Mozilla
Page 9 of 38 — Mozilla CVEs from a corpus of 3730, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-5721 | Medium | 4.3 | 2023-10-25 | It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an insufficient activation-delay. This… |
CVE-2023-5496 | Low | 3.1 | 2023-10-10 | A vulnerability was found in Translator PoqDev Add-On 1.0.11 on Firefox. It has been rated as problematic. This issue affects some unknown processing of the co… |
CVE-2023-42808 | Medium | 6.1 | 2023-10-04 | Common Voice is the web app for Mozilla Common Voice, a platform for collecting speech donations in order to create public domain datasets for training voice r… |
CVE-2023-5217 | High | 8.8 | 2023-09-28 | Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap… |
CVE-2023-5176 | Critical | 9.8 | 2023-09-27 | Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs showed evidence of memory corruption and we presume tha… |
CVE-2023-5175 | Critical | 9.8 | 2023-09-27 | During process shutdown, it was possible that an `ImageBitmap` was created that would later be used after being freed from a different codepath, leading to a p… |
CVE-2023-5174 | Critical | 9.8 | 2023-09-27 | If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-after-free a… |
CVE-2023-5173 | High | 7.5 | 2023-09-27 | In a non-standard configuration of Firefox, an integer overflow could have occurred based on network traffic (possibly under influence of a local unprivileged… |
CVE-2023-5172 | Critical | 9.8 | 2023-09-27 | A hashtable in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential use-after-free and exploitable crash… |
CVE-2023-5171 | Medium | 6.5 | 2023-09-27 | During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and cause a potent… |
CVE-2023-5170 | High | 7.4 | 2023-09-27 | In canvas rendering, a compromised content process could have caused a surface to change unexpectedly, leading to a memory leak of a privileged process. This m… |
CVE-2023-5169 | Medium | 6.5 | 2023-09-27 | A compromised content process could have provided malicious data in a `PathRecording` resulting in an out-of-bounds write, leading to a potentially exploitable… |
CVE-2023-5168 | Critical | 9.8 | 2023-09-27 | A compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds write, leading to a potentially exploitable… |
CVE-2023-4863 | High | 8.8 | 2023-09-12 | Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write v… |
CVE-2023-4585 | High | 8.8 | 2023-09-11 | Memory safety bugs present in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume tha… |
CVE-2023-4584 | High | 8.8 | 2023-09-11 | Memory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird 115.1. Some of these bugs showed evidence… |
CVE-2023-4583 | High | 7.5 | 2023-09-11 | When checking if the Browsing Context had been discarded in `HttpBaseChannel`, if the load group was not available then it was assumed to have already been dis… |
CVE-2023-4582 | High | 8.8 | 2023-09-11 | Due to large allocation checks in Angle for glsl shaders being too lenient a buffer overflow could have occurred when allocating too much private shader memory… |
CVE-2023-4581 | Medium | 4.3 | 2023-09-11 | Excel `.xll` add-in files did not have a blocklist entry in Firefox's executable blocklist which allowed them to be downloaded without any warning of their pot… |
CVE-2023-4580 | Medium | 6.5 | 2023-09-11 | Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information. This vulnerability… |
CVE-2023-4579 | Low | 3.1 | 2023-09-11 | Search queries in the default search engine could appear to have been the currently navigated URL if the search query itself was a well formed URL. This could… |
CVE-2023-4578 | Medium | 6.5 | 2023-09-11 | When calling `JS::CheckRegExpSyntax` a Syntax Error could have been set which would end in calling `convertToRuntimeErrorAndClear`. A path in the function coul… |
CVE-2023-4577 | Medium | 6.5 | 2023-09-11 | When `UpdateRegExpStatics` attempted to access `initialStringHeap` it could already have been garbage collected prior to entering the function, which could pot… |
CVE-2023-4576 | High | 8.6 | 2023-09-11 | On Windows, an integer overflow could occur in `RecordedSourceSurfaceCreation` which resulted in a heap buffer overflow potentially leaking sensitive data that… |
