Mozilla Firefox vulnerabilities

CVE-2026-6778 [MEDIUM] CWE-476 CVE-2026-6778: Invalid pointer in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 Invalid pointer in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

CVE-2026-12300 [MEDIUM] CWE-119 CVE-2026-12300: Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152 and Thunderb Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

CVE-2026-12301 [MEDIUM] CWE-119 CVE-2026-12301: Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152 and Thunderb Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

CVE-2026-6775 [MEDIUM] CWE-119 CVE-2026-6775: Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150 a Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

CVE-2026-6779 [MEDIUM] CWE-20 CVE-2026-6779: Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150 and Thun Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

CVE-2007-3285 [MEDIUM] CWE-264 CVE-2007-3285: Mozilla Firefox before 2.0.0.5, when run on Windows, allows remote attackers to bypass file type che Mozilla Firefox before 2.0.0.5, when run on Windows, allows remote attackers to bypass file type checks and possibly execute programs via a (1) file:/// or (2) resource: URI with a dangerous extension, followed by a NULL byte (%00) and a safer extension, which causes Firefox to treat the requested file differently than Windows would.

CVE-2006-5748 [MEDIUM] CVE-2006-5748: Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 1.5.0.8, Thu Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger memory corruption.

CVE-2007-1084 [MEDIUM] CWE-16 CVE-2007-1084: Mozilla Firefox 2.0.0.1 and earlier does not prompt users before saving bookmarklets, which allows r Mozilla Firefox 2.0.0.1 and earlier does not prompt users before saving bookmarklets, which allows remote attackers to bypass the same-domain policy by tricking a user into saving a bookmarklet with a data: scheme, which is executed in the context of the last visited web page.

CVE-2014-1506 [MEDIUM] CWE-22 CVE-2014-1506: Directory traversal vulnerability in Android Crash Reporter in Mozilla Firefox before 28.0 on Androi Directory traversal vulnerability in Android Crash Reporter in Mozilla Firefox before 28.0 on Android allows attackers to trigger the transmission of local files to arbitrary servers, or cause a denial of service (application crash), via a crafted application that specifies Android Crash Reporter arguments.

CVE-2012-1942 [HIGH] CWE-264 CVE-2012-1942: The Mozilla Updater and Windows Updater Service in Mozilla Firefox 12.0, Thunderbird 12.0, and SeaMo The Mozilla Updater and Windows Updater Service in Mozilla Firefox 12.0, Thunderbird 12.0, and SeaMonkey 2.9 on Windows allow local users to gain privileges by loading a DLL file in a privileged context.

CVE-2026-109763 Mozilla Foundation Security Advisory 2026-106: CVE-2026-109763 Mozilla Foundation Security Advisory 2026-106 CVE: CVE-2026-109763 Product: Firefox Impact: low Fixed in: Firefox 158

CVE-2026-109764 Mozilla Foundation Security Advisory 2026-106: CVE-2026-109764 Mozilla Foundation Security Advisory 2026-106 CVE: CVE-2026-109764 Product: Firefox Impact: low Fixed in: Firefox 158

CVE-2026-117998 Mozilla Foundation Security Advisory 2026-118: CVE-2026-117998 Mozilla Foundation Security Advisory 2026-118 CVE: CVE-2026-117998 Product: Firefox Impact: low Fixed in: Firefox 159

CVE-2026-117974 Mozilla Foundation Security Advisory 2026-118: CVE-2026-117974 Mozilla Foundation Security Advisory 2026-118 CVE: CVE-2026-117974 Product: Firefox Impact: low Fixed in: Firefox 159

CVE-2026-117891 Mozilla Foundation Security Advisory 2026-118: CVE-2026-117891 Mozilla Foundation Security Advisory 2026-118 CVE: CVE-2026-117891 Product: Firefox Impact: low Fixed in: Firefox 159

CVE-2026-117880 Mozilla Foundation Security Advisory 2026-118: CVE-2026-117880 Mozilla Foundation Security Advisory 2026-118 CVE: CVE-2026-117880 Product: Firefox Impact: low Fixed in: Firefox 159

CVE-2026-117870 Mozilla Foundation Security Advisory 2026-118: CVE-2026-117870 Mozilla Foundation Security Advisory 2026-118 CVE: CVE-2026-117870 Product: Firefox Impact: low Fixed in: Firefox 159

CVE-2026-117892 Mozilla Foundation Security Advisory 2026-118: CVE-2026-117892 Mozilla Foundation Security Advisory 2026-118 CVE: CVE-2026-117892 Product: Firefox Impact: low Fixed in: Firefox 159

CVE-2026-117899 Mozilla Foundation Security Advisory 2026-118: CVE-2026-117899 Mozilla Foundation Security Advisory 2026-118 CVE: CVE-2026-117899 Product: Firefox Impact: low Fixed in: Firefox 159

CVE-2026-117939 Mozilla Foundation Security Advisory 2026-118: CVE-2026-117939 Mozilla Foundation Security Advisory 2026-118 CVE: CVE-2026-117939 Product: Firefox Impact: low Fixed in: Firefox 159