Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Firefox
MEDIUM 6.5
Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. This could lead to a po…
Firefox
MEDIUM 6.5
When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds. This may have lead f…
Firefox
MEDIUM 5.4
A background script invoking <code>requestFullscreen</code> and then blocking the main thread could force the browser into fullscreen mode indefinite…
Firefox
HIGH 8.8
An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mi…
Firefox
HIGH 8.8
Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108 and Firefox ESR 102.6. Some of these bugs showed e…
Firefox
HIGH 8.8
Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108. Some of these bugs showed evidence of memory corr…
Certificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed with a revoked certificate would be displayed as hav…
OCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted email, and revoked certificates would be accepted. Thu…
If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which cou…
Firefox Esr
MEDIUM 6.5
Unexpected data returned from the Safe Browsing API could have led to memory corruption and a potentially exploitable crash. This vulnerability affec…
Firefox
MEDIUM 6.5
A compromised web child process could disable web security opening restrictions, leading to a new child process being spawned within the `file://` co…
Firefox
MEDIUM 6.5
Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs containing file URLs as being dragged a w…
Firefox
MEDIUM 6.5
When copying a network request from the developer tools panel as a curl command the output was not being properly sanitized and could allow arbitrary…
Firefox
MEDIUM 6.5
Per origin notification permissions were being stored in a way that didn't take into account what browsing context the permission was granted in. Thi…
Firefox
MEDIUM 6.5
Navigations were being allowed when dragging a URL from a cross-origin iframe into the same tab which could lead to website spoofing attacks This vul…
Firefox
MEDIUM 6.5
A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src header to be ignored. This could …
Firefox
MEDIUM 6.5
Regular expressions used to filter out forbidden properties and values from style directives in calls to `console.log` weren't accounting for externa…
Firefox
MEDIUM 6.5
A duplicate `SystemPrincipal` object could be created when parsing a non-system html document via `DOMParser::ParseFromSafeString`. This could have l…
Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird ver…
bleach.clean behavior parsing style attributes could result in a regular expression denial of service (ReDoS). Calls to bleach.clean with an allowed …
Firefox Mobile
MEDIUM 6.1
Scanning a QR code that contained a javascript: URL would have resulted in the Javascript being executed.
A mutation XSS affects users calling bleach.clean with all of: svg or math in the allowed tags p or br in allowed tags style, title, noscript, script…
open redirect in pollbot (pollbot.services.mozilla.com) in versions before 1.4.6
Firefox
MEDIUM 5.9
The Raccoon attack is a timing attack on DHE ciphersuites inherit in the TLS specification. To mitigate this vulnerability, Firefox disabled support …
Firefox
HIGH 8.8
Mozilla developers Timothy Nikkel, Ashley Hale, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 105. Some of these bugs s…
Firefox
CRITICAL 9.8
A use-after-free in WebGL extensions could have led to a potentially exploitable crash. This vulnerability affects Firefox < 107, Firefox ESR < 102.6…
Firefox
HIGH 8.8
Mozilla developers and community members Lukas Bernhard, Gabriele Svelto, Randell Jesup, and the Mozilla Fuzzing Team reported memory safety bugs pre…
Firefox
HIGH 8.8
An optimization in WebGL was incorrect in some cases, and could have led to memory corruption and a potentially exploitable crash. *Note*: This advis…
Firefox
HIGH 8.8
Mozilla developers Gabriele Svelto, Yulia Startsev, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 106.…
Firefox
MEDIUM 6.5
A missing check related to tex units could have led to a use-after-free and potentially exploitable crash.<br />*Note*: This advisory was added on De…