Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Mozilla — Vulnerabilities & Security Advisories 2268

Browse all 2268 CVE security advisories affecting Mozilla. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Mozilla operates as a non-profit organization primarily known for developing the Firefox web browser and maintaining the Gecko rendering engine. Its software portfolio serves millions of users globally, focusing on open-source web technologies and privacy-centric browsing solutions. Historically, the codebase has been susceptible to a wide array of vulnerabilities, including remote code execution, cross-site scripting, and memory corruption issues such as buffer overflows. These flaws often stem from complex JavaScript engines and network stack implementations. While Mozilla maintains a robust security response team and regularly issues patches, the sheer volume of recorded Common Vulnerabilities and Exposures highlights the challenges inherent in maintaining large-scale, cross-platform applications. The organization continues to prioritize security audits and community-driven bug bounty programs to mitigate risks associated with its extensive feature set and widespread adoption.

CVE ID Title CVSS Severity Published
CVE-2023-23606 Memory safety bugs fixed in Firefox 109 — Firefox 8.8 - 2023-06-02
CVE-2023-23605 Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7 — Firefox 8.8 - 2023-06-02
CVE-2023-23604 Creation of duplicate SystemPrincipal from less secure contexts — Firefox 4.3 - 2023-06-02
CVE-2023-23603 Calls to console.log allowed bypassing Content Security Policy via format directive — Firefox 6.5 - 2023-06-02
CVE-2023-23602 Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers — Firefox 8.1 - 2023-06-02
CVE-2023-23601 URL being dragged from cross-origin iframe into same tab triggers navigation — Firefox 4.3 - 2023-06-02
CVE-2023-23600 Notification permissions persisted between Normal and Private Browsing on Android — Firefox 4.3 - 2023-06-02
CVE-2023-23599 Malicious command could be hidden in devtools output on Windows — Firefox 8.8 - 2023-06-02
CVE-2023-23598 Arbitrary file read from GTK drag and drop on Linux — Firefox 6.5 - 2023-06-02
CVE-2023-23597 Logic bug in process allocation allowed to read arbitrary files — Firefox 6.5 - 2023-06-02
CVE-2023-1945 Mozilla Firefox ESR 缓冲区错误漏洞 — Thunderbird 8.8 - 2023-06-02
CVE-2023-0767 Mozilla Firefox 安全漏洞 — Firefox 8.8 - 2023-06-02
CVE-2023-0616 Mozilla Firefox ESR 资源管理错误漏洞 — Thunderbird 6.5 - 2023-06-02
CVE-2023-0547 Mozilla Thunderbird 信任管理问题漏洞 — Thunderbird 6.5 - 2023-06-02
CVE-2023-0430 Mozilla Thunderbird 信任管理问题漏洞 — Thunderbird - - 2023-06-02
CVE-2019-17003 Mozilla Firefox 跨站脚本漏洞 — Firefox for iOS 6.1 - 2023-02-16
CVE-2020-12413 Mozilla Firefox 信息泄露漏洞 — Firefox 5.9 - 2023-02-16
CVE-2020-6817 Python Bleach 安全漏洞 — Mozilla Bleach 7.5 - 2023-02-16
CVE-2021-23980 Python Bleach 跨站脚本漏洞 — Mozilla Bleach 6.1 - 2023-02-16
CVE-2021-43529 Mozilla Thunderbird 缓冲区错误漏洞 — Thunderbird 9.8 - 2023-02-16
CVE-2020-15679 Mozilla VPN 授权问题漏洞 — Mozilla VPN iOS 1.0.7 5.9 - 2022-12-22
CVE-2020-15685 Mozilla Thunderbird 命令注入漏洞 — Thunderbird 8.8 - 2022-12-22
CVE-2021-4126 Mozilla Thunderbird 安全漏洞 — Thunderbird 6.5 - 2022-12-22
CVE-2021-4127 多款Mozilla产品安全漏洞 — Thunderbird 8.8 - 2022-12-22
CVE-2021-4128 Mozilla Firefox 资源管理错误漏洞 — Firefox 6.5 - 2022-12-22
CVE-2021-4129 Mozilla Thunderbird 缓冲区错误漏洞 — Firefox 8.8 - 2022-12-22
CVE-2021-4140 Mozilla Firefox 安全特征问题漏洞 — Firefox ESR 10.0 - 2022-12-22
CVE-2021-4221 Mozilla Firefox 安全漏洞 — Firefox 6.5 - 2022-12-22
CVE-2022-0511 Mozilla Firefox 缓冲区错误漏洞 — Firefox 8.8 - 2022-12-22
CVE-2022-0517 Mozilla VPN 代码问题漏洞 — Mozilla VPN 7.8 - 2022-12-22

This page lists every published CVE security advisory associated with Mozilla. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.