Vulnerabilities in mozilla
2,453 resultsCVE-2021-23973—When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may EPSS 1.4%CVE-2021-29967—Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some of these bugs showed evidence of memory corEPSS 1.4%CVE-2019-11702—A hyperlink using protocols associated with Internet Explorer, such as IE.HTTP:, can be used to open local files at a known location with InEPSS 1.4%CVE-2021-21354HIGHOpen redirect in pollbotEPSS 1.4%CVE-2019-11760—A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted in a potentially exploitable crash in some iEPSS 1.4%CVE-2020-26958—Firefox did not block execution of scripts with incorrect MIME types when the response was intercepted and cached through a ServiceWorker. TEPSS 1.4%CVE-2020-6815—Mozilla developers reported memory safety and script safety bugs present in Firefox 73. Some of these bugs showed evidence of memory corruptEPSS 1.4%CVE-2017-7755—The Firefox installer on Windows can be made to load malicious DLL files stored in the same directory as the installer when it is run. This EPSS 1.4%CVE-2021-23964—Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some of these bugs showed evidence of memory corrEPSS 1.4%CVE-2019-9805—A latent vulnerability exists in the Prio library where data may be read from uninitialized memory for some functions, leading to potential EPSS 1.4%CVE-2020-26966—Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a hostname consisting EPSS 1.4%CVE-2019-11698—If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped EPSS 1.4%CVE-2019-11716—Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code such as Object.getOwnPropeEPSS 1.4%CVE-2020-12405—When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially exploitable crash. This vuEPSS 1.4%CVE-2020-12416—A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink, resulting in a use-after-free, memory cEPSS 1.4%CVE-2020-15684—Mozilla developers reported memory safety bugs present in Firefox 81. Some of these bugs showed evidence of memory corruption and we presumeEPSS 1.3%CVE-2019-17023—After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting in an invalid state transition inEPSS 1.3%CVE-2017-7822—The AES-GCM implementation in WebCrypto API accepts 0-length IV when it should require a length of 1 according to the NIST Special PublicatiEPSS 1.3%CVE-2020-26978—Using techniques that built on the slipstream research, a malicious webpage could have exposed both an internal network's hosts as well as sEPSS 1.3%CVE-2017-7765—The "Mark of the Web" was not correctly saved on Windows when files with very long names were downloaded from the Internet. Without the MarkEPSS 1.3%