mozilla

3,565 tracked vulnerabilities.

CVE-2024-38313 MEDIUM
Firefox for iOS < 127 - Info Disclosure
Jun 13, 2024
CVSS 4.3
EPSS 0.00
CVE-2024-38312 MEDIUM
Firefox for iOS < 127 - Info Disclosure
Jun 13, 2024
CVSS 6.5
EPSS 0.00
CVE-2024-5702 HIGH
Firefox < 125 and ESR < 115.12 - Use-After-Free in Networking Stack
Jun 11, 2024
CVSS 7.5
EPSS 0.01
CVE-2024-5701 CRITICAL
Firefox < 127.0 - Out-of-bounds Write
Jun 11, 2024
CVSS 9.8
EPSS 0.01
CVE-2024-5700 HIGH
Firefox < 127 and ESR < 115.12 - Memory Corruption
Jun 11, 2024
CVSS 7.0
EPSS 0.00
CVE-2024-5699 CRITICAL
Firefox < 127.0 - Cookie Prefix Bypass via Case Sensitivity Mismatch
Jun 11, 2024
CVSS 9.8
EPSS 0.01
CVE-2024-5698 MEDIUM
Firefox < 127 - User Interface Misrepresentation via Fullscreen Data-List Overlay
Jun 11, 2024
CVSS 6.1
EPSS 0.00
CVE-2024-5697 MEDIUM
Firefox < 127 - Screenshot Detection via Built-in Screenshot Functionality
Jun 11, 2024
CVSS 4.3
EPSS 0.00
CVE-2024-5696 HIGH
Firefox < 127 and ESR < 115.12 - Out-of-bounds Write via Input Tag Text Manipulation
Jun 11, 2024
CVSS 8.6
EPSS 0.02
CVE-2024-5695 CRITICAL
Firefox < 127.0 - Out-of-bounds Write via Probabilistic Heap Checker
Jun 11, 2024
CVSS 9.8
EPSS 0.01
CVE-2024-5694 HIGH
Firefox < 127.0 - Use-After-Free in JavaScript Engine
Jun 11, 2024
CVSS 7.5
EPSS 0.01
CVE-2024-5693 MEDIUM
Firefox < 127 and ESR < 115.12 - Same-Origin Policy Bypass via Offscreen Canvas
Jun 11, 2024
CVSS 6.1
EPSS 0.02
CVE-2024-5692 MEDIUM
Firefox < 127 and ESR < 115.12 - Unauthenticated File Extension Spoofing via Invalid Character in Save As Dialog
Jun 11, 2024
CVSS 6.5
EPSS 0.00
CVE-2024-5691 MEDIUM
Firefox < 127, Firefox ESR < 115.12, Thunderbird < 115.12 - CSRF
Jun 11, 2024
CVSS 4.7
EPSS 0.00
CVE-2024-5690 MEDIUM
Firefox < 127.0 and ESR < 115.12 - Information Disclosure via External Protocol Handler Timing
Jun 11, 2024
CVSS 4.3
EPSS 0.06
CVE-2024-5689 MEDIUM
Firefox < 127.0 - Phishing via Screenshot Overlay Spoofing
Jun 11, 2024
CVSS 4.3
EPSS 0.01
CVE-2024-5688 HIGH
Firefox < 127 and ESR < 115.12 - Use-After-Free during Object Transplant
Jun 11, 2024
CVSS 8.1
EPSS 0.01
CVE-2024-5687 MEDIUM
Firefox for Android - Info Disclosure
Jun 11, 2024
CVSS 5.3
EPSS 0.01
CVE-2024-5022 MEDIUM
Focus for iOS < 126 - Open Redirect
May 17, 2024
CVSS 4.4
EPSS 0.00
CVE-2024-4778 CRITICAL
Firefox < 126.0 - Memory Corruption and Potential Remote Code Execution
May 14, 2024
CVSS 9.8
EPSS 0.00
CVE-2024-4777 HIGH
Firefox < 126 and Firefox ESR < 115.11 - Use-After-Free
May 14, 2024
CVSS 8.8
EPSS 0.01
CVE-2024-4776 HIGH
Firefox < 126.0 - Full-Screen Mode Window Disabling via File Dialog
May 14, 2024
CVSS 8.2
EPSS 0.01
CVE-2024-4775 MEDIUM
Firefox < 126.0 - Memory Corruption via WASM Profiler Iterator
May 14, 2024
CVSS 5.9
EPSS 0.00
CVE-2024-4774 MEDIUM
Firefox < 126.0 - Use-After-Free via ShmemCharMapHashEntry Move Semantics Bypass
May 14, 2024
CVSS 6.5
EPSS 0.00
CVE-2024-4773 HIGH
Firefox < 126.0 - URL Spoofing via Network Error Page Load
May 14, 2024
CVSS 7.5
EPSS 0.00
Products
firefox 3,130 thunderbird 1,729 seamonkey 704 firefox_esr 488 Firefox 387 Thunderbird 359 thunderbird_esr 228 bugzilla 145 mozilla 108 network_security_services 50 Firefox ESR 44 mozilla_suite 27 firefox_focus 20 firefox_mobile 20 Firefox for iOS 19 focus 15 firefox_os 14 nss 6 Focus for iOS 5 bleach 5 bonsai 4 camino 4 vpn 4 convict 3 netscape_portable_runtime 3 geckodriver 2 mozjpeg 2 nunjucks 2 pollbot 2 webthings_gateway 2
Quick Filters
Critical CVEs With Exploits In CISA KEV