= 9)

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2020-26969	787	Mem. Corr.	2020-12-09	2020-12-10	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Mozilla developers reported memory safety bugs present in Firefox 82. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 83.
2	CVE-2020-26968	787	Mem. Corr.	2020-12-09	2020-12-10	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Mozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.
3	CVE-2020-26960	416		2020-12-09	2020-12-10	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
If the Compact() method was called on an nsTArray, the array could have been reallocated without updating other pointers, leading to a potential use-after-free and exploitable crash. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.
4	CVE-2020-26952	787	Mem. Corr.	2020-12-09	2020-12-09	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Incorrect bookkeeping of functions inlined during JIT compilation could have led to memory corruption and a potentially exploitable crash when handling out-of-memory errors. This vulnerability affects Firefox < 83.
5	CVE-2020-26950	416		2020-12-09	2022-04-08	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition. This vulnerability affects Firefox < 82.0.3, Firefox ESR < 78.4.1, and Thunderbird < 78.4.2.
6	CVE-2020-15663	427	Exec Code	2020-10-01	2022-07-12	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privileges. Although the Mozilla Maintenance Service does ensure that updater.exe is signed by Mozilla, the version could have been rolled back to a previous version which would have allowed exploitation of an older bug and arbitrary code execution with System Privileges. Note: This issue only affected Windows operating systems. Other operating systems are unaffected.. This vulnerability affects Firefox < 80, Thunderbird < 78.2, Thunderbird < 68.12, Firefox ESR < 68.12, and Firefox ESR < 78.2.
7	CVE-2020-15659	787	Mem. Corr.	2020-08-10	2020-08-21	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox ESR 78.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 79, Firefox ESR < 68.11, Firefox ESR < 78.1, Thunderbird < 68.11, and Thunderbird < 78.1.
8	CVE-2020-15656	843		2020-08-10	2023-02-02	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the code, resulting in this bug rated at only moderate severity. This vulnerability affects Firefox ESR < 78.1, Firefox < 79, and Thunderbird < 78.1.
9	CVE-2020-12426	787	Mem. Corr.	2020-07-09	2022-04-27	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Mozilla developers and community members reported memory safety bugs present in Firefox 77. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 78.
10	CVE-2020-12420	362	Mem. Corr.	2020-07-09	2022-05-03	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and Thunderbird < 68.10.0.
11	CVE-2020-12419	416	Mem. Corr.	2020-07-09	2023-01-27	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
When processing callbacks that occurred during window flushing in the parent process, the associated window may die; causing a use-after-free condition. This could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and Thunderbird < 68.10.0.
12	CVE-2020-12417	787	Mem. Corr.	2020-07-09	2022-05-03	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory corruption and a potentially exploitable crash. Note: this issue only affects Firefox on ARM64 platforms. This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and Thunderbird < 68.10.0.
13	CVE-2020-12416	362	Mem. Corr.	2020-07-09	2022-05-03	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 78.
14	CVE-2020-12411	119	Overflow Mem. Corr.	2020-07-09	2021-07-21	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Mozilla developers reported memory safety bugs present in Firefox 76. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 77.
15	CVE-2020-12410	787	Mem. Corr.	2020-07-09	2022-05-03	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9.
16	CVE-2020-12406	345		2020-07-09	2023-01-27	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash. We presume that with enough effort that it could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9.
17	CVE-2020-12395	787	Mem. Corr.	2020-05-26	2022-04-26	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 68.8, Firefox < 76, and Thunderbird < 68.8.0.
18	CVE-2019-11752	416		2019-09-27	2019-10-04	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. This results in a use-after-free and a potentially exploitable crash. This vulnerability affects Firefox < 69, Thunderbird < 68.1, Thunderbird < 60.9, Firefox ESR < 60.9, and Firefox ESR < 68.1.
19	CVE-2019-11708	20		2019-07-23	2019-08-15	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content chosen by a compromised child process. When combined with additional vulnerabilities this could result in executing arbitrary code on the user's computer. This vulnerability affects Firefox ESR < 60.7.2, Firefox < 67.0.4, and Thunderbird < 60.7.2.
20	CVE-2018-18502	119	Overflow Mem. Corr.	2019-02-05	2019-02-07	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Mozilla developers and community members reported memory safety bugs present in Firefox 64. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 65.
21	CVE-2018-5151	119	Overflow Mem. Corr.	2018-06-11	2018-08-03	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Memory safety bugs were reported in Firefox 59. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 60.
22	CVE-2018-5090	119	Overflow Mem. Corr.	2018-06-11	2018-06-25	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Memory safety bugs were reported in Firefox 57. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 58.
23	CVE-2017-7827	119	Overflow Mem. Corr.	2018-06-11	2018-06-25	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Memory safety bugs were reported in Firefox 56. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 57.
24	CVE-2017-7826	119	Overflow Mem. Corr.	2018-06-11	2018-08-01	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 57, Firefox ESR < 52.5, and Thunderbird < 52.5.
