dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and website spoofing attacks. This vulnerability af… |
CVE-2023-28163 | Medium | 6.5 | 2023-06-02 | When downloading files through the Save As dialog on Windows with suggested filenames containing environment variable names, Windows would have resolved those… |
CVE-2023-28162 | High | 8.8 | 2023-06-02 | While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type. This could have led to a potentially exploitable crash… |
CVE-2023-28161 | High | 8.8 | 2023-06-02 | If temporary "one-time" permissions, such as the ability to use the Camera, were granted to a document loaded using a file: URL, that permission persisted in t… |
CVE-2023-28160 | Medium | 6.5 | 2023-06-02 | When following a redirect to a publicly accessible web extension file, the URL may have been translated to the actual local path, leaking potentially sensitive… |
CVE-2023-28159 | Medium | 4.3 | 2023-06-02 | The fullscreen notification could have been hidden on Firefox for Android by using download popups, resulting in potential user confusion or spoofing attacks… |
CVE-2023-25752 | Medium | 6.5 | 2023-06-02 | When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds. This may have lead future code… |
CVE-2023-25751 | Medium | 6.5 | 2023-06-02 | Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. This could lead to a potentially… |
CVE-2023-25750 | Medium | 4.3 | 2023-06-02 | Under certain circumstances, a ServiceWorker's offline cache may have leaked to the file system when using private browsing mode. This vulnerability affects Fi… |
CVE-2023-25749 | Medium | 4.3 | 2023-06-02 | Android applications with unpatched vulnerabilities can be launched from a browser using Intents, exposing users to these vulnerabilities. Firefox will now con… |
CVE-2023-25748 | Medium | 4.3 | 2023-06-02 | By displaying a prompt with a long description, the fullscreen notification could have been hidden, resulting in potential user confusion or spoofing attacks… |
CVE-2023-25746 | High | 8.8 | 2023-06-02 | Memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these c… |
CVE-2023-25745 | High | 8.8 | 2023-06-02 | Memory safety bugs present in Firefox 109. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could h… |
CVE-2023-25744 | High | 8.8 | 2023-06-02 | Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effor… |
CVE-2023-25743 | High | 7.5 | 2023-06-02 | A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.<br>*This bug only affects Firefox Fo… |
CVE-2023-25742 | Medium | 6.5 | 2023-06-02 | When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash. This vulnerability affects Firefox < 110, T… |
CVE-2023-25741 | Medium | 6.5 | 2023-06-02 | When dragging and dropping an image cross-origin, the image's size could potentially be leaked. This behavior was shipped in 109 and caused web compatibility p… |
CVE-2023-25740 | High | 8.8 | 2023-06-02 | After downloading a Windows <code>.scf</code> script from the local filesystem, an attacker could supply a remote path that would lead to unexpected network re… |
CVE-2023-25739 | High | 8.8 | 2023-06-02 | Module load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in <code>ScriptLoadContext</code>. Th… |
CVE-2023-25738 | Medium | 6.5 | 2023-06-02 | Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being validated and could have resulted in invalid values which in turn wo… |
CVE-2023-25737 | High | 8.8 | 2023-06-02 | An invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to undefined behavior. This vulnerability affects Firefox < 110, Th… |
CVE-2023-25735 | High | 8.8 | 2023-06-02 | Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-… |
CVE-2023-25734 | High | 8.1 | 2023-06-02 | After downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network… |
CVE-2023-25732 | High | 8.8 | 2023-06-02 | When encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input being encoded was not correctly calculated potentially leading… |
CVE-2023-25731 | High | 8.8 | 2023-06-02 | Due to URL previews in the network panel of developer tools improperly storing URLs, query parameters could potentially be used to overwrite global objects in… |
CVE-2023-25730 | Medium | 5.4 | 2023-06-02 | A background script invoking <code>requestFullscreen</code> and then blocking the main thread could force the browser into fullscreen mode indefinitely, result… |
