Open Source Vulnerabilities

firefox, firefox, firefox, firefox, firefox

One phishing tactic on the web is to provide a link with HTTP Auth

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource

firefox, firefox, firefox, firefox, firefox

When processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the redirect's Referrer-Policy

firefox, firefox, firefox, firefox, firefox

Context-specific code was included in a shared jump table; resulting in assertions being triggered in multithreaded wasm code

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

Mozilla developers and community members reported memory safety bugs present in Firefox 86 and Firefox ESR 78

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure that the source file is the URL requested by the page, pre-redirects

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

malicious extension could have opened a popup window lacking an address bar

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported in the violation report; as opposed to the original frame URI

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on the user's local machine utilizing Web...

firefox, firefox, firefox, firefox, firefox

Mozilla developers and community members reported memory safety bugs present in Firefox 87

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information lea...

firefox, firefox, firefox, firefox, firefox

Lack of escaping allowed HTML injection when a webpage was viewed in Reader View

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

Ports that were written as an integer overflow above the bounds of a 16-bit integer could have bypassed port blocking restrictions when used in the Alt-Svc header

firefox, firefox, firefox, firefox, firefox

compromised content process could have performed session history manipulations it should not have been able to due to testing infrastructure that was not restricted to testing-only configurations

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read and result in a crash

firefox, firefox, firefox, firefox, firefox

race condition with requestPointerLock() and setTimeout() could have resulted in a user interacting with one tab when they believed they were on a separate tab

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

When a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the newlines would have been interpreted as such and allowed arbitrary commands to be sent to the FTP server

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional privileges that should not be granted to web content

firefox, firefox, firefox, firefox, firefox

Due to unexpected data type conversions, a use-after-free could have occurred when interacting with the font cache

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

Through complicated navigations with new windows, an HTTP page could have inherited a secure lock icon from an HTTPS page

firefox, firefox, firefox, firefox, firefox

By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other a...

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

When Responsive Design Mode was enabled, it used references to objects that were previously freed

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out of bound write

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine

firefox, firefox, firefox, firefox, firefox

When Web Render components were destructed, a race condition could have caused undefined behavior, and we presume that with enough effort may have been exploitable to run arbitrary code

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78

firefox, firefox, firefox, firefox, firefox

Mozilla developers reported memory safety bugs present in Firefox 88

firefox, firefox, firefox, firefox, firefox

malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that...

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

Mozilla developers reported memory safety bugs present in Thunderbird 78

firefox, firefox, firefox, firefox, firefox

Address bar search suggestions in private browsing mode were re-using session data from normal mode

firefox, firefox, firefox, firefox, firefox

Firefox for Android would become unstable and hard-to-recover when a website opened too many popups

firefox, firefox, firefox, firefox, firefox

When styling and rendering an oversized `<select>` element, Firefox did not apply correct clipping which allowed an attacker to paint over the user interface

firefox, firefox, firefox, firefox, firefox

Firefox used to cache the last filename used for printing a file

firefox, firefox, firefox, firefox, firefox

When a user has already allowed a website to access microphone and camera, disabling camera sharing would not fully prevent the website from re-enabling it without an additional prompt

firefox, firefox, firefox, firefox, firefox

Mozilla developers reported memory safety bugs present in Firefox 89

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

Mozilla developers reported memory safety bugs present in code shared between Firefox and Thunderbird

firefox, firefox, firefox, firefox, firefox

Through a series of DOM manipulations, a message, over which the attacker had control of the text but not HTML or formatting, could be overlaid on top of another domain (with the new domain correct...

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

When resizing a popup while requesting fullscreen access, the popup would have become unable to leave fullscreen mode

firefox, firefox, firefox, firefox, firefox

When network partitioning was enabled, e

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

Certain network request objects were freed too early when releasing a network request handle

firefox, firefox, firefox, firefox, firefox

use-after-free vulnerability was found via testing, and traced to an out-of-date Cairo library

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

Malicious websites could have tricked users into accepting launching a program to handle an external URL protocol

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

malicious webpage could have triggered a use-after-free, memory corruption, and a potentially exploitable crash

firefox, firefox, firefox, firefox, firefox

Mozilla developers reported memory safety bugs present in Firefox 91

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

When a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a point after where it should not be possible

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

When delegating navigations to the operating system, Firefox would accept the `mk` scheme which might allow attackers to launch pages and execute scripts in Internet Explorer in unprivileged mode

firefox, firefox, firefox, firefox, firefox

Mixed-content checks were unable to analyze opaque origins which led to some mixed content being loaded

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

Previously Firefox for macOS and Linux would download temporary files to a user-specific directory in <code>/tmp</code>, but this behavior was changed to download them to <code>/tmp</code> where th...

firefox, firefox, firefox, firefox, firefox

Firefox for Android allowed navigations through the `intent://` protocol, which could be used to cause crashes and UI spoofs