| CVE-2025-6425 |
An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that…
|
4.3
Medium
|
Jun 24, 2025 |
| CVE-2025-6424 |
A use-after-free in FontFaceSet resulted in a potentially exploitable crash
|
9.8
Critical
|
Jun 24, 2025 |
| CVE-2025-5269 |
Memory safety bug present in Firefox ESR 128.10, and Thunderbird 128.10
|
8.1
High
|
May 27, 2025 |
| CVE-2025-5268 |
Memory safety bugs present in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10
|
8.1
High
|
May 27, 2025 |
| CVE-2025-5267 |
A clickjacking vulnerability could have been used to trick a user into leaking saved payment card details to a malicious…
|
5.4
Medium
|
May 27, 2025 |
| CVE-2025-5266 |
Script elements loading cross-origin resources generated load and error events which leaked information enabling…
|
4.3
Medium
|
May 27, 2025 |
| CVE-2025-5265 |
Due to insufficient escaping of the ampersand character in the “Copy as cURL” feature, an attacker could trick a user…
|
4.8
Medium
|
May 27, 2025 |
| CVE-2025-5264 |
Due to insufficient escaping of the newline character in the “Copy as cURL” feature, an attacker could trick a user into…
|
4.8
Medium
|
May 27, 2025 |
| CVE-2025-5263 |
Error handling for script execution was incorrectly isolated from web content, which could have allowed cross-origin…
|
4.3
Medium
|
May 27, 2025 |
| CVE-2025-4919 |
An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes
|
8.8
High
|
May 17, 2025 |
| CVE-2025-4918 |
An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object
|
9.8
Critical
|
May 17, 2025 |
| CVE-2025-4093 |
Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9
|
8.1
High
|
Apr 29, 2025 |
| CVE-2025-4091 |
Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9
|
8.1
High
|
Apr 29, 2025 |
| CVE-2025-4087 |
A vulnerability was identified in Thunderbird where XPath parsing could trigger undefined behavior due to missing null…
|
4.8
Medium
|
Apr 29, 2025 |
| CVE-2025-4084 |
Due to insufficient escaping of the special characters in the "copy as cURL" feature, an attacker could trick a user…
|
5.7
Medium
|
Apr 29, 2025 |
| CVE-2025-4083 |
A process isolation vulnerability in Thunderbird stemmed from improper handling of javascript: URIs, which could allow…
|
9.1
Critical
|
Apr 29, 2025 |
| CVE-2025-4082 |
Modification of specific WebGL shader attributes could trigger an out-of-bounds read, which, when chained with other…
|
5.9
Medium
|
Apr 29, 2025 |
| CVE-2025-2817 |
Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by…
|
8.8
High
|
Apr 29, 2025 |
| CVE-2025-3030 |
Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8
|
8.1
High
|
Apr 1, 2025 |
| CVE-2025-3029 |
A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a…
|
7.3
High
|
Apr 1, 2025 |
| CVE-2025-3028 |
JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free
|
6.5
Medium
|
Apr 1, 2025 |
| CVE-2025-2857 |
Following the recent Chrome sandbox escape (CVE-2025-2783), various Firefox developers identified a similar pattern in…
|
10.0
Critical
|
Mar 27, 2025 |
| CVE-2025-1938 |
Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7
|
6.5
Medium
|
Mar 4, 2025 |
| CVE-2025-1937 |
Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, and Thunderbird 128.7
|
7.5
High
|
Mar 4, 2025 |
| CVE-2025-1936 |
jar: URLs retrieve local file content packaged in a ZIP archive
|
7.3
High
|
Mar 4, 2025 |