Mozilla Firefox vulnerabilities

CVE-2007-3656 [MEDIUM] CWE-200 CVE-2007-3656: Mozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not perform a security zone check wh Mozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not perform a security zone check when processing a wyciwyg URI, which allows remote attackers to obtain sensitive information, poison the browser cache, and possibly enable further attack vectors via (1) HTTP 302 redirect controls, (2) XMLHttpRequest, or (3) view-source URIs.

CVE-2025-4089 [MEDIUM] CWE-77 CVE-2025-4089: Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability was fixed in Firefox 138 and Thunderbird 138.

CVE-2014-1584 [MEDIUM] CWE-310 CVE-2014-1584: The Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 skips pinning checks upon The Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 skips pinning checks upon an unspecified issuer-verification error, which makes it easier for remote attackers to bypass an intended pinning configuration and spoof a web site via a crafted certificate that leads to presentation of the Untrusted Connection dialog to the user.

CVE-2025-4087 [MEDIUM] CWE-125 CVE-2025-4087: A vulnerability was identified in Thunderbird where XPath parsing could trigger undefined behavior d A vulnerability was identified in Thunderbird where XPath parsing could trigger undefined behavior due to missing null checks during attribute access. This could lead to out-of-bounds read access and potentially, memory corruption. This vulnerability was fixed in Firefox 138, Firefox ESR 128.10, Thunderbird 138, and Thunderbird 128.10.

CVE-2026-109723 Mozilla Foundation Security Advisory 2026-106: CVE-2026-109723 Mozilla Foundation Security Advisory 2026-106 CVE: CVE-2026-109723 Product: Firefox Impact: low Fixed in: Firefox 158

CVE-2026-109714 Mozilla Foundation Security Advisory 2026-106: CVE-2026-109714 Mozilla Foundation Security Advisory 2026-106 CVE: CVE-2026-109714 Product: Firefox Impact: low Fixed in: Firefox 158

CVE-2026-117893 Mozilla Foundation Security Advisory 2026-118: CVE-2026-117893 Mozilla Foundation Security Advisory 2026-118 CVE: CVE-2026-117893 Product: Firefox Impact: low Fixed in: Firefox 159

CVE-2026-117862 Mozilla Foundation Security Advisory 2026-118: CVE-2026-117862 Mozilla Foundation Security Advisory 2026-118 CVE: CVE-2026-117862 Product: Firefox Impact: low Fixed in: Firefox 159

CVE-2026-118009 Mozilla Foundation Security Advisory 2026-118: CVE-2026-118009 Mozilla Foundation Security Advisory 2026-118 CVE: CVE-2026-118009 Product: Firefox Impact: low Fixed in: Firefox 159

CVE-2026-118026 Mozilla Foundation Security Advisory 2026-118: CVE-2026-118026 Mozilla Foundation Security Advisory 2026-118 CVE: CVE-2026-118026 Product: Firefox Impact: low Fixed in: Firefox 159

CVE-2026-118025 Mozilla Foundation Security Advisory 2026-118: CVE-2026-118025 Mozilla Foundation Security Advisory 2026-118 CVE: CVE-2026-118025 Product: Firefox Impact: low Fixed in: Firefox 159

CVE-2026-12311 [MEDIUM] CWE-200 CVE-2026-12311: Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerabi Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

CVE-2015-4505 [MEDIUM] CWE-264 CVE-2015-4505: updater.exe in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows allows local updater.exe in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows allows local users to write to arbitrary files by conducting a junction attack and waiting for an update operation by the Mozilla Maintenance Service.

CVE-2013-0772 [MEDIUM] CWE-119 CVE-2013-0772: The RasterImage::DrawFrameTo function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and The RasterImage::DrawFrameTo function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and application crash) via a crafted GIF image.

CVE-2019-11720 [MEDIUM] CWE-79 CVE-2019-11720: Some unicode characters are incorrectly treated as whitespace during the parsing of web content inst Some unicode characters are incorrectly treated as whitespace during the parsing of web content instead of triggering parsing errors. This allows malicious code to then be processed, evading cross-site scripting (XSS) filtering. This vulnerability affects Firefox < 68.

CVE-2011-2670 [MEDIUM] CWE-79 CVE-2011-2670: Mozilla Firefox before 3.6 is vulnerable to XSS via the rendering of Cascading Style Sheets Mozilla Firefox before 3.6 is vulnerable to XSS via the rendering of Cascading Style Sheets

CVE-2006-5160 [HIGH] CVE-2006-5160: Multiple unspecified vulnerabilities in Mozilla Firefox have unspecified vectors and impact, as clai Multiple unspecified vulnerabilities in Mozilla Firefox have unspecified vectors and impact, as claimed during ToorCon 2006. NOTE: the vendor and original researchers have released a follow-up comment disputing this issue, in which one researcher states that "I have no undisclosed Firefox vulnerabilities. The person who was speaking with me made this claim, and

CVE-2015-7218 [MEDIUM] CWE-189 CVE-2015-7218: The HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a denial o The HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a denial of service (integer underflow, assertion failure, and application exit) via a single-byte header frame that triggers incorrect memory allocation.

CVE-2006-6503 [MEDIUM] CWE-254 CVE-2006-6503: Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to bypass cross-site scripting (XSS) protection by changing the src attribute of an IMG element to a javascript: URI.

CVE-2012-0456 [MEDIUM] CWE-200 CVE-2012-0456: The SVG Filters implementation in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10 The SVG Filters implementation in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to obtain sensitive information from process memory via vectors that trigger an out-of-bounds rea