Linux 13140
Google 12530
Microsoft 12379
Oracle 6737
Apple 6692
Adobe 6387
Ibm 6330
Cisco 5757
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Firefox
MEDIUM 6.5
Some websites have a feature "Show Password" where clicking a button will change a password field into a textbook field, revealing the typed password…
Firefox
MEDIUM 6.5
Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a hostname consisting of that s…
Firefox
MEDIUM 6.5
When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox Screenshots into interacting with elements other…
Firefox
MEDIUM 6.1
Firefox did not block execution of scripts with incorrect MIME types when the response was intercepted and cached through a ServiceWorker. This could…
Firefox
MEDIUM 6.1
Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used i…
Firefox
HIGH 8.8
In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition. Thi…
Firefox
HIGH 8.8
Incorrect bookkeeping of functions inlined during JIT compilation could have led to memory corruption and a potentially exploitable crash when handli…
Firefox Mobile
MEDIUM 6.5
When a user downloaded a file in Firefox for Android, if a cookie is set, it would have been re-sent during a subsequent file download operation on t…
Firefox
MEDIUM 6.1
A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capab…
Firefox
MEDIUM 6.1
In some cases, removing HTML elements during sanitization would keep existing SVG event handlers and therefore lead to XSS. This vulnerability affect…
Firefox
MEDIUM 5.3
When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial information about the nonce us…
Firefox
CRITICAL 9.8
Mozilla developers and community members reported memory safety bugs present in Firefox 81 and Firefox ESR 78.3. Some of these bugs showed evidence o…
Firefox
CRITICAL 9.8
Mozilla developers reported memory safety bugs present in Firefox 81. Some of these bugs showed evidence of memory corruption and we presume that wit…
Firefox
HIGH 7.5
When multiple WASM threads had a reference to a module, and were looking up exported functions, one WASM thread could have overwritten another's entr…
Firefox
MEDIUM 6.5
When a link to an external protocol was clicked, a prompt was presented that allowed the user to choose what application to open it in. An attacker c…
Firefox
MEDIUM 5.3
If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size …
In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in a denial of service.
In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a…
If an attacker intercepts Thunderbird's initial attempt to perform automatic account setup using the Microsoft Exchange autodiscovery mechanism, and …
Firefox
HIGH 8.8
When processing a MAR update file, after the signature has been validated, an invalid name length could result in a heap overflow, leading to memory …
Firefox Esr
HIGH 8.8
When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-fr…
Firefox
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these bugs showed evidence of memory corruption and we pres…
Firefox
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some of these bugs showed evidence of memory corruption an…
Firefox
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 80. Some of these bugs showed evidence of memory corruption and we presume that wit…
Firefox
HIGH 8.8
When processing surfaces, the lifetime may outlive a persistent buffer leading to memory corruption and a potentially exploitable crash. This vulnera…
Firefox
HIGH 8.8
When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free. This occurs be…
Firefox
MEDIUM 6.5
By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object w…
Firefox
MEDIUM 6.5
When trying to load a non-video in an audio/video context the exact status code (200, 302, 404, 500, 412, 403, etc.) was disclosed via the MediaError…
Firefox
MEDIUM 6.1
Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaScript being executed after past…
Firefox
MEDIUM 6.1
By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the download file dialog to show the …