CVE-2023-25729 | High | 8.8 | 2023-06-02 | Permission prompts for opening external schemes were only shown for <code>ContentPrincipals</code> resulting in extensions being able to open them without user… |
CVE-2023-25728 | Medium | 6.5 | 2023-06-02 | The <code>Content-Security-Policy-Report-Only</code> header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe t… |
CVE-2023-23606 | High | 8.8 | 2023-06-02 | Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108. Some of these bugs showed evidence of memory corruption and… |
CVE-2023-23605 | High | 8.8 | 2023-06-02 | Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108 and Firefox ESR 102.6. Some of these bugs showed evidence of… |
CVE-2023-23604 | Medium | 6.5 | 2023-06-02 | A duplicate `SystemPrincipal` object could be created when parsing a non-system html document via `DOMParser::ParseFromSafeString`. This could have lead to byp… |
CVE-2023-23603 | Medium | 6.5 | 2023-06-02 | Regular expressions used to filter out forbidden properties and values from style directives in calls to `console.log` weren't accounting for external URLs. Da… |
CVE-2023-23602 | Medium | 6.5 | 2023-06-02 | A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src header to be ignored. This could lead to co… |
CVE-2023-23601 | Medium | 6.5 | 2023-06-02 | Navigations were being allowed when dragging a URL from a cross-origin iframe into the same tab which could lead to website spoofing attacks This vulnerability… |
CVE-2023-23600 | Medium | 6.5 | 2023-06-02 | Per origin notification permissions were being stored in a way that didn't take into account what browsing context the permission was granted in. This lead to… |
CVE-2023-23599 | Medium | 6.5 | 2023-06-02 | When copying a network request from the developer tools panel as a curl command the output was not being properly sanitized and could allow arbitrary commands… |
CVE-2023-23598 | Medium | 6.5 | 2023-06-02 | Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs containing file URLs as being dragged a website cou… |
CVE-2023-23597 | Medium | 6.5 | 2023-06-02 | A compromised web child process could disable web security opening restrictions, leading to a new child process being spawned within the `file://` context. Giv… |
CVE-2023-1945 | Medium | 6.5 | 2023-06-02 | Unexpected data returned from the Safe Browsing API could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunder… |
CVE-2023-0767 | High | 8.8 | 2023-06-02 | An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled… |
CVE-2023-0616 | Medium | 6.5 | 2023-06-02 | If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause T… |
CVE-2023-0547 | Medium | 6.5 | 2023-06-02 | OCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted email, and revoked certificates would be accepted. Thunderbird v… |
CVE-2023-0430 | Medium | 6.5 | 2023-06-02 | Certificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed with a revoked certificate would be displayed as having a vali… |
CVE-2022-0637 | Medium | 6.1 | 2023-02-16 | open redirect in pollbot (pollbot.services.mozilla.com) in versions before 1.4.6 |
CVE-2021-43529 | Critical | 9.8 | 2023-02-16 | Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3… |
CVE-2021-23980 | Medium | 6.1 | 2023-02-16 | A mutation XSS affects users calling bleach.clean with all of: svg or math in the allowed tags p or br in allowed tags style, title, noscript, script, textarea… |
CVE-2020-6817 | High | 7.5 | 2023-02-16 | bleach.clean behavior parsing style attributes could result in a regular expression denial of service (ReDoS). Calls to bleach.clean with an allowed tag with a… |
CVE-2020-12413 | Medium | 5.9 | 2023-02-16 | The Raccoon attack is a timing attack on DHE ciphersuites inherit in the TLS specification. To mitigate this vulnerability, Firefox disabled support for DHE ci… |
CVE-2019-17003 | Medium | 6.1 | 2023-02-16 | Scanning a QR code that contained a javascript: URL would have resulted in the Javascript being executed. |
CVE-2022-46885 | High | 8.8 | 2022-12-22 | Mozilla developers Timothy Nikkel, Ashley Hale, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 105. Some of these bugs showed evid… |
CVE-2022-46883 | High | 8.8 | 2022-12-22 | Mozilla developers Gabriele Svelto, Yulia Startsev, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 106. Some of t… |
CVE-2022-46882 | Critical | 9.8 | 2022-12-22 | A use-after-free in WebGL extensions could have led to a potentially exploitable crash. This vulnerability affects Firefox < 107, Firefox ESR < 102.6, and Thun… |
