Mozilla Firefox vulnerabilities

CVE-2017-5427 [MEDIUM] CWE-362 CVE-2017-5427: A non-existent chrome.manifest file will attempt to be loaded during startup from the primary instal A non-existent chrome.manifest file will attempt to be loaded during startup from the primary installation directory. If a malicious user with local access puts chrome.manifest and other referenced files in this directory, they will be loaded and activated during startup. This could result in malicious software being added without consent or modificat

CVE-2019-11737 [MEDIUM] CWE-345 CVE-2019-11737: If a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any port If a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any port or path restriction of the directive will be ignored, leading to CSP directives not being properly applied to content. This vulnerability affects Firefox < 69.

CVE-2024-53975 [MEDIUM] CVE-2024-53975: Accessing a non-secure HTTP site that uses a non-existent port may cause the SSL padlock icon in the Accessing a non-secure HTTP site that uses a non-existent port may cause the SSL padlock icon in the location URL bar to, misleadingly, appear secure. This vulnerability affects Firefox for iOS < 133.

CVE-2022-36318 [MEDIUM] CWE-362 CVE-2022-36318: When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected. This vulnerability affects Firefox ESR < 102.1, Firefox ESR < 91.12, Firefox < 103, Thunderbird < 102.1, and Thunderbird < 91.12.

CVE-2023-32208 [MEDIUM] CVE-2023-32208: Service workers could reveal script base URL due to dynamic `import()`. This vulnerability affects F Service workers could reveal script base URL due to dynamic `import()`. This vulnerability affects Firefox < 113.

CVE-2025-27426 [MEDIUM] CWE-601 CVE-2025-27426: Malicious websites utilizing a server-side redirect to an internal error page could result in a spoo Malicious websites utilizing a server-side redirect to an internal error page could result in a spoofed website URL. This vulnerability was fixed in Firefox for iOS 136.

CVE-2026-12323 [MEDIUM] CWE-1021 CVE-2026-12323: Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152 and Th Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

CVE-2024-10468 [MEDIUM] CWE-362 CVE-2024-10468: Potential race conditions in IndexedDB could have caused memory corruption, leading to a potentially Potential race conditions in IndexedDB could have caused memory corruption, leading to a potentially exploitable crash. This vulnerability affects Firefox < 132 and Thunderbird < 132.

CVE-2019-9808 [MEDIUM] CWE-346 CVE-2019-9808: If WebRTC permission is requested from documents with data: or blob: URLs, the permission notificati If WebRTC permission is requested from documents with data: or blob: URLs, the permission notifications do not properly display the originating domain. The notification states "Unknown origin" as the requestee, leading to user confusion about which site is asking for this permission. This vulnerability affects Firefox < 66.

CVE-2025-4090 [MEDIUM] CWE-532 CVE-2025-4090: A vulnerability existed in Thunderbird for Android where potentially sensitive library locations wer A vulnerability existed in Thunderbird for Android where potentially sensitive library locations were logged via Logcat. This vulnerability was fixed in Firefox 138 and Thunderbird 138.

CVE-2025-3035 [MEDIUM] CWE-359 CVE-2025-3035: By first using the AI chatbot in one tab and later activating it in another tab, the document title By first using the AI chatbot in one tab and later activating it in another tab, the document title of the previous tab would leak into the chat prompt. This vulnerability was fixed in Firefox 137.

CVE-2007-1095 [MEDIUM] CVE-2007-1095: Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 do not properly implement JavaScript onUnl Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 do not properly implement JavaScript onUnload handlers, which allows remote attackers to run certain JavaScript code and access the location DOM hierarchy in the context of the next web site that is visited by a client.

CVE-2007-5337 [MEDIUM] CWE-200 CVE-2007-5337: Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5, when running on Linux systems with gnome- Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5, when running on Linux systems with gnome-vfs support, might allow remote attackers to read arbitrary files on SSH/sftp servers that accept key authentication by creating a web page on the target server, in which the web page contains URIs with (1) smb: or (2) sftp: schemes that access other fi

CVE-2012-4184 [MEDIUM] CWE-79 CVE-2012-4184: The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x befo The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not prevent access to properties of a prototype for a standard class, which allows remote attackers to execute arbitrary JavaScript code with chrome pr

CVE-2015-4502 [MEDIUM] CWE-254 CVE-2015-4502: js/src/proxy/Proxy.cpp in Mozilla Firefox before 41.0 mishandles certain receiver arguments, which a js/src/proxy/Proxy.cpp in Mozilla Firefox before 41.0 mishandles certain receiver arguments, which allows remote attackers to bypass intended window access restrictions via a crafted web site.

CVE-2021-38509 [MEDIUM] CWE-1021 CVE-2021-38509: Due to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with arbitrary Due to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with arbitrary (although unstyled) contents could be displayed over top an uncontrolled webpage of the attacker's choosing. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3.

CVE-2014-8631 [MEDIUM] CWE-284 CVE-2014-8631: The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 34.0 and SeaMonkey before 2 The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 supports native-interface passing, which allows remote attackers to bypass intended DOM object restrictions via a call to an unspecified method.

CVE-2011-3664 [MEDIUM] CVE-2011-3664: Mozilla Firefox before 9.0, Thunderbird before 9.0, and SeaMonkey before 2.6 on Mac OS X do not prop Mozilla Firefox before 9.0, Thunderbird before 9.0, and SeaMonkey before 2.6 on Mac OS X do not properly handle certain DOM frame deletions by plugins, which allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) or possibly have unspecified other impact via a crafted web site.

CVE-2026-117903 Mozilla Foundation Security Advisory 2026-118: CVE-2026-117903 Mozilla Foundation Security Advisory 2026-118 CVE: CVE-2026-117903 Product: Firefox Impact: low Fixed in: Firefox 159

CVE-2026-117912 Mozilla Foundation Security Advisory 2026-118: CVE-2026-117912 Mozilla Foundation Security Advisory 2026-118 CVE: CVE-2026-117912 Product: Firefox Impact: low Fixed in: Firefox 159