Vulnerabilities in mozilla

2,105 results
Vexday analysis

A Mozilla apresenta um perfil de risco baixo com apenas 3 vulnerabilidades catalogadas, nenhuma sob exploração ativa ou crítica. A fraqueza dominante identificada é CWE-400 (Uncontrolled Resource Consumption), que tipicamente afeta disponibilidade; a ausência de publicações recentes sugere que o risco atual não é imediato.

CVE-2023-4580—Push notifications saved to disk unencryptedEPSS 0.4%CVE-2025-11709CRITICALOut of bounds read/write in a privileged process triggered by WebGL texturesEPSS 0.4%CVE-2025-11710CRITICALCross-process information leaked due to malicious IPC messagesEPSS 0.4%CVE-2026-8093HIGHMemory safety bugs fixed in Firefox 150.0.2EPSS 0.4%CVE-2024-0752MEDIUMA use-after-free crash could have occurred on macOS if a Firefox update were being applied on a very busy system. This could have resulted iEPSS 0.4%CVE-2016-5294—The Mozilla Updater can be made to choose an arbitrary target working directory for output files resulting from the update process. This vulEPSS 0.4%CVE-2026-84642HIGHAllowed UNC hostnames for attachments interpreted as a regular expressionEPSS 0.4%CVE-2024-4776HIGHA file dialog shown while in full-screen mode could have resulted in the window remaining disabled. This vulnerability affects Firefox < 126EPSS 0.4%CVE-2022-22749MEDIUMWhen scanning QR codes, Firefox for Android would have allowed navigation to some URLs that do not point to web content.<br>*This bug only aEPSS 0.4%CVE-2025-1018HIGHFullscreen notification is not displayed when fullscreen is re-requestedEPSS 0.4%CVE-2026-6784HIGHMemory safety bugs fixed in Firefox 150 and Thunderbird 150EPSS 0.4%CVE-2025-14323HIGHPrivilege escalation in the DOM: Notifications componentEPSS 0.4%CVE-2026-8970HIGHPrivilege escalation in the Security componentEPSS 0.4%CVE-2026-6769HIGHPrivilege escalation in the Debugger componentEPSS 0.4%CVE-2026-8957HIGHPrivilege escalation in the Enterprise Policies componentEPSS 0.4%CVE-2026-74952HIGHPrivilege escalation in the Application Update componentEPSS 0.4%CVE-2026-6761HIGHPrivilege escalation in the Networking componentEPSS 0.4%CVE-2026-8955HIGHPrivilege escalation in the DOM: Workers componentEPSS 0.4%CVE-2026-74950HIGHPrivilege escalation in the Downloads API componentEPSS 0.4%CVE-2025-1932HIGHInconsistent comparator in XSLT sorting led to out-of-bounds accessEPSS 0.4%