CVE-2023-4575 | Medium | 6.5 | 2023-09-11 | When creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been created at a time and eventually all simul… |
CVE-2023-4574 | Medium | 6.5 | 2023-09-11 | When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simu… |
CVE-2023-4104 | Medium | 5.5 | 2023-09-11 | An invalid Polkit Authentication check and missing authentication requirements for D-Bus methods allowed any local user to configure arbitrary VPN setups. *Thi… |
CVE-2023-4573 | Medium | 6.5 | 2023-09-11 | When receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a use-after-free causing a potentially exp… |
CVE-2022-46884 | High | 8.8 | 2023-08-24 | A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time. This could have lead to memory corr… |
CVE-2023-4058 | Critical | 9.8 | 2023-08-01 | Memory safety bugs present in Firefox 115. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could h… |
CVE-2023-4057 | Critical | 9.8 | 2023-08-01 | Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of these bugs showed evidence of memory corruption and we presume tha… |
CVE-2023-4056 | Critical | 9.8 | 2023-08-01 | Memory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115.0, and Thunderbird 102.13. Some of these bugs showed evidence… |
CVE-2023-4055 | High | 7.5 | 2023-08-01 | When the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar sent to the host was no longer consistent with expected cookie j… |
CVE-2023-4054 | Medium | 5.5 | 2023-08-01 | When opening appref-ms files, Firefox did not warn the user that these files may contain malicious code. *This bug only affects Firefox on Windows. Other oper… |
CVE-2023-4053 | Medium | 6.5 | 2023-08-01 | A website could have obscured the full screen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have l… |
CVE-2023-4052 | Medium | 6.5 | 2023-08-01 | The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted w… |
CVE-2023-4051 | High | 7.5 | 2023-08-01 | A website could have obscured the full screen notification by using the file open dialog. This could have led to user confusion and possible spoofing attacks… |
CVE-2023-4050 | High | 7.5 | 2023-08-01 | In some cases, an untrusted input stream was copied to a stack buffer without checking its size. This resulted in a potentially exploitable crash which could h… |
CVE-2023-4049 | Medium | 5.9 | 2023-08-01 | Race conditions in reference counting code were found through code inspection. These could have resulted in potentially exploitable use-after-free vulnerabilit… |
CVE-2023-4048 | High | 7.5 | 2023-08-01 | An out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in low memory situations. This vulnerability affects Firefox < 11… |
CVE-2023-4047 | High | 8.8 | 2023-08-01 | A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affect… |
CVE-2023-4046 | Medium | 5.3 | 2023-08-01 | In some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect compilation and a potentially… |
CVE-2023-4045 | Medium | 5.3 | 2023-08-01 | Offscreen Canvas did not properly track cross-origin tainting, which could have been used to access image data from another site in violation of same-origin po… |
CVE-2023-3417 | High | 7.5 | 2023-07-24 | Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment could be incorrectly shown as being a document file, while… |
CVE-2023-3600 | High | 8.8 | 2023-07-12 | During the worker lifecycle, a use-after-free condition could have occurred, which could have led to a potentially exploitable crash. This vulnerability affect… |
CVE-2023-37456 | Medium | 6.5 | 2023-07-12 | The session restore helper crashed whenever there was no parameter sent to the message handler. This vulnerability affects Firefox for iOS < 115. |
CVE-2023-37455 | Medium | 5.4 | 2023-07-12 | The permission request prompt from the site in the background tab was overlaid on top of the site in the foreground tab. This vulnerability affects Firefox for… |
CVE-2023-3482 | Medium | 6.5 | 2023-07-05 | When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blan… |
CVE-2023-37212 | High | 8.8 | 2023-07-05 | Memory safety bugs present in Firefox 114. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could h… |
