Mozilla vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Mozilla products: 653 record(s), with severity, exploitation and fixes.

Firefox 617 Thunderbird 534 Firefox Mobile 17 Firefox ESR 12 Firefox Focus 4 Focus 3 Thunderbird Esr 2 Firefox for Android 2 Firefox Os 1 Seamonkey 1 Thin-vec 1 0din Scanner 1 Rhino 1 Klar 1 Node-convict 1 Network Security Services 1

Exploited only (KEV) →

CVE-2013-1675 Medium · 6.5 KEV High · 52 CWE-665 May 16, 2013

Mozilla Firefox Information Disclosure Vulnerability

Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.

CVE-2011-3389 Medium · 4.3 Public exploit CWE-326 Sep 6, 2011

Inadequate Encryption Strength in Google Chrome

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.

CVE-2010-3765 Critical · 9.8 KEV Urgent · 83 Public exploit CWE-119 Oct 27, 2010

Mozilla Multiple Products Remote Code Execution Vulnerability

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.