CVE-2022-46881 | High | 8.8 | 2022-12-22 | An optimization in WebGL was incorrect in some cases, and could have led to memory corruption and a potentially exploitable crash. *Note*: This advisory was ad… |
CVE-2022-46880 | Medium | 6.5 | 2022-12-22 | A missing check related to tex units could have led to a use-after-free and potentially exploitable crash.<br />*Note*: This advisory was added on December 13t… |
CVE-2022-46879 | High | 8.8 | 2022-12-22 | Mozilla developers and community members Lukas Bernhard, Gabriele Svelto, Randell Jesup, and the Mozilla Fuzzing Team reported memory safety bugs present in Fi… |
CVE-2022-46878 | High | 8.8 | 2022-12-22 | Mozilla developers Randell Jesup, Valentin Gosu, Olli Pettay, and the Mozilla Fuzzing Team reported memory safety bugs present in Thunderbird 102.5. Some of th… |
CVE-2022-46877 | Medium | 4.3 | 2022-12-22 | By confusing the browser, the fullscreen notification could have been delayed or suppressed, resulting in potential user confusion or spoofing attacks. This vu… |
CVE-2022-46875 | Medium | 6.5 | 2022-12-22 | The executable file warning was not presented when downloading .atloc and .ftploc files, which can run commands on a user's computer. <br>*Note: This issue onl… |
CVE-2022-46874 | High | 8.8 | 2022-12-22 | A file with a long filename could have had its filename truncated to remove the valid extension, leaving a malicious extension in its place. This could potenti… |
CVE-2022-46873 | High | 8.8 | 2022-12-22 | Because Firefox did not implement the <code>unsafe-hashes</code> CSP directive, an attacker who was able to inject markup into a page otherwise protected by a… |
CVE-2022-46872 | High | 8.6 | 2022-12-22 | An attacker who compromised a content process could have partially escaped the sandbox to read arbitrary files via clipboard-related IPC messages.<br>*This bug… |
CVE-2022-46871 | High | 8.8 | 2022-12-22 | An out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited. This vulnerability affects Firefox < 108. |
CVE-2022-45421 | High | 8.8 | 2022-12-22 | Mozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in Thunderbird 102.4. Some of these bugs showed evidence of memory… |
CVE-2022-45420 | Medium | 6.5 | 2022-12-22 | Use tables inside of an iframe, an attacker could have caused iframe contents to be rendered outside the boundaries of the iframe, resulting in potential user… |
CVE-2022-45419 | Medium | 6.5 | 2022-12-22 | If the user added a security exception for an invalid TLS certificate, opened an ongoing TLS connection with a server that used that certificate, and then dele… |
CVE-2022-45418 | Medium | 6.1 | 2022-12-22 | If a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have been drawn over the browser UI, resulting in potential user con… |
CVE-2022-45417 | Medium | 4.3 | 2022-12-22 | Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk for websites visited… |
CVE-2022-45416 | Medium | 6.5 | 2022-12-22 | Keyboard events reference strings like "KeyA" that were at fixed, known, and widely-spread addresses. Cache-based timing attacks such as Prime+Probe could have… |
CVE-2022-45415 | High | 7.8 | 2022-12-22 | When downloading an HTML file, if the title of the page was formatted as a filename with a malicious extension, Firefox may have saved the file with that exten… |
CVE-2022-45414 | High | 8.1 | 2022-12-22 | If a Thunderbird user quoted from an HTML email, for example by replying to the email, and the email contained either a VIDEO tag with the POSTER attribute or… |
CVE-2022-45413 | Medium | 6.1 | 2022-12-22 | Using the <code>S.browser_fallback_url parameter</code> parameter, an attacker could redirect a user to a URL and cause SameSite=Strict cookies to be sent.<br>… |
CVE-2022-45412 | High | 8.8 | 2022-12-22 | When resolving a symlink such as <code>file:///proc/self/fd/1</code>, an error message may be produced where the symlink was resolved to a string containing un… |
CVE-2022-45411 | Medium | 6.1 | 2022-12-22 | Cross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing an XSS attack to access to authorization headers and cookies in… |
CVE-2022-45410 | Medium | 6.5 | 2022-12-22 | When a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the request was lost after the ServiceWorker took ownership of it. This… |
