Mozilla
Page 13 of 38 — Mozilla CVEs from a corpus of 3730, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-29966 | High | 8.8 | 2021-06-24 | Mozilla developers reported memory safety bugs present in Firefox 88. Some of these bugs showed evidence of memory corruption and we presume that with enough e… |
CVE-2021-29965 | Medium | 5.3 | 2021-06-24 | A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently ac… |
CVE-2021-29964 | High | 7.1 | 2021-06-24 | A locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would process incorrectly, leading to an out-of-bounds read. *This bug only… |
CVE-2021-29963 | Medium | 4.3 | 2021-06-24 | Address bar search suggestions in private browsing mode were re-using session data from normal mode. *This bug only affects Firefox for Android. Other operatin… |
CVE-2021-29962 | Medium | 4.3 | 2021-06-24 | Firefox for Android would become unstable and hard-to-recover when a website opened too many popups. *This bug only affects Firefox for Android. Other operatin… |
CVE-2021-29961 | Medium | 4.3 | 2021-06-24 | When styling and rendering an oversized `<select>` element, Firefox did not apply correct clipping which allowed an attacker to paint over the user interface… |
CVE-2021-29960 | Medium | 4.3 | 2021-06-24 | Firefox used to cache the last filename used for printing a file. When generating a filename for printing, Firefox usually suggests the web page title. The cac… |
CVE-2021-29959 | Medium | 4.3 | 2021-06-24 | When a user has already allowed a website to access microphone and camera, disabling camera sharing would not fully prevent the website from re-enabling it wit… |
CVE-2021-29958 | Medium | 4.3 | 2021-06-24 | When a download was initiated, the client did not check whether it was in normal or private browsing mode, which led to private mode cookies being shared in no… |
CVE-2021-29957 | Medium | 4.3 | 2021-06-24 | If a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also contains an additional unprotected part, Thunderbird did not indi… |
CVE-2021-29956 | Medium | 4.3 | 2021-06-24 | OpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1 were stored unencrypted on the user's local disk. The master pass… |
CVE-2021-29955 | Medium | 5.3 | 2021-06-24 | A transient execution vulnerability, named Floating Point Value Injection (FPVI) allowed an attacker to leak arbitrary memory addresses and may have also enabl… |
CVE-2021-29954 | Critical | 9.8 | 2021-06-24 | Proxy functionality built into Hubs Cloud’s Reticulum software allowed access to internal URLs, including the metadata service. This vulnerability affects Hubs… |
CVE-2021-29953 | Medium | 6.1 | 2021-06-24 | A malicious webpage could have forced a Firefox for Android user into executing attacker-controlled JavaScript in the context of another domain, resulting in a… |
CVE-2021-29952 | High | 7.5 | 2021-06-24 | When Web Render components were destructed, a race condition could have caused undefined behavior, and we presume that with enough effort may have been exploit… |
CVE-2021-29951 | Medium | 6.5 | 2021-06-24 | The Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which, in a domain network, grants normal remote users access to start or stop th… |
CVE-2021-29950 | High | 7.5 | 2021-06-24 | Thunderbird unprotects a secret OpenPGP key prior to using it for a decryption, signing or key import task. If the task runs into a failure, the secret key may… |
CVE-2021-29949 | High | 7.8 | 2021-06-24 | When loading the shared library that provides the OTR protocol implementation, Thunderbird will initially attempt to open it using a filename that isn't distri… |
CVE-2021-29948 | Low | 2.5 | 2021-06-24 | Signatures are written to disk before and read during verification, which might be subject to a race condition when a malicious local process or user is replac… |
CVE-2021-29947 | High | 8.8 | 2021-06-24 | Mozilla developers and community members reported memory safety bugs present in Firefox 87. Some of these bugs showed evidence of memory corruption and we pres… |
CVE-2021-29946 | High | 8.8 | 2021-06-24 | Ports that were written as an integer overflow above the bounds of a 16-bit integer could have bypassed port blocking restrictions when used in the Alt-Svc hea… |
CVE-2021-29945 | Medium | 6.5 | 2021-06-24 | The WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read and result in a crash. *Note: This issue only affected x86-32… |
CVE-2021-29944 | Medium | 6.1 | 2021-06-24 | Lack of escaping allowed HTML injection when a webpage was viewed in Reader View. While a Content Security Policy prevents direct code execution, HTML injectio… |
