Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

mozilla — Vulnerabilities & Security Advisories 1768

Browse all 1768 CVE security advisories affecting mozilla. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top products by mozilla:FirefoxThunderbirdFirefox ESRFirefox for iOSFirefox for AndroidFocus for iOSThunderbird ESRnssMozilla VPNHubs CloudWebThings GatewayMozilla BleachFocussccacheNunjucksConvictPollBotMozilla VPN 2.28.0neqorhinothin-veccommon-voiceMozilla VPN 2.16.1hawkgeckodriverMozilla VPN iOS 1.0.7Firefox forBugzillaNetwork Security Services (NSS)Network Security Services
CVE IDTitleCVSSSeverityPublished
CVE-2025-8031 Incorrect URL stripping in CSP reports — Firefox 7.5 -2025-07-22
CVE-2025-8030 Potential user-assisted code execution in “Copy as cURL” command — Firefox 8.8 -2025-07-22
CVE-2025-8036 DNS rebinding circumvents CORS — Firefox 8.1 -2025-07-22
CVE-2025-8029 javascript: URLs executed on object and embed tags — Firefox 6.1 -2025-07-22
CVE-2025-8028 Large branch table could lead to truncated instruction — Firefox 7.1 -2025-07-22
CVE-2025-8027 JavaScript engine only wrote partial return value to stack — Firefox 9.1 -2025-07-22
CVE-2025-6703 transport/fc.rs: panic attempting to send MAX_DATA with value larger max varint — neqoCWE-20 7.5 -2025-06-26
CVE-2025-6435 Save as in Devtools could download files without sanitizing the extension — Firefox 8.8AIHighAI2025-06-24
CVE-2025-6436 Memory safety bugs fixed in Firefox 140 and Thunderbird 140 — Firefox 9.8AICriticalAI2025-06-24
CVE-2025-6433 WebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificate — Firefox 6.5AIMediumAI2025-06-24
CVE-2025-6432 DNS Requests leaked outside of a configured SOCKS proxy — Firefox 7.4AIHighAI2025-06-24
CVE-2025-6434 HTTPS-Only exception screen lacked anti-clickjacking delay — Firefox 4.3AIMediumAI2025-06-24
CVE-2025-6431 The prompt in Firefox for Android that asks before opening a link in an external application could be bypassed — Firefox 6.5AIMediumAI2025-06-24
CVE-2025-6428 Firefox for Android opened URLs specified in a link querystring parameter — Firefox 6.1AIMediumAI2025-06-24
CVE-2025-6430 Content-Disposition header ignored when a file is included in an embed or object tag — Firefox 6.1 -2025-06-24
CVE-2025-6429 Incorrect parsing of URLs could have allowed embedding of youtube.com — Firefox 4.3 -2025-06-24
CVE-2025-6427 connect-src Content Security Policy restriction could be bypassed — Firefox 7.5AIHighAI2025-06-24
CVE-2025-6426 No warning when opening executable terminal files on macOS — Firefox 8.8 -2025-06-24
CVE-2025-6424 Use-after-free in FontFaceSet — Firefox 9.8 -2025-06-24
CVE-2025-6425 The WebCompat WebExtension shipped with Firefox exposed a persistent UUID — Firefox 7.5 -2025-06-24
CVE-2025-5687 Local privilege escalation vulnerability in Mozilla VPN clients for macOS v2.27.0 and below. — Mozilla VPN 2.28.0 7.8AIHighAI2025-06-11
CVE-2025-5986 Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links — Thunderbird 6.5AIMediumAI2025-06-11
CVE-2025-49709 Memory corruption in canvas surfaces — Firefox 8.1AIHighAI2025-06-11
CVE-2025-49710 Integer overflow in OrderedHashTable — Firefox 8.8AIHighAI2025-06-11
CVE-2025-5272 Memory safety bugs fixed in Firefox 139 and Thunderbird 139 — Firefox 9.8AICriticalAI2025-05-27
CVE-2025-5270 SNI was sometimes unencrypted — Firefox 7.5AIHighAI2025-05-27
CVE-2025-5271 Devtools' preview ignored CSP headers — Firefox 4.3AIMediumAI2025-05-27
CVE-2025-5269 Memory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.11 — Firefox 8.8AIHighAI2025-05-27
CVE-2025-5268 Memory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.11 — Firefox 9.8AICriticalAI2025-05-27
CVE-2025-5267 Clickjacking vulnerability could have led to leaking saved payment card details — Firefox 4.3AIMediumAI2025-05-27

This page lists every published CVE security advisory associated with mozilla. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.