Browse CVEs

MEDIUM 5.3 CVE-2026-14906 Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the Firefox for iOS applicatio… Firefox Mobile 152.4+ Fix from $1,6002026-07-13 HIGH 8.1 CVE-2025-6435 If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not have been saved with the `.downl… Firefox 140.0+ Fix from $1,9502025-06-24 CRITICAL 9.8 CVE-2024-3863 The executable file warning was not presented when downloading .xrm-ms files. *Note: This issue only affected Windows operating systems. Other oper… Firefox 115.10 / 115.10.0+ Fix from $2,3002024-04-16 HIGH 7.8 CVE-2023-37208 When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Fire… Firefox 102.13 / 115.0+ Fix from $1,9502023-07-05 HIGH 7.8 CVE-2022-45415 When downloading an HTML file, if the title of the page was formatted as a filename with a malicious extension, Firefox may have saved the file with … Firefox 107.0+ Fix from $1,9502022-12-22 HIGH 8.8 CVE-2022-34482 An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to contain an exe… Firefox 102.0+ Fix from $1,9502022-12-22 HIGH 8.8 CVE-2022-34483 An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to contain an exe… Firefox 102.0+ Fix from $1,9502022-12-22 HIGH 7.8 CVE-2022-0517 Mozilla VPN can load an OpenSSL configuration file from an unsecured directory. A user or attacker with limited privileges could leverage this to lau… Vpn 2.7.1+ Fix from $1,9502022-12-22 MEDIUM 5.5 CVE-2020-15649 Given an installed malicious file picker application, an attacker was able to steal and upload local files of their choosing, regardless of the actua… Firefox Esr 68.11+ Fix from $1,6002020-08-10