CVE-2023-37211 | High | 8.8 | 2023-07-05 | Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume t… |
CVE-2023-37210 | Medium | 6.5 | 2023-07-05 | A website could prevent a user from exiting full-screen mode via alert and prompt calls. This could lead to user confusion and possible spoofing attacks. This… |
CVE-2023-37209 | High | 8.8 | 2023-07-05 | A use-after-free condition existed in `NotifyOnHistoryReload` where a `LoadingSessionHistoryEntry` object was freed and a reference to that object remained. T… |
CVE-2023-37206 | Medium | 6.5 | 2023-07-05 | Uploading files which contain symlinks may have allowed an attacker to trick a user into submitting sensitive data to a malicious website. This vulnerability a… |
CVE-2023-37205 | Medium | 6.5 | 2023-07-05 | The use of RTL Arabic characters in the address bar may have allowed for URL spoofing. This vulnerability affects Firefox < 115. |
CVE-2023-37204 | Medium | 6.5 | 2023-07-05 | A website could have obscured the fullscreen notification by using an option element by introducing lag via an expensive computational function. This could hav… |
CVE-2023-37203 | High | 7.8 | 2023-07-05 | Insufficient validation in the Drag and Drop API in conjunction with social engineering, may have allowed an attacker to trick end-users into creating a shortc… |
CVE-2023-37208 | High | 7.8 | 2023-07-05 | When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Firefox ESR <… |
CVE-2023-37207 | Medium | 6.5 | 2023-07-05 | A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have le… |
CVE-2023-37202 | High | 8.8 | 2023-07-05 | Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-… |
CVE-2023-37201 | High | 8.8 | 2023-07-05 | An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox < 115, Firefox ESR… |
CVE-2023-34417 | Critical | 9.8 | 2023-06-19 | Memory safety bugs present in Firefox 113. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could h… |
CVE-2023-34416 | Critical | 9.8 | 2023-06-19 | Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume t… |
CVE-2023-34415 | Medium | 6.1 | 2023-06-19 | When choosing a site-isolated process for a document loaded from a data: URL that was the result of a redirect, Firefox would load that document in the same pr… |
CVE-2023-34414 | Low | 3.1 | 2023-06-19 | The error page for sites with invalid TLS certificates was missing the activation-delay Firefox uses to protect prompts and permission dialogs from attacks tha… |
CVE-2023-29546 | Medium | 6.5 | 2023-06-19 | When recording the screen while in Private Browsing on Firefox for Android the address bar and keyboard were not hidden, potentially leaking sensitive informat… |
CVE-2023-29545 | Medium | 6.5 | 2023-06-19 | Similar to CVE-2023-28163, this time when choosing 'Save Link As', suggested filenames containing environment variable names would have resolved those in the c… |
CVE-2023-29542 | Critical | 9.8 | 2023-06-19 | A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk with .downlo… |
CVE-2023-29534 | Critical | 9.1 | 2023-06-19 | Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android. These could have led to potential user confusion and spo… |
CVE-2023-25747 | High | 7.5 | 2023-06-19 | A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below version 30. *This bug only affects Firefox f… |
CVE-2023-25736 | Critical | 9.8 | 2023-06-19 | An invalid downcast from `nsHTMLDocument` to `nsIContent` could have lead to undefined behavior. This vulnerability affects Firefox < 110. |
CVE-2023-25733 | High | 7.5 | 2023-06-19 | The return value from `gfx::SourceSurfaceSkia::Map()` wasn't being verified which could have potentially lead to a null pointer dereference. This vulnerability… |
CVE-2019-25136 | Critical | 10.0 | 2023-06-19 | A compromised child process could have injected XBL Bindings into privileged CSS rules, resulting in arbitrary code execution and a sandbox escape. This vulner… |
CVE-2023-32216 | Critical | 9.8 | 2023-06-19 | Mozilla developers and community members Ronald Crane, Andrew McCreight, Randell Jesup and the Mozilla Fuzzing Team reported memory safety bugs present in Fire… |
CVE-2023-32214 | High | 7.5 | 2023-06-19 | Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service. *Note: This attack only affects Windows. Other operating… |
