Vulnerability index

Browse CVEs

9 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Unrestricted File UploadCWE-434 × clear
Firefox Mobile MEDIUM 5.3
CVE-2026-14906

Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the Firefox for iOS applicatio…

Fix: 152.4+
Fix from $1,600 2026-07-13
Firefox HIGH 8.1
CVE-2025-6435

If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not have been saved with the `.downl…

Fix: 140.0+
Fix from $1,950 2025-06-24
Firefox CRITICAL 9.8
CVE-2024-3863

The executable file warning was not presented when downloading .xrm-ms files. *Note: This issue only affected Windows operating systems. Other oper…

Fix: 115.10 / 115.10.0+
Fix from $2,300 2024-04-16
Firefox HIGH 7.8
CVE-2023-37208

When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Fire…

Fix: 102.13 / 115.0+
Fix from $1,950 2023-07-05
Firefox HIGH 7.8
CVE-2022-45415

When downloading an HTML file, if the title of the page was formatted as a filename with a malicious extension, Firefox may have saved the file with …

Fix: 107.0+
Fix from $1,950 2022-12-22
Firefox HIGH 8.8
CVE-2022-34482

An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to contain an exe…

Fix: 102.0+
Fix from $1,950 2022-12-22
Firefox HIGH 8.8
CVE-2022-34483

An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to contain an exe…

Fix: 102.0+
Fix from $1,950 2022-12-22
Vpn HIGH 7.8
CVE-2022-0517

Mozilla VPN can load an OpenSSL configuration file from an unsecured directory. A user or attacker with limited privileges could leverage this to lau…

Fix: 2.7.1+
Fix from $1,950 2022-12-22
Firefox Esr MEDIUM 5.5
CVE-2020-15649

Given an installed malicious file picker application, an attacker was able to steal and upload local files of their choosing, regardless of the actua…

Fix: 68.11+
Fix from $1,600 2020-08-10