CVE-2021-24002 | High | 8.8 | 2021-06-24 | When a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the newlines would have been interpreted as such and allowed arbitrary c… |
CVE-2021-24001 | Medium | 4.3 | 2021-06-24 | A compromised content process could have performed session history manipulations it should not have been able to due to testing infrastructure that was not res… |
CVE-2021-24000 | Low | 3.1 | 2021-06-24 | A race condition with requestPointerLock() and setTimeout() could have resulted in a user interacting with one tab when they believed they were on a separate t… |
CVE-2021-23999 | High | 8.8 | 2021-06-24 | If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional privileges that should… |
CVE-2021-23998 | Medium | 6.5 | 2021-06-24 | Through complicated navigations with new windows, an HTTP page could have inherited a secure lock icon from an HTTPS page. This vulnerability affects Firefox E… |
CVE-2021-23997 | High | 8.8 | 2021-06-24 | Due to unexpected data type conversions, a use-after-free could have occurred when interacting with the font cache. We presume that with enough effort this cou… |
CVE-2021-23996 | Medium | 6.5 | 2021-06-24 | By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could… |
CVE-2021-23995 | High | 8.8 | 2021-06-24 | When Responsive Design Mode was enabled, it used references to objects that were previously freed. We presume that with enough effort this could have been expl… |
CVE-2021-23994 | High | 8.8 | 2021-06-24 | A WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out of bound write. This vulnerability affects Firefox ESR < 78.10… |
CVE-2021-23993 | Medium | 6.5 | 2021-06-24 | An attacker may perform a DoS attack to prevent a user from sending encrypted email to a correspondent. If an attacker creates a crafted OpenPGP key with a sub… |
CVE-2021-23992 | Medium | 4.3 | 2021-06-24 | Thunderbird did not check if the user ID associated with an OpenPGP key has a valid self signature. An attacker may create a crafted version of an OpenPGP key… |
CVE-2021-23991 | Medium | 6.8 | 2021-06-24 | If a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended the validity period of her key, but Alice's updated key has not yet b… |
CVE-2021-30547 | High | 8.8 | 2021-06-15 | Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted… |
CVE-2011-3656 | Medium | 6.1 | 2021-06-02 | Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.6.24 and 4.x through 7 allows remote attackers to inject arbitrary web script or HTML via… |
CVE-2020-12403 | Critical | 9.1 | 2021-05-27 | A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Chacha20, it could cause out-of-bounds read… |
CVE-2007-5967 | Medium | 6.5 | 2021-05-17 | A flaw in Mozilla's embedded certificate code might allow web sites to install root certificates on devices without user approval. |
CVE-2021-23988 | High | 8.8 | 2021-03-31 | Mozilla developers reported memory safety bugs present in Firefox 86. Some of these bugs showed evidence of memory corruption and we presume that with enough e… |
CVE-2021-23987 | High | 8.8 | 2021-03-31 | Mozilla developers and community members reported memory safety bugs present in Firefox 86 and Firefox ESR 78.8. Some of these bugs showed evidence of memory c… |
CVE-2021-23986 | Medium | 6.5 | 2021-03-31 | A malicious extension with the 'search' permission could have installed a new search engine whose favicon referenced a cross-origin URL. The response to this c… |
CVE-2021-23985 | Medium | 6.5 | 2021-03-31 | If an attacker is able to alter specific about:config values (for example malware running on the user's computer), the Devtools remote debugging feature could… |
CVE-2021-23984 | Medium | 6.5 | 2021-03-31 | A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable… |
CVE-2021-23983 | Medium | 6.5 | 2021-03-31 | By causing a transition on a parent node by removing a CSS rule, an invalid property for a marker could have been applied, resulting in memory corruption and a… |
CVE-2021-23982 | Medium | 6.5 | 2021-03-31 | Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on… |
CVE-2021-23981 | High | 8.1 | 2021-03-31 | A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a… |
CVE-2021-20628 | Medium | 6.1 | 2021-03-18 | Cross-site scripting vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspecified vect… |
CVE-2021-21354 | High | 7.4 | 2021-03-08 | Pollbot is open source software which "frees its human masters from the toilsome task of polling for the state of things during the Firefox release process." I… |