25	CVE-2017-7811	119	Overflow Mem. Corr.	2018-06-11	2018-07-30	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Memory safety bugs were reported in Firefox 55. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 56.
26	CVE-2017-7810	119	Overflow Mem. Corr.	2018-06-11	2018-08-01	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4.
27	CVE-2017-7779	119	Overflow Mem. Corr.	2018-06-11	2018-08-01	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
28	CVE-2017-5399	119	Overflow Mem. Corr.	2018-06-11	2018-08-01	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Memory safety bugs were reported in Firefox 51. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 52 and Thunderbird < 52.
29	CVE-2017-5398	119	Overflow Mem. Corr.	2018-06-11	2018-08-01	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.
30	CVE-2017-5397	829		2018-06-11	2019-10-03	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
The cache directory on the local file system is set to be world writable. Firefox defaults to extracting libraries from this cache. This allows for the possibility of an installed malicious application or tools with write access to the file system to replace files used by Firefox with their own versions. This vulnerability affects Firefox < 51.0.3.
31	CVE-2016-2834		DoS Mem. Corr.	2016-06-13	2018-10-30	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Mozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.
32	CVE-2016-2807	119	DoS Exec Code Overflow Mem. Corr.	2016-04-30	2018-10-30	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
33	CVE-2016-2806	119	DoS Exec Code Overflow Mem. Corr.	2016-04-30	2018-10-30	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 and Firefox ESR 45.x before 45.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
34	CVE-2016-2804	119	DoS Exec Code Overflow Mem. Corr.	2016-04-30	2017-07-01	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
35	CVE-2016-2799	119	DoS Overflow	2016-03-13	2019-12-27	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Heap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite smart font.
36	CVE-2016-2794	119	DoS Overflow	2016-03-13	2019-12-27	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
37	CVE-2016-1962		Exec Code	2016-03-13	2019-12-27	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Use-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of WebRTC data-channel connections.
38	CVE-2016-1946	119	DoS Overflow	2016-01-31	2018-10-30	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
The MoofParser::Metadata function in binding/MoofParser.cpp in libstagefright in Mozilla Firefox before 44.0 does not limit the size of read operations, which might allow remote attackers to cause a denial of service (integer overflow and buffer overflow) or possibly have unspecified other impact via crafted metadata.
39	CVE-2016-1945		DoS	2016-01-31	2018-10-30	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
The nsZipArchive function in Mozilla Firefox before 44.0 might allow remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect use of a pointer during processing of a ZIP archive.
40	CVE-2016-1944	119	DoS Overflow Mem. Corr.	2016-01-31	2018-10-30	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
The Buffer11::NativeBuffer11::map function in ANGLE, as used in Mozilla Firefox before 44.0, might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
41	CVE-2016-1935	119	Exec Code Overflow	2016-01-31	2019-12-27	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Buffer overflow in the BufferSubData function in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allows remote attackers to execute arbitrary code via crafted WebGL content.
42	CVE-2016-1931	119	DoS Exec Code Overflow Mem. Corr.	2016-01-31	2018-10-30	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to uninitialized memory encountered during brotli data compression, and other vectors.
43	CVE-2016-1930	119	DoS Exec Code Overflow Mem. Corr.	2016-01-31	2019-12-27	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
44	CVE-2015-7221	119	DoS Overflow	2015-12-16	2018-10-30	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Buffer overflow in the nsDeque::GrowCapacity function in xpcom/glue/nsDeque.cpp in Mozilla Firefox before 43.0 might allow remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a deque size change.
45	CVE-2015-7220	119	DoS Overflow	2015-12-16	2018-10-30	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Buffer overflow in the XDRBuffer::grow function in js/src/vm/Xdr.cpp in Mozilla Firefox before 43.0 might allow remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code.
46	CVE-2015-7205	189	DoS +Info	2015-12-16	2018-10-30	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Integer underflow in the RTPReceiverVideo::ParseRtpPacket function in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 might allow remote attackers to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a crafted WebRTC RTP packet.
47	CVE-2015-7203	119	DoS Overflow	2015-12-16	2018-10-30	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Buffer overflow in the DirectWriteFontInfo::LoadFontFamilyData function in gfx/thebes/gfxDWriteFontList.cpp in Mozilla Firefox before 43.0 might allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted font-family name.
48	CVE-2015-7202	119	DoS Exec Code Overflow Mem. Corr.	2015-12-16	2018-10-30	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
49	CVE-2015-7201	119	DoS Exec Code Overflow Mem. Corr.	2015-12-16	2018-10-30	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
50	CVE-2015-4516	254	Exec Code Bypass	2015-09-24	2016-12-22	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Mozilla Firefox before 41.0 allows remote attackers to bypass certain ECMAScript 5 (aka ES5) API protection mechanisms and modify immutable properties, and consequently execute arbitrary JavaScript code with chrome privileges, via a crafted web page that does not use ES5 APIs.

Total number of vulnerabilities : 511 Page : 1 (This Page)2 3 4 5 6 7 8 9 10 11