Логотип exploitDog
product: "firefox"
Консоль
Логотип exploitDog

exploitDog

product: "firefox"
Mozilla Firefox

Mozilla Firefoxсвободный браузер на движке Gecko

Релизный цикл, информация об уязвимостях

Продукт: Mozilla Firefox
Вендор: mozilla

График релизов

11511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614720232024202520262027

Недавние уязвимости Mozilla Firefox

Количество 15 425

debian логотип

CVE-2025-11718

4 месяца назад

When the address bar was hidden due to scrolling on Android, a malicio ...

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2025-11717

4 месяца назад

When switching between Android apps using the card carousel Firefox shows a black screen as its card image when a password-related screen was the last one being used. Prior to Firefox 144 the password edit screen was visible. This vulnerability affects Firefox < 144.

CVSS3: 9.1
EPSS: Низкий
debian логотип

CVE-2025-11717

4 месяца назад

When switching between Android apps using the card carousel Firefox sh ...

CVSS3: 9.1
EPSS: Низкий
nvd логотип

CVE-2025-11716

4 месяца назад

Links in a sandboxed iframe could open an external app on Android without the required "allow-" permission. This vulnerability affects Firefox < 144 and Thunderbird < 144.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2025-11716

4 месяца назад

Links in a sandboxed iframe could open an external app on Android with ...

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2025-11715

4 месяца назад

Memory safety bugs present in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 144, Firefox ESR < 140.4, Thunderbird < 144, and Thunderbird < 140.4.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2025-11715

4 месяца назад

Memory safety bugs present in Firefox ESR 140.3, Thunderbird ESR 140.3 ...

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2025-11714

4 месяца назад

Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 144, Firefox ESR < 115.29, Firefox ESR < 140.4, Thunderbird < 144, and Thunderbird < 140.4.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2025-11714

4 месяца назад

Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, T ...

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2025-11713

4 месяца назад

Insufficient escaping in the “Copy as cURL” feature could have been used to trick a user into executing unexpected code on Windows. This did not affect the application when running on other operating systems. This vulnerability affects Firefox < 144, Firefox ESR < 140.4, Thunderbird < 144, and Thunderbird < 140.4.

CVSS3: 8.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
debian логотип
CVE-2025-11718

When the address bar was hidden due to scrolling on Android, a malicio ...

CVSS3: 6.5
0%
Низкий
4 месяца назад
nvd логотип
CVE-2025-11717

When switching between Android apps using the card carousel Firefox shows a black screen as its card image when a password-related screen was the last one being used. Prior to Firefox 144 the password edit screen was visible. This vulnerability affects Firefox < 144.

CVSS3: 9.1
0%
Низкий
4 месяца назад
debian логотип
CVE-2025-11717

When switching between Android apps using the card carousel Firefox sh ...

CVSS3: 9.1
0%
Низкий
4 месяца назад
nvd логотип
CVE-2025-11716

Links in a sandboxed iframe could open an external app on Android without the required "allow-" permission. This vulnerability affects Firefox < 144 and Thunderbird < 144.

CVSS3: 6.5
0%
Низкий
4 месяца назад
debian логотип
CVE-2025-11716

Links in a sandboxed iframe could open an external app on Android with ...

CVSS3: 6.5
0%
Низкий
4 месяца назад
nvd логотип
CVE-2025-11715

Memory safety bugs present in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 144, Firefox ESR < 140.4, Thunderbird < 144, and Thunderbird < 140.4.

CVSS3: 8.8
0%
Низкий
4 месяца назад
debian логотип
CVE-2025-11715

Memory safety bugs present in Firefox ESR 140.3, Thunderbird ESR 140.3 ...

CVSS3: 8.8
0%
Низкий
4 месяца назад
nvd логотип
CVE-2025-11714

Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 144, Firefox ESR < 115.29, Firefox ESR < 140.4, Thunderbird < 144, and Thunderbird < 140.4.

CVSS3: 8.8
0%
Низкий
4 месяца назад
debian логотип
CVE-2025-11714

Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, T ...

CVSS3: 8.8
0%
Низкий
4 месяца назад
nvd логотип
CVE-2025-11713

Insufficient escaping in the “Copy as cURL” feature could have been used to trick a user into executing unexpected code on Windows. This did not affect the application when running on other operating systems. This vulnerability affects Firefox < 144, Firefox ESR < 140.4, Thunderbird < 144, and Thunderbird < 140.4.

CVSS3: 8.1
0%
Низкий
4 месяца назад

Уязвимостей на страницу


Поделиться