CVE-2021-23979 | High | 8.8 | 2021-02-26 | Mozilla developers reported memory safety bugs present in Firefox 85. Some of these bugs showed evidence of memory corruption and we presume that with enough e… |
CVE-2021-23978 | High | 8.8 | 2021-02-26 | Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some of these bugs showed evidence of memory corruption and we presu… |
CVE-2021-23965 | High | 8.8 | 2021-02-26 | Mozilla developers reported memory safety bugs present in Firefox 84. Some of these bugs showed evidence of memory corruption and we presume that with enough e… |
CVE-2021-23964 | High | 8.8 | 2021-02-26 | Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some of these bugs showed evidence of memory corruption and we presu… |
CVE-2021-23977 | Medium | 5.3 | 2021-02-26 | Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a malicious application to read sensitive data from application direct… |
CVE-2021-23963 | Medium | 4.3 | 2021-02-26 | When sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC sharing state in the user interface, leading to loss of control ove… |
CVE-2021-23962 | High | 8.8 | 2021-02-26 | Incorrect use of the '<RowCountChanged>' method could have led to a user-after-poison and a potentially exploitable crash. This vulnerability affects Firefox <… |
CVE-2021-23961 | High | 7.4 | 2021-02-26 | Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as servi… |
CVE-2021-23960 | High | 8.8 | 2021-02-26 | Performing garbage collection on re-declared JavaScript variables resulted in a user-after-poison, and a potentially exploitable crash. This vulnerability affe… |
CVE-2021-23959 | Medium | 6.1 | 2021-02-26 | An XSS bug in internal error pages could have led to various spoofing attacks, including other error pages and the address bar. Note: This issue only affected… |
CVE-2021-23958 | Medium | 6.5 | 2021-02-26 | The browser could have been confused into transferring a screen sharing state into another tab, which would leak unintended information. This vulnerability aff… |
CVE-2021-23957 | High | 7.4 | 2021-02-26 | Navigations through the Android-specific `intent` URL scheme could have been misused to escape iframe sandbox. Note: This issue only affected Firefox for Andro… |
CVE-2021-23956 | Medium | 6.5 | 2021-02-26 | An ambiguous file picker design could have confused users who intended to select and upload a single file into uploading a whole directory. This was addressed… |
CVE-2021-23955 | Medium | 6.1 | 2021-02-26 | The browser could have been confused into transferring a pointer lock state into another tab, which could have lead to clickjacking attacks. This vulnerability… |
CVE-2021-23954 | High | 8.8 | 2021-02-26 | Using the new logical assignment operators in a JavaScript switch statement could have caused a type confusion, leading to a memory corruption and a potentiall… |
CVE-2021-23953 | Medium | 4.3 | 2021-02-26 | If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin information, when said information is served as c… |
CVE-2021-23976 | High | 8.1 | 2021-02-26 | When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp mani… |
CVE-2021-23975 | Medium | 6.5 | 2021-02-26 | The developer page about:memory has a Measure function for exploring what object types the browser has allocated and their sizes. When this function was invoke… |
CVE-2021-23974 | Medium | 6.1 | 2021-02-26 | The DOMParser API did not properly process '<noscript>' elements for escaping. This could be used as an mXSS vector to bypass an HTML Sanitizer. This vulnerabi… |
CVE-2021-23973 | Medium | 6.5 | 2021-02-26 | When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed infor… |
CVE-2021-23972 | High | 8.8 | 2021-02-26 | One phishing tactic on the web is to provide a link with HTTP Auth. For example 'https://www.phishingtarget.com@evil.com'. To mitigate this type of attack, Fir… |
CVE-2021-23971 | Medium | 6.5 | 2021-02-26 | When processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the redirect's Referrer-Policy. This would have potentially resulted… |
CVE-2021-23970 | Medium | 6.5 | 2021-02-26 | Context-specific code was included in a shared jump table; resulting in assertions being triggered in multithreaded wasm code. This vulnerability affects Firef… |
CVE-2021-23969 | Medium | 4.3 | 2021-02-26 | As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure that the source file is the URL requested… |
CVE-2021-23968 | Medium | 4.3 | 2021-02-26 | If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported in the violation report; as opposed to… |
