Firefox

firefox

Vendor: Mozilla • 3,473 CVEs

CVEs (3,473)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-14744 1Mozilla 1Firefox Oct 5, 2026 Dec 18, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability was fixed in...Show more Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability was fixed in Firefox for iOS 144.0.Show less
CVE-2025-14333 1Mozilla 2Firefox Thunderbird Oct 7, 2026 Dec 9, 2025 N/A· v4 8.1 HIGH· v3 N/A· v2 Memory safety bugs present in Firefox ESR 140.5, Thunderbird ESR 140.5, Firefox 145 and Thunderbird 145. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could...Show more Memory safety bugs present in Firefox ESR 140.5, Thunderbird ESR 140.5, Firefox 145 and Thunderbird 145. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.Show less
CVE-2025-14332 1Mozilla 2Firefox Thunderbird Oct 7, 2026 Dec 9, 2025 N/A· v4 7.3 HIGH· v3 N/A· v2 Memory safety bugs present in Firefox 145 and Thunderbird 145. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code....Show more Memory safety bugs present in Firefox 145 and Thunderbird 145. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 146 and Thunderbird 146.Show less
CVE-2025-14331 1Mozilla 2Firefox Thunderbird Oct 7, 2026 Dec 9, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Same-origin policy bypass in the Request Handling component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
CVE-2025-14330 1Mozilla 2Firefox Thunderbird Oct 7, 2026 Dec 9, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
CVE-2025-14329 1Mozilla 2Firefox Thunderbird Oct 7, 2026 Dec 9, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
CVE-2025-14328 1Mozilla 2Firefox Thunderbird Oct 7, 2026 Dec 9, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
CVE-2025-14327 1Mozilla 2Firefox Thunderbird Oct 7, 2026 Dec 9, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Spoofing issue in the Downloads Panel component. This vulnerability was fixed in Firefox 146, Thunderbird 146, Firefox ESR 140.7, and Thunderbird 140.7.
CVE-2025-14326 1Mozilla 2Firefox Thunderbird Oct 7, 2026 Dec 9, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Use-after-free in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 146 and Thunderbird 146.
CVE-2025-14325 1Mozilla 2Firefox Thunderbird Oct 7, 2026 Dec 9, 2025 N/A· v4 7.3 HIGH· v3 N/A· v2 JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
CVE-2025-14324 1Mozilla 2Firefox Thunderbird Oct 7, 2026 Dec 9, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
CVE-2025-14323 1Mozilla 2Firefox Thunderbird Oct 7, 2026 Dec 9, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 Privilege escalation in the DOM: Notifications component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
CVE-2025-14322 1Mozilla 2Firefox Thunderbird Oct 7, 2026 Dec 9, 2025 N/A· v4 8.0 HIGH· v3 N/A· v2 Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
CVE-2025-14321 1Mozilla 2Firefox Thunderbird Oct 7, 2026 Dec 9, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
CVE-2025-13027 1Mozilla 1Firefox Oct 18, 2026 Nov 11, 2025 N/A· v4 8.1 HIGH· v3 N/A· v2 Memory safety bugs present in Firefox 144 and Thunderbird 144. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code....Show more Memory safety bugs present in Firefox 144 and Thunderbird 144. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 145 and Thunderbird 145.Show less
CVE-2025-13026 1Mozilla 1Firefox Oct 18, 2026 Nov 11, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145.
CVE-2025-13025 1Mozilla 1Firefox Oct 18, 2026 Nov 11, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145.
CVE-2025-13024 1Mozilla 1Firefox Oct 18, 2026 Nov 11, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 145 and Thunderbird 145.
CVE-2025-13023 1Mozilla 1Firefox Oct 18, 2026 Nov 11, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145.
CVE-2025-13022 1Mozilla 1Firefox Oct 18, 2026 Nov 11, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145.

Previous 1...282930...174 Next