Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,126

Export CSV
CVE-2022-31736

Mozilla: Cross-Origin resource's length leaked

A malicious website could have learned the size of a cross-origin resource that supported Range requests. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Mozilla Redhat
Products
Firefox Firefox Esr Thunderbird and 3 more
CVE-2022-2505

Mozilla: Memory safety bugs fixed in Firefox 103 and 102.1

Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 102.1, Firefox < 103, and Thunderbird < 102.1.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Mozilla Redhat
Products
Firefox Firefox Esr Thunderbird and 3 more
CVE-2022-2226

Mozilla: An email with a mismatching OpenPGP signature date was accepted as valid

An OpenPGP digital signature includes information about the date when the signature was created. When displaying an email that contains a digital signature, the email's date will be shown. If the dates were different, then Thunderbird didn't report the email as having an invalid signature. If an attacker performed a replay attack, in which an old email with old contents are resent at a later time, it could lead the victim to believe that the statements in the email are current. Fixed versions of Thunderbird will require that the signature's date roughly matches the displayed date of the email. This vulnerability affects Thunderbird < 102 and Thunderbird < 91.11.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Mozilla Redhat
Products
Thunderbird Enterprise Linux Rhel E4s and 1 more
CVE-2022-2200

Mozilla: Undesired attributes could be set as part of prototype pollution

If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading to privileged code execution. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11.

CVSS 3.1 · 8.8 High EPSS 23.9% KEV · Not listed
Vendors
Mozilla Redhat
Products
Firefox Firefox Esr Thunderbird and 3 more
CVE-2022-29917

Mozilla: Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9

Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 99 and Firefox ESR 91.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Mozilla Redhat
Products
Firefox Firefox Esr Thunderbird and 3 more
CVE-2022-29916

Mozilla: Leaking browser history with CSS variables

Firefox behaved slightly differently for already known resources when loading CSS resources involving CSS variables. This could have been used to probe the browser history. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Mozilla Redhat
Products
Firefox Firefox Esr Thunderbird and 3 more
CVE-2022-46875

Mozilla: Download Protections were bypassed by .atloc and .ftploc files on Mac OS

The executable file warning was not presented when downloading .atloc and .ftploc files, which can run commands on a user's computer. <br>*Note: This issue only affected Mac OS operating systems. Other operating systems are unaffected.*. This vulnerability affects Firefox < 108, Firefox ESR < 102.6, and Thunderbird < 102.6.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Apple Mozilla
Products
Macos Firefox Firefox Esr and 1 more
CVE-2016-1974

Mozilla: Out-of-bounds read in HTML parser following a failed allocation (MFSA 2016-34)

The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory allocation succeeds, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via crafted Unicode data in an HTML, XML, or SVG document.

CVSS 3.0 · 8.8 High EPSS 3.0% KEV · Not listed
Vendors
Mozilla Opensuse Oracle and 2 more
Products
Firefox Thunderbird Leap and 4 more
CVE-2016-1966

Mozilla: Memory corruption with malicious NPAPI plugin (MFSA 2016-31)

The nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference and memory corruption) via a crafted NPAPI plugin.

CVSS 3.0 · 8.8 High EPSS 2.9% KEV · Not listed
Vendors
Mozilla Opensuse Oracle and 1 more
Products
Firefox Thunderbird Opensuse and 2 more
CVE-2016-1964

Mozilla: Use-after-free during XML transformations (MFSA 2016-27)

Use-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging mishandling of XML transformations.

CVSS 3.0 · 8.8 High EPSS 2.8% KEV · Not listed
Vendors
Mozilla Opensuse Oracle and 2 more
Products
Firefox Thunderbird Leap and 4 more
CVE-2016-1961

Mozilla: Use-after-free in SetBody (MFSA 2016-24)

Use-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of a root element, aka ZDI-CAN-3574.

CVSS 3.0 · 8.8 High EPSS 2.9% KEV · Not listed
Vendors
Mozilla Opensuse Oracle and 2 more
Products
Firefox Thunderbird Leap and 4 more
CVE-2016-1960

Mozilla: Use-after-free in HTML5 string parser (MFSA 2016-23)

Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) by leveraging mishandling of end tags, as demonstrated by incorrect SVG processing, aka ZDI-CAN-3545.

CVSS 3.0 · 8.8 High EPSS 30.9% KEV · Not listed
Vendors
Mozilla Opensuse Oracle and 2 more
Products
Firefox Thunderbird Leap and 4 more
CVE-2016-1957

Mozilla: Memory leak in libstagefright when deleting an array during MP4 processing (MFSA 2016-20)

Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a denial of service (memory consumption) via an MPEG-4 file that triggers a delete operation on an array.

CVSS 3.0 · 4.3 Medium EPSS 2.2% KEV · Not listed
Vendors
Mozilla Novell Opensuse and 2 more
Products
Firefox Thunderbird Suse Package Hub For Suse Linux Enterprise and 4 more
CVE-2016-1954

Mozilla: Local file overwriting and potential privilege escalation through CSP reports (MFSA 2016-17)

The nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not prevent use of a non-HTTP report-uri for a Content Security Policy (CSP) violation report, which allows remote attackers to cause a denial of service (data overwrite) or possibly gain privileges by specifying a URL of a local file.

CVSS 3.0 · 8.8 High EPSS 2.3% KEV · Not listed
Vendors
Mozilla Novell Opensuse and 2 more
Products
Firefox Thunderbird Suse Package Hub For Suse Linux Enterprise and 4 more
CVE-2016-1953

Mozilla: Miscellaneous memory safety hazards (rv:45.0) (MFSA 2016-16)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to js/src/jit/arm/Assembler-arm.cpp, and unknown other vectors.

CVSS 3.0 · 8.8 High EPSS 3.2% KEV · Not listed
Vendors
Mozilla Novell Opensuse
Products
Firefox Thunderbird Suse Package Hub For Suse Linux Enterprise and 2 more
CVE-2016-1952

Mozilla: Miscellaneous memory safety hazards (rv:38.7) (MFSA 2016-16)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVSS 3.0 · 8.8 High EPSS 3.0% KEV · Not listed
Vendors
Mozilla Novell Opensuse and 2 more
Products
Firefox Thunderbird Suse Package Hub For Suse Linux Enterprise and 4 more
CVE-2016-1526

graphite2: Out-of-bounds read vulnerability in TfUtil:LocaLookup

The TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, incorrectly validates a size value, which allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.

CVSS 3.0 · 8.1 High EPSS 2.3% KEV · Not listed
Vendors
Debian Fedoraproject Mozilla and 2 more
Products
Debian Linux Fedora Firefox and 3 more
CVE-2016-1523

graphite2: Heap-based buffer overflow in context item handling functionality

The SillMap::readFace function in FeatureMap.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, mishandles a return value, which allows remote attackers to cause a denial of service (missing initialization, NULL pointer dereference, and application crash) via a crafted Graphite smart font.

CVSS 3.0 · 6.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Debian Fedoraproject Mozilla and 2 more
Products
Debian Linux Fedora Firefox and 3 more
CVE-2016-1522

graphite2: Null pointer dereference and out-of-bounds access vulnerabilities

Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider recursive load calls during a size check, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 8.3% KEV · Not listed
Vendors
Debian Fedoraproject Mozilla and 2 more
Products
Debian Linux Fedora Firefox and 3 more
CVE-2016-1521

graphite2: Out-of-bound read vulnerability triggered by crafted fonts

The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not validate a certain skip operation, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 4.1% KEV · Not listed
Vendors
Debian Fedoraproject Mozilla and 2 more
Products
Debian Linux Fedora Firefox and 3 more