Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

mozilla — Vulnerabilities & Security Advisories 1768

Browse all 1768 CVE security advisories affecting mozilla. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top products by mozilla:FirefoxThunderbirdFirefox ESRFirefox for iOSFirefox for AndroidFocus for iOSThunderbird ESRnssMozilla VPNHubs CloudWebThings GatewayMozilla BleachFocussccacheNunjucksConvictPollBotMozilla VPN 2.28.0neqorhinothin-veccommon-voiceMozilla VPN 2.16.1hawkgeckodriverMozilla VPN iOS 1.0.7Firefox forBugzillaNetwork Security Services (NSS)Network Security Services
CVE IDTitleCVSSSeverityPublished
CVE-2025-11718 Address bar could be spoofed on Android using visibilitychange — Firefox 4.3AIMediumAI2025-10-14
CVE-2025-11717 The password edit screen was not hidden in Android card view — Firefox 5.3AIMediumAI2025-10-14
CVE-2025-11720 Spoofing risk in Android custom tabs — Firefox 4.3AIMediumAI2025-10-14
CVE-2025-11716 Sandboxed iframes allowed links to open in external apps (Android only) — Firefox 5.4AIMediumAI2025-10-14
CVE-2025-11719 Use-after-free caused by the native messaging web extension API on Windows — Firefox 7.5AIHighAI2025-10-14
CVE-2025-11721 Memory safety bug fixed in Firefox 144 and Thunderbird 144 — Firefox 8.8AIHighAI2025-10-14
CVE-2025-11715 Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144 — Firefox 8.8AIHighAI2025-10-14
CVE-2025-11712 An OBJECT tag type attribute overrode browser behavior on web resources without a content-type — Firefox 6.1AIMediumAI2025-10-14
CVE-2025-11713 Potential user-assisted code execution in “Copy as cURL” command — Firefox 8.8AIHighAI2025-10-14
CVE-2025-11708 Use-after-free in MediaTrackGraphImpl::GetInstance() — Firefox 9.8AICriticalAI2025-10-14
CVE-2025-11714 Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144 — Firefox 9.8AICriticalAI2025-10-14
CVE-2025-11711 Some non-writable Object properties could be modified — Firefox 8.1AIHighAI2025-10-14
CVE-2025-11710 Cross-process information leaked due to malicious IPC messages — Firefox 6.5AIMediumAI2025-10-14
CVE-2025-11709 Out of bounds read/write in a privileged process triggered by WebGL textures — Firefox 9.8AICriticalAI2025-10-14
CVE-2025-10859 Data stored in cookies for non-HTML content while browsing Incognito could be viewed after closing private tabs — Firefox for iOS 6.5AIMediumAI2025-09-30
CVE-2025-11153 JIT miscompilation in the JavaScript Engine: JIT component — Firefox 6.5AIMediumAI2025-09-30
CVE-2025-11152 Sandbox escape due to integer overflow in the Graphics: Canvas2D component — Firefox 6.5AIMediumAI2025-09-30
CVE-2025-10535 Information disclosure, mitigation bypass in the Privacy component in Firefox for Android — Firefox 8.1AIHighAI2025-09-16
CVE-2025-10290 Opening links via the contextual menu in Focus for iOS would not update the toolbar UI correctly, allowing attackers to spoof websites — Focus for iOS 6.5AIMediumAI2025-09-16
CVE-2025-10534 Spoofing issue in the Site Permissions component — Firefox 8.1AIHighAI2025-09-16
CVE-2025-10530 Spoofing issue in the WebAuthn component in Firefox for Android — Firefox 8.1AIHighAI2025-09-16
CVE-2025-10531 Mitigation bypass in the Web Compatibility: Tooling component — Firefox 8.1AIHighAI2025-09-16
CVE-2025-10536 Information disclosure in the Networking: Cache component — Firefox 8.1AIHighAI2025-09-16
CVE-2025-10537 Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143 — Firefox 9.8AICriticalAI2025-09-16
CVE-2025-10529 Same-origin policy bypass in the Layout component — Firefox 8.1AIHighAI2025-09-16
CVE-2025-10532 Incorrect boundary conditions in the JavaScript: GC component — Firefox 8.1AIHighAI2025-09-16
CVE-2025-10533 Integer overflow in the SVG component — Firefox 8.1AIHighAI2025-09-16
CVE-2025-10527 Sandbox escape due to use-after-free in the Graphics: Canvas2D component — Firefox 8.1AIHighAI2025-09-16
CVE-2025-10528 Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component — Firefox 8.1AIHighAI2025-09-16
CVE-2025-55033 Drag and drop gestures in Focus for iOS could allow JavaScript links to be executed incorrectly — Focus for iOS 5.4 -2025-08-19

This page lists every published CVE security advisory associated with mozilla. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.