CVE-2023-32210 | Medium | 6.5 | 2023-06-19 | Documents were incorrectly assuming an ordering of principal objects when ensuring we were loading an appropriately privileged principal. In certain circumstan… |
CVE-2023-32209 | High | 7.5 | 2023-06-19 | A maliciously crafted favicon could have led to an out of memory crash. This vulnerability affects Firefox < 113. |
CVE-2023-32208 | Medium | 5.3 | 2023-06-19 | Service workers could reveal script base URL due to dynamic `import()`. This vulnerability affects Firefox < 113. |
CVE-2023-29532 | Medium | 5.5 | 2023-06-19 | A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file on a malicious SMB s… |
CVE-2023-29531 | Critical | 9.8 | 2023-06-19 | An attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory corruption and a potentially exploitable crash. *This bug onl… |
CVE-2023-32215 | High | 8.8 | 2023-06-02 | Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian Hengst, Andrew McCreight and the Mozilla Fuzzing Team repor… |
CVE-2023-32213 | High | 8.8 | 2023-06-02 | When reading a file, an uninitialized value could have been used as read limit. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird… |
CVE-2023-32212 | Medium | 4.3 | 2023-06-02 | An attacker could have positioned a `datalist` element to obscure the address bar. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderb… |
CVE-2023-32211 | Medium | 6.5 | 2023-06-02 | A type checking bug would have led to invalid code being compiled. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11. |
CVE-2023-32207 | High | 8.8 | 2023-06-02 | A missing delay in popup notifications could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefo… |
CVE-2023-32206 | Medium | 6.5 | 2023-06-02 | An out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102… |
CVE-2023-32205 | Medium | 4.3 | 2023-06-02 | In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and spoofing attac… |
CVE-2023-29551 | High | 8.8 | 2023-06-02 | Memory safety bugs present in Firefox 111. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could h… |
CVE-2023-29550 | High | 8.8 | 2023-06-02 | Memory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort… |
CVE-2023-29549 | Medium | 6.5 | 2023-06-02 | Under certain circumstances, a call to the <code>bind</code> function may have resulted in the incorrect realm. This may have created a vulnerability relating… |
CVE-2023-29548 | Medium | 6.5 | 2023-06-02 | A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result. This vulnerability affects Firefox < 112, Focus for Android < 1… |
CVE-2023-29547 | Medium | 6.5 | 2023-06-02 | When a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain could have been created, when it should have silently failed. Thi… |
CVE-2023-29544 | Medium | 6.5 | 2023-06-02 | If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could have caused memory corruption and a potentially exploi… |
CVE-2023-29543 | High | 8.8 | 2023-06-02 | An attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global object's debugger vector. This vulnerabil… |
CVE-2023-29541 | High | 8.8 | 2023-06-02 | Firefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be interpreted to run attacker-controlled commands. <br>*This bug… |
CVE-2023-29540 | Medium | 6.1 | 2023-06-02 | Using a redirect embedded into <code>sourceMappingUrls</code> could allow for navigation to external protocol links in sandboxed iframes without <code>allow-to… |
CVE-2023-29539 | High | 8.8 | 2023-06-02 | When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character. This could… |
CVE-2023-29538 | Medium | 4.3 | 2023-06-02 | Under specific circumstances a WebExtension may have received a <code>jar:file:///</code> URI instead of a <code>moz-extension:///</code> URI during a load req… |
CVE-2023-29537 | High | 7.5 | 2023-06-02 | Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnerability affects F… |
CVE-2023-29536 | High | 8.8 | 2023-06-02 | An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruptio… |
CVE-2023-29535 | Medium | 6.5 | 2023-06-02 | Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced. This resulted in memory corruption and a potentia… |