Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

mozilla — Vulnerabilities & Security Advisories 1768

Browse all 1768 CVE security advisories affecting mozilla. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top products by mozilla:FirefoxThunderbirdFirefox ESRFirefox for iOSFirefox for AndroidFocus for iOSThunderbird ESRnssMozilla VPNHubs CloudWebThings GatewayMozilla BleachFocussccacheNunjucksConvictPollBotMozilla VPN 2.28.0neqorhinothin-veccommon-voiceMozilla VPN 2.16.1hawkgeckodriverMozilla VPN iOS 1.0.7Firefox forBugzillaNetwork Security Services (NSS)Network Security Services
CVE IDTitleCVSSSeverityPublished
CVE-2025-55032 Focus incorrectly ignores Content-Disposition headers for some MIME types — Focus for iOS 5.4 -2025-08-19
CVE-2025-55029 Malicious scripts could spam popups for denial of service attacks — Firefox for iOS 6.5 -2025-08-19
CVE-2025-55031 Passkey phishing within Bluetooth range — Firefox for iOS 7.3 -2025-08-19
CVE-2025-55028 JavaScript alerts could impede UI interaction or allow denial of service attacks — Firefox for iOS 6.5 -2025-08-19
CVE-2025-55030 Content-Disposition headers incorrectly ignored for some MIME types — Firefox for iOS 6.1 -2025-08-19
CVE-2025-54144 Internal Firefox open-text URL scheme allowed loading of arbitrary URLs — Firefox for iOS 6.5 -2025-08-19
CVE-2025-54145 Scanning a malicious URL utilizing Firefox's open-text scheme with the QR code scanner could load arbitrary websites — Firefox for iOS 8.1 -2025-08-19
CVE-2025-54143 Sandboxed iframes could allow local downloads despite sandbox restrictions — Firefox for iOS 9.3 -2025-08-19
CVE-2025-8042 Sandboxed iframe could start downloads — Firefox 9.3 -2025-08-19
CVE-2025-8364 Address bar spoofing using an blob URI on Firefox for Android — Firefox 4.3 -2025-08-19
CVE-2025-8041 Incorrect URL truncation in Firefox for Android — Firefox 4.3 -2025-08-19
CVE-2025-9187 Memory safety bugs fixed in Firefox 142 and Thunderbird 142 — Firefox 9.8 -2025-08-19
CVE-2025-9184 Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 — Firefox 9.8 -2025-08-19
CVE-2025-9182 Denial-of-service due to out-of-memory in the Graphics: WebRender component — Firefox 6.5 -2025-08-19
CVE-2025-9183 Spoofing issue in the Address Bar component — Firefox 4.3 -2025-08-19
CVE-2025-9185 Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 — Firefox 9.8 -2025-08-19
CVE-2025-9186 Spoofing issue in the Address Bar component of Firefox Focus for Android — Firefox 4.3 -2025-08-19
CVE-2025-9180 Same-origin policy bypass in the Graphics: Canvas2D component — Firefox 9.1 -2025-08-19
CVE-2025-9181 Uninitialized memory in the JavaScript Engine component — Firefox 8.8 -2025-08-19
CVE-2025-9179 Sandbox escape due to invalid pointer in the Audio/Video: GMP component — Firefox 9.8 -2025-08-19
CVE-2025-8044 Memory safety bugs fixed in Firefox 141 and Thunderbird 141 — Firefox 9.8 -2025-07-22
CVE-2025-8035 Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 — Firefox 9.8 -2025-07-22
CVE-2025-8043 Incorrect URL truncation — Firefox 7.1 -2025-07-22
CVE-2025-8034 Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 — Firefox 9.8 -2025-07-22
CVE-2025-8040 Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 — Firefox 8.8 -2025-07-22
CVE-2025-8032 XSLT documents could bypass CSP — Firefox 7.1 -2025-07-22
CVE-2025-8039 Search terms persisted in URL bar — Firefox 4.3 -2025-07-22
CVE-2025-8038 CSP frame-src was not correctly enforced for paths — Firefox 9.1 -2025-07-22
CVE-2025-8033 Incorrect JavaScript state machine for generators — Firefox 8.8 -2025-07-22
CVE-2025-8030 Potential user-assisted code execution in “Copy as cURL” command — Firefox 8.8 -2025-07-22

This page lists every published CVE security advisory associated with mozilla. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.