Browse CVEs

CRITICAL 9.8 CVE-2025-11709 A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. This vuln… Firefox 115.29.0 / 140.4.0+ Fix from $2,3002025-10-14 HIGH 8.8 CVE-2025-11714 Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showe… Firefox 115.29.0 / 140.4.0+ Fix from $1,9502025-10-14 CRITICAL 9.8 CVE-2025-49709 Certain canvas operations could have lead to memory corruption. This vulnerability was fixed in Firefox 139.0.4. Firefox 139.0.4+ Fix from $2,3002025-06-11 HIGH 7.3 CVE-2025-5272 Memory safety bugs present in Firefox 138 and Thunderbird 138. Some of these bugs showed evidence of memory corruption and we presume that with enoug… Firefox 139.0+ Fix from $1,9502025-05-27 HIGH 8.1 CVE-2025-5269 Memory safety bug present in Firefox ESR 128.10, and Thunderbird 128.10. This bug showed evidence of memory corruption and we presume that with enoug… Firefox 128.11.0+ Fix from $1,9502025-05-27 CRITICAL 9.8 CVE-2025-4918EPSS 9% An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object. This vulnerability was fixed in Firefox 138.0.4, Fir… Firefox 115.23.1 / 128.10.1+ Fix from $2,3002025-05-17 HIGH 8.8 CVE-2025-4919EPSS 9% An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability was fixed in… Firefox 115.23.1 / 128.10.1+ Fix from $1,9502025-05-17 HIGH 8.1 CVE-2025-3034 Memory safety bugs present in Firefox 136 and Thunderbird 136. Some of these bugs showed evidence of memory corruption and we presume that with enoug… Firefox 137.0+ Fix from $1,9502025-04-01 MEDIUM 6.5 CVE-2025-1938 Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed evidence of memory co… Firefox 128.7.0 / 135.0+ Fix from $1,6002025-03-04 MEDIUM 6.5 CVE-2025-1414 Memory safety bugs present in Firefox 135. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of the… Firefox 135.0.1+ Fix from $1,6002025-02-18 CRITICAL 9.8 CVE-2025-1016 Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6. Some of… Firefox 115.20.0 / 128.7.0+ Fix from $2,3002025-02-04 CRITICAL 9.8 CVE-2025-1017 Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6. Some of these bugs showed evidence of memory co… Firefox 128.7.0 / 135.0+ Fix from $2,3002025-02-04 CRITICAL 9.8 CVE-2025-1020 Memory safety bugs present in Firefox 134 and Thunderbird 134. Some of these bugs showed evidence of memory corruption and we presume that with enoug… Firefox 135.0+ Fix from $2,3002025-02-04 CRITICAL 9.8 CVE-2025-0247EPSS 9% Memory safety bugs present in Firefox 133 and Thunderbird 133. Some of these bugs showed evidence of memory corruption and we presume that with enoug… Firefox 134.0+ Fix from $2,3002025-01-07 MEDIUM 6.5 CVE-2025-0242EPSS 13% Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5, Thunderbird 115.18, and Thunderbird 128.5. Some of… Firefox 128.6.0 / 134.0+ Fix from $1,6002025-01-07 MEDIUM 5.1 CVE-2025-0243 Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5. Some of these bugs showed evidence of memory co… Firefox 128.6.0 / 133.0+ Fix from $1,6002025-01-07 HIGH 8.8 CVE-2024-11691 Certain WebGL operations on Apple silicon M series devices could have lead to an out-of-bounds write and memory corruption due to a flaw in Apple's G… Firefox 115.18.0 / 128.5.0+ Fix from $1,9502024-11-26 HIGH 8.8 CVE-2024-10467 Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of these bugs showed evidence of memory corruption and we p… Firefox 128.4.0 / 132.0+ Fix from $1,9502024-10-29 CRITICAL 9.8 CVE-2024-8389 Memory safety bugs present in Firefox 129. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of the… Firefox Mitigation only Fix from $2,3002024-09-03 CRITICAL 9.8 CVE-2024-8384 The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two passes. Thi… Firefox 115.15 / 128.2+ Fix from $2,3002024-09-03 CRITICAL 9.8 CVE-2024-8387 Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we p… Firefox Mitigation only Fix from $2,3002024-09-03 CRITICAL 9.6 CVE-2024-7519 Insufficient checks when processing graphics shared memory could have led to memory corruption. This could be leveraged by an attacker to perform a s… Firefox 115.14.0 / 129.0+ Fix from $2,3002024-08-06 HIGH 8.8 CVE-2024-6615 Memory safety bugs present in Firefox 127 and Thunderbird 127. Some of these bugs showed evidence of memory corruption and we presume that with enoug… Firefox 128.0+ Fix from $1,9502024-07-09 CRITICAL 9.8 CVE-2024-5695 If an out-of-memory condition occurs at a specific point using allocations in the probabilistic heap checker, an assertion could have been triggered,… Firefox 127.0+ Fix from $2,3002024-06-11 CRITICAL 9.8 CVE-2024-5701 Memory safety bugs present in Firefox 126. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of the… Firefox 127.0+ Fix from $2,3002024-06-11 HIGH 8.6 CVE-2024-5696 By manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory leading to a potentially exploitable crash. This vul… Firefox 115.12 / 127.0+ Fix from $1,9502024-06-11 HIGH 8.8 CVE-2024-4777 Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of these bugs showed evidence of memory corruption and we… Firefox 115.11.0 / 126.0+ Fix from $1,9502024-05-14 CRITICAL 9.8 CVE-2024-29943EPSS 23% An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination. This vulnerabi… Firefox 124.0.1+ Fix from $2,3002024-03-22 CRITICAL 9.8 CVE-2024-2615 Memory safety bugs present in Firefox 123. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of the… Firefox 124.0+ Fix from $2,3002024-03-19 HIGH 8.8 CVE-2024-2614 Memory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of these bugs showed evidence of memory corruption and we p… Firefox 115.8.0 / 123.0+ Fix from $1,9502024-03-19