Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Firefox
MEDIUM 6.5
A flaw in Mozilla's embedded certificate code might allow web sites to install root certificates on devices without user approval.
Firefox
HIGH 8.8
Mozilla developers and community members reported memory safety bugs present in Firefox 86 and Firefox ESR 78.8. Some of these bugs showed evidence o…
Firefox
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 86. Some of these bugs showed evidence of memory corruption and we presume that wit…
Firefox
MEDIUM 6.5
Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services r…
Firefox
MEDIUM 6.5
By causing a transition on a parent node by removing a CSS rule, an invalid property for a marker could have been applied, resulting in memory corrup…
Firefox
MEDIUM 6.5
A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully cont…
Firefox
MEDIUM 6.5
If an attacker is able to alter specific about:config values (for example malware running on the user's computer), the Devtools remote debugging feat…
Firefox
MEDIUM 6.5
A malicious extension with the 'search' permission could have installed a new search engine whose favicon referenced a cross-origin URL. The response…
Firefox
HIGH 8.1
A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corrup…
Pollbot is open source software which "frees its human masters from the toilsome task of polling for the state of things during the Firefox release p…
Firefox
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some of these bugs showed evidence of memory corruption an…
Firefox
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 84. Some of these bugs showed evidence of memory corruption and we presume that wit…
Firefox
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some of these bugs showed evidence of memory corruption an…
Firefox
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 85. Some of these bugs showed evidence of memory corruption and we presume that wit…
Firefox
HIGH 8.8
Incorrect use of the '<RowCountChanged>' method could have led to a user-after-poison and a potentially exploitable crash. This vulnerability affects…
Firefox
MEDIUM 5.3
Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a malicious application to read sensitive data from applicat…
Firefox
HIGH 8.8
Using the new logical assignment operators in a JavaScript switch statement could have caused a type confusion, leading to a memory corruption and a …
Firefox
HIGH 8.8
Performing garbage collection on re-declared JavaScript variables resulted in a user-after-poison, and a potentially exploitable crash. This vulnerab…
Firefox
HIGH 7.4
Navigations through the Android-specific `intent` URL scheme could have been misused to escape iframe sandbox. Note: This issue only affected Firefox…
Firefox
HIGH 7.4
Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as wel…
Firefox
MEDIUM 6.5
An ambiguous file picker design could have confused users who intended to select and upload a single file into uploading a whole directory. This was …
Firefox
MEDIUM 6.5
The browser could have been confused into transferring a screen sharing state into another tab, which would leak unintended information. This vulnera…
Firefox
MEDIUM 6.1
The browser could have been confused into transferring a pointer lock state into another tab, which could have lead to clickjacking attacks. This vul…
Firefox
MEDIUM 6.1
An XSS bug in internal error pages could have led to various spoofing attacks, including other error pages and the address bar. Note: This issue only…
Firefox
HIGH 8.8
One phishing tactic on the web is to provide a link with HTTP Auth. For example 'https://[email protected]'. To mitigate this type of a…
Firefox
HIGH 8.1
When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring w…
Firefox
MEDIUM 6.5
Context-specific code was included in a shared jump table; resulting in assertions being triggered in multithreaded wasm code. This vulnerability aff…
Firefox
MEDIUM 6.5
When processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the redirect's Referrer-Policy. This would have potentially…
Firefox
MEDIUM 6.5
When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have reve…
Firefox
MEDIUM 6.5
The developer page about:memory has a Measure function for exploring what object types the browser has allocated and their sizes. When this function …