Mozilla Firefox vulnerabilities

76 known CVE vulnerabilities in Mozilla Firefox, translated and rated.

CVE-2015-0814High
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before version 37.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVE-2015-0806High
The Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before version 37.0 attempts to use memset for a memory region of negative length, which may lead to arbitrary code execution or cause a denial of service through memory corruption.
CVE-2015-0805High
The Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before version 37.0 contains an incorrect memset call during interaction with the mozilla::layers::BufferTextureClient::AllocateForSurface function. This allows remote attackers to execute arbitrary code or cause a denial of service via vectors that trigger rendering of 2D graphics content.
CVE-2015-0804High
The HTMLSourceElement::BindToTree function in Mozilla Firefox before version 37.0 does not properly constrain a data type after omitting namespace validation during certain tree-binding operations, allowing remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via a crafted HTML document containing a SOURCE element.
CVE-2015-0803High
The HTMLSourceElement::AfterSetAttr function in Mozilla Firefox before version 37.0 does not properly constrain the original data type of a casted value during the setting of a SOURCE element's attributes, allowing remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via a crafted HTML document.
CVE-2015-0835High
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before version 36.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVE-2015-0823High
Multiple use-after-free vulnerabilities in OpenType Sanitiser, as used in Mozilla Firefox before 36.0, might allow remote attackers to trigger problematic Developer Console information or possibly have unspecified other impact by leveraging incorrect macro expansion, related to the ots::ots_gasp_parse function.
CVE-2014-1575High
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before version 33.0 may allow remote attackers to cause a denial of service (memory corruption and application crash) or potentially execute arbitrary code. These issues are related to improper interaction between threading and garbage collection in the GCRuntime::triggerGC function.
CVE-2014-1554High
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before version 32.0 may allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVE-2014-1540High
A use-after-free vulnerability in the nsEventListenerManager::CompileEventHandlerInternal function in the Event Listener Manager in Mozilla Firefox before version 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted web content.
CVE-2014-1537High
A use-after-free vulnerability in the mozilla::dom::workers::WorkerPrivateParent function in Mozilla Firefox before version 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
CVE-2014-1536High
The PropertyProvider::FindJustificationRange function in Mozilla Firefox before version 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2014-1534High
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before version 30.0 may allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVE-2009-3374High
The XPCVariant::VariantDataToJS function in the XPCOM implementation in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 does not enforce intended restrictions on interaction between chrome privileged code and objects obtained from remote web sites. This allows remote attackers to execute arbitrary JavaScript with chrome privileges.
CVE-2007-5896High
Mozilla Firefox 2.0.0.9 allows remote attackers to cause a denial of service via an iframe with Javascript that sets the document.location to contain a leading NULL byte and a res://, about:config, or file:/// URI.
CVE-2022-26486CriticalActively exploited
An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. There have been reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for Android < 97.3.0, Thunderbird < 91.6.2, and Focus < 97.3.0.
CVE-2022-26485HighActively exploited
Removing an XSLT parameter during processing could have led to an exploitable use-after-free. There have been reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for Android < 97.3.0, Thunderbird < 91.6.2, and Focus < 97.3.0.
CVE-2016-5256Critical
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before version 49.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVE-2016-5254Critical
Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows attackers to execute arbitrary code or cause a denial of service by leveraging keyboard access to use the Alt key during selection of top-level menu items.
CVE-2016-1962Critical
Use-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of WebRTC data-channel connections.
CVE-2016-1944Critical
The Buffer11::NativeBuffer11::map function in ANGLE, as used in Mozilla Firefox before version 44.0, might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
CVE-2016-1931Critical
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before version 44.0 may allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to uninitialized memory encountered during brotli data compression, and other vectors.
CVE-2023-29550High
Memory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.
CVE-2023-29536High
An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially exploitable crash. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.
CVE-2021-29993High
Firefox for Android allowed navigations through the `intent://` protocol, which could be used to cause crashes and UI spoofs. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 92.
CVE-2020-15670High
Memory safety bugs in Firefox for Android 79 that could lead to memory corruption and potentially allow arbitrary code execution. Affects Firefox, Firefox ESR, Thunderbird, and Firefox for Android.