Browse CVEs

MEDIUM 5.5 CVE-2022-36314 When opening a Windows shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from… Firefox 102.1 / 103.0+ Fix from $1,6002022-12-22 HIGH 7.0 CVE-2022-22736 If Firefox was installed to a world-writable directory, a local privilege escalation could occur when Firefox searched the current directory for syst… Firefox 96.0+ Fix from $1,9502022-12-22 HIGH 7.8 CVE-2021-29949 When loading the shared library that provides the OTR protocol implementation, Thunderbird will initially attempt to open it using a filename that is… Thunderbird 78.9.1+ Fix from $1,9502021-06-24 HIGH 8.8 CVE-2020-15663 If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system… Firefox 68.12 / 78.2+ Fix from $1,9502020-10-01 HIGH 7.8 CVE-2020-15657 Firefox could be made to load attacker-supplied DLL files from the installation directory. This required an attacker that is already capable of placi… Firefox 78.1 / 79.0+ Fix from $1,9502020-08-10 HIGH 7.8 CVE-2020-12423 When the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one was placed in a folder in the user's %PATH%, Firefox m… Firefox 78.0+ Fix from $1,9502020-07-09 HIGH 7.8 CVE-2017-7836 The "pingsender" executable used by the Firefox Health Report dynamically loads a system copy of libcurl, which an attacker could replace. This allow… Firefox after 56.0.2 Fix from $1,9502018-06-11