CVE-2020-16012 | Medium | 4.3 | 2021-01-08 | Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2020-35114 | High | 8.8 | 2021-01-07 | Mozilla developers reported memory safety bugs present in Firefox 83. Some of these bugs showed evidence of memory corruption and we presume that with enough e… |
CVE-2020-35113 | High | 8.8 | 2021-01-07 | Mozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some of these bugs showed evidence of memory corruption and we presu… |
CVE-2020-35112 | High | 8.8 | 2021-01-07 | If a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the downloads panel, if there was an executable file in the downloads d… |
CVE-2020-35111 | Medium | 4.3 | 2021-01-07 | When an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest callback was not triggered for view-source URLs. While web co… |
CVE-2020-26979 | Medium | 6.1 | 2021-01-07 | When a user typed a URL in the address bar or the search bar and quickly hit the enter key, a website could sometimes capture that event and then redirect the… |
CVE-2020-26978 | Medium | 6.1 | 2021-01-07 | Using techniques that built on the slipstream research, a malicious webpage could have exposed both an internal network's hosts as well as services running on… |
CVE-2020-26977 | Medium | 6.5 | 2021-01-07 | By attempting to connect a website using an unresponsive port, an attacker could have controlled the content of a tab while the URL bar displayed the original… |
CVE-2020-26976 | Medium | 6.5 | 2021-01-07 | When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former, the service worker could have intercepted the request… |
CVE-2020-26975 | Medium | 6.5 | 2021-01-07 | When a malicious application installed on the user's device broadcast an Intent to Firefox for Android, arbitrary headers could have been specified, leading to… |
CVE-2020-26974 | High | 8.8 | 2021-01-07 | When flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been incorrectly cast to the wrong type. This resulted in a heap user-af… |
CVE-2020-26973 | High | 8.8 | 2021-01-07 | Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed. This could have been used as a sanitizer bypass. This vulnerab… |
CVE-2020-26972 | Critical | 9.8 | 2021-01-07 | The lifecycle of IPC Actors allows managed actors to outlive their manager actors; and the former must ensure that they are not attempting to use a dead actor… |
CVE-2020-26971 | High | 8.8 | 2021-01-07 | Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video drivers. This vulnerability affects Fire… |
CVE-2020-26970 | High | 8.8 | 2020-12-09 | When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended to contain just one byte. Depending on p… |
CVE-2020-26969 | High | 8.8 | 2020-12-09 | Mozilla developers reported memory safety bugs present in Firefox 82. Some of these bugs showed evidence of memory corruption and we presume that with enough e… |
CVE-2020-26968 | High | 8.8 | 2020-12-09 | Mozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some of these bugs showed evidence of memory corruption and we presu… |
CVE-2020-26967 | Medium | 6.5 | 2020-12-09 | When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox Screenshots into interacting with elements other than thos… |
CVE-2020-26966 | Medium | 6.5 | 2020-12-09 | Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a hostname consisting of that string; res… |
CVE-2020-26965 | Medium | 6.5 | 2020-12-09 | Some websites have a feature "Show Password" where clicking a button will change a password field into a textbook field, revealing the typed password. If, when… |
CVE-2020-26964 | Medium | 6.8 | 2020-12-09 | If the Remote Debugging via USB feature was enabled in Firefox for Android on an Android version prior to Android 6.0, untrusted apps could have connected to t… |
CVE-2020-26963 | Medium | 4.3 | 2020-12-09 | Repeated calls to the history and location interfaces could have been used to hang the browser. This was addressed by introducing rate-limiting to these API ca… |
CVE-2020-26962 | Medium | 6.1 | 2020-12-09 | Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjac… |
CVE-2020-26961 | Medium | 6.5 | 2020-12-09 | When DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the responses as these do not make sense coming from a DoH resolver… |
CVE-2020-26960 | High | 8.8 | 2020-12-09 | If the Compact() method was called on an nsTArray, the array could have been reallocated without updating other pointers, leading to a potential use-after-free… |
CVE-2020-26959 | High | 8.8 | 2020-12-09 | During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corruption, and a potent… |