mozilla
3,621 tracked vulnerabilities.
CVE-2019-25136
CRITICAL
Firefox < 70.0 - Remote Code Execution via XBL Bindings Injection
Jun 19, 2023
CVSS 10.0
EPSS 0.01
CVE-2019-17003
MEDIUM
Firefox < 25.0 - Cross-Site Scripting via QR Code JavaScript URL
Feb 16, 2023
CVSS 6.1
EPSS 0.00
CVE-2019-17007
HIGH
Network Security Services < 3.44 - Denial of Service via Malformed Netscape Certificate Sequence
Oct 22, 2020
CVSS 7.5
EPSS 0.01
CVE-2019-17006
CRITICAL
Siemens Ruggedcom ROX MX5000 Firmware < 2.14.0 - Buffer Overflow via Missing Length Checks
Oct 22, 2020
CVSS 9.8
EPSS 0.04
CVE-2019-17026
HIGH
KEV
Firefox < 72.0.1 and Firefox ESR < 68.4.1 - Type Confusion in IonMonkey JIT Compiler
Mar 02, 2020
CVSS 8.8
EPSS 0.43
CVE-2019-9812
CRITICAL
Firefox < 60.9 - Sandbox Escape via Malicious Firefox Sync Account
Jan 08, 2020
CVSS 9.3
EPSS 0.01
CVE-2019-17025
HIGH
Firefox < 72.0 - Out-of-bounds Write
Jan 08, 2020
CVSS 8.8
EPSS 0.01
CVE-2019-17024
HIGH
Firefox < 72.0 and Firefox ESR < 68.4 - Out-of-bounds Write
Jan 08, 2020
CVSS 8.8
EPSS 0.02
CVE-2019-17023
MEDIUM
Firefox < 72.0 - Denial of Service via TLS State Machine Mismanagement
Jan 08, 2020
CVSS 6.5
EPSS 0.01
CVE-2019-17022
MEDIUM
Firefox < 72.0 and Firefox ESR < 68.4 - Cross-Site Scripting via Style Tag Pasting
Jan 08, 2020
CVSS 6.1
EPSS 0.02
CVE-2019-17021
MEDIUM
Firefox < 72.0 and Firefox ESR < 68.4 - Heap Address Disclosure via Content Process Initialization Race Condition
Jan 08, 2020
CVSS 5.3
EPSS 0.02
CVE-2019-17020
MEDIUM
Firefox < 72.0 - Content Security Policy Bypass via XSL Stylesheet
Jan 08, 2020
CVSS 6.5
EPSS 0.01
CVE-2019-17019
HIGH
Firefox < 72.0 - Unauthenticated Arbitrary Code Execution via Python File MIME Handling
Jan 08, 2020
CVSS 8.8
EPSS 0.01
CVE-2019-17018
MEDIUM
Firefox < 72.0 - Unauthorized Sensitive Information Exposure via Windows Keyboard Suggestions
Jan 08, 2020
CVSS 5.3
EPSS 0.01
CVE-2019-17017
HIGH
Firefox < 72.0 and Firefox ESR < 68.4 - Type Confusion
Jan 08, 2020
CVSS 8.8
EPSS 0.02
CVE-2019-17016
MEDIUM
Firefox < 72.0 and Firefox ESR < 68.4 - Cross-Site Scripting via Style Tag Pasting
Jan 08, 2020
CVSS 6.1
EPSS 0.02
CVE-2019-17015
HIGH
Firefox < 72.0 and Firefox ESR < 68.4 - Out-of-bounds Write via Content Process Initialization
Jan 08, 2020
CVSS 8.8
EPSS 0.02
CVE-2019-17014
HIGH
Firefox < 71.0 - Cross-Origin Information Leak via Dragged Image
Jan 08, 2020
CVSS 7.4
EPSS 0.01
CVE-2019-17013
HIGH
Firefox < 71.0 - Use-After-Free
Jan 08, 2020
CVSS 8.8
EPSS 0.01
CVE-2019-17012
HIGH
Firefox < 71.0 and Firefox ESR < 68.3 - Out-of-bounds Write
Jan 08, 2020
CVSS 8.8
EPSS 0.02
CVE-2019-17011
HIGH
Firefox < 71.0 and Firefox ESR < 68.3 - Use-After-Free via DocShell Race Condition
Jan 08, 2020
CVSS 7.5
EPSS 0.02
CVE-2019-17010
HIGH
Firefox <71.0, ESR <68.3, Thunderbird <68.3 - Use-After-Free via Race Condition
Jan 08, 2020
CVSS 7.5
EPSS 0.02
CVE-2019-17009
HIGH
Thunderbird <68.3, Firefox ESR <68.3, Firefox <71 - Info Disclosure
Jan 08, 2020
CVSS 7.8
EPSS 0.00
CVE-2019-17008
HIGH
Firefox < 71.0, Firefox ESR < 68.3, Thunderbird < 68.3 - Use-After-Free in Nested Workers
Jan 08, 2020
CVSS 8.8
EPSS 0.02
CVE-2019-17005
HIGH
Firefox < 71.0 and Firefox ESR < 68.3 - Out-of-bounds Write in Plain Text Serializer
Jan 08, 2020
CVSS 8.8
EPSS 0.02
Products
firefox 3,181
thunderbird 1,773
seamonkey 704
firefox_esr 488
Firefox 434
Thunderbird 403
thunderbird_esr 228
bugzilla 145
mozilla 108
network_security_services 50
Firefox ESR 44
mozilla_suite 27
Firefox for iOS 25
firefox_mobile 23
firefox_focus 20
focus 16
firefox_os 14
Focus for iOS 6
nss 6
bleach 5
bonsai 4
camino 4
vpn 4
convict 3
netscape_portable_runtime 3
geckodriver 2
mozjpeg 2
nunjucks 2
pollbot 2
webthings_gateway 2
Quick Filters