CVE-2022-45409 | High | 8.8 | 2022-12-22 | The garbage collector could have been aborted in several states and zones and <code>GCRuntime::finishCollection</code> may not have been called, leading to a u… |
CVE-2022-45408 | Medium | 6.5 | 2022-12-22 | Through a series of popups that reuse windowName, an attacker can cause a window to go fullscreen without the user seeing the notification prompt, resulting in… |
CVE-2022-45407 | High | 7.5 | 2022-12-22 | If an attacker loaded a font using <code>FontFace()</code> on a background worker, a use-after-free could have occurred, leading to a potentially exploitable c… |
CVE-2022-45406 | Critical | 9.8 | 2022-12-22 | If an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may be deleted while references to it lived on in a BaseShape. Thi… |
CVE-2022-45405 | Medium | 6.5 | 2022-12-22 | Freeing arbitrary <code>nsIInputStream</code>'s on a different thread than creation could have led to a use-after-free and potentially exploitable crash. This… |
CVE-2022-45404 | Medium | 6.5 | 2022-12-22 | Through a series of popup and <code>window.print()</code> calls, an attacker can cause a window to go fullscreen without the user seeing the notification promp… |
CVE-2022-45403 | Medium | 6.5 | 2022-12-22 | Service Workers should not be able to infer information about opaque cross-origin responses; but timing information for cross-origin media combined with Range… |
CVE-2022-42932 | High | 8.8 | 2022-12-22 | Mozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 105 and Firefox ESR 102.3. Some of these bugs showed… |
CVE-2022-42931 | Low | 3.3 | 2022-12-22 | Logins saved by Firefox should be managed by the Password Manager component which uses encryption to save files on-disk. Instead, the username (not password) w… |
CVE-2022-42930 | High | 7.1 | 2022-12-22 | If two Workers were simultaneously initializing their CacheStorage, a data race could have occurred in the `ThirdPartyUtil` component. This vulnerability affec… |
CVE-2022-42929 | Medium | 6.5 | 2022-12-22 | If a website called `window.print()` in a particular way, it could cause a denial of service of the browser, which may persist beyond browser restart depending… |
CVE-2022-42928 | High | 8.8 | 2022-12-22 | Certain types of allocations were missing annotations that, if the Garbage Collector was in a specific state, could have lead to memory corruption and a potent… |
CVE-2022-42927 | High | 8.1 | 2022-12-22 | A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a redirect, via `performance.getEntries()`. This… |
CVE-2022-40962 | High | 8.8 | 2022-12-22 | Mozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox… |
CVE-2022-40961 | Medium | 6.5 | 2022-12-22 | During startup, a graphics driver with an unexpected name could lead to a stack-buffer overflow causing a potentially exploitable crash.<br>*This issue only af… |
CVE-2022-40960 | Medium | 6.5 | 2022-12-22 | Concurrent use of the URL parser with non-UTF-8 data was not thread-safe. This could lead to a use-after-free causing a potentially exploitable crash. This vul… |
CVE-2022-40959 | Medium | 6.5 | 2022-12-22 | During iframe navigation, certain pages did not have their FeaturePolicy fully initialized leading to a bypass that leaked device permissions into untrusted su… |
CVE-2022-40958 | Medium | 6.5 | 2022-12-22 | By injecting a cookie with certain special characters, an attacker on a shared subdomain which is not a secure context could set and thus overwrite cookies fro… |
CVE-2022-40957 | Medium | 6.5 | 2022-12-22 | Inconsistent data in instruction and data cache when creating wasm code could lead to a potentially exploitable crash.<br>*This bug only affects Firefox on ARM… |
CVE-2022-40956 | Medium | 6.1 | 2022-12-22 | When injecting an HTML base element, some requests would ignore the CSP's base-uri settings and accept the injected element's base instead. This vulnerability… |
CVE-2022-3266 | Medium | 5.5 | 2022-12-22 | An out-of-bounds read can occur when decoding H264 video. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR < 102.3, Thun… |
CVE-2022-3155 | High | 7.8 | 2022-12-22 | When saving or opening an email attachment on macOS, Thunderbird did not set attribute com.apple.quarantine on the received file. If the received file was an a… |
CVE-2022-3034 | Medium | 4.3 | 2022-12-22 | When receiving an HTML email that specified to load an <code>iframe</code> element from a remote location, a request to the remote document was sent. However… |