Vulnerabilities in mozilla
2,453 resultsCVE-2017-5393—The "mozAddonManager" allows for the installation of extensions from the CDN for addons.mozilla.org, a publicly accessible site. This could EPSS 0.9%CVE-2021-23958—The browser could have been confused into transferring a screen sharing state into another tab, which would leak unintended information. ThiEPSS 0.9%CVE-2021-38491—Mixed-content checks were unable to analyze opaque origins which led to some mixed content being loaded. This vulnerability affects Firefox EPSS 0.9%CVE-2020-26975—When a malicious application installed on the user's device broadcast an Intent to Firefox for Android, arbitrary headers could have been spEPSS 0.9%CVE-2023-6205—It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash.EPSS 0.9%CVE-2022-26381HIGHAn attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading to a potentially exploitable crash. This vuEPSS 0.9%CVE-2025-3028MEDIUMUse-after-free triggered by XSLTProcessorEPSS 0.9%CVE-2020-26977—By attempting to connect a website using an unresponsive port, an attacker could have controlled the content of a tab while the URL bar dispEPSS 0.9%CVE-2022-31737CRITICALA malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory corruption and a potentially exploitable crash. ThiEPSS 0.9%CVE-2026-16357CRITICALIncorrect boundary conditions in the Graphics componentEPSS 0.9%CVE-2021-29947—Mozilla developers and community members reported memory safety bugs present in Firefox 87. Some of these bugs showed evidence of memory corEPSS 0.9%CVE-2024-1553HIGHMemory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of these bugs showed evidence of memory corruptionEPSS 0.9%CVE-2022-38476HIGHA data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use-after-free vulnerability. In Firefox, this EPSS 0.9%CVE-2024-5702HIGHMemory corruption in the networking stack could have led to a potentially exploitable crash. This vulnerability affects Firefox < 125, FirefEPSS 0.9%CVE-2026-10702MEDIUMJIT miscompilation in the JavaScript Engine: JIT componentEPSS 0.9%CVE-2024-3864HIGHMemory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug showed evidence of memory corruption and we preEPSS 0.9%CVE-2023-6873—Memory safety bugs present in Firefox 120. Some of these bugs showed evidence of memory corruption and we presume that with enough effort soEPSS 0.9%CVE-2021-29950—Thunderbird unprotects a secret OpenPGP key prior to using it for a decryption, signing or key import task. If the task runs into a failure,EPSS 0.9%CVE-2020-15661—A rogue webpage could override the injected WKUserScript used by the logins autofill, this exploit could result in leaking a password for thEPSS 0.9%CVE-2026-2774HIGHInteger overflow in the Audio/Video componentEPSS 0.9%