| CVE-2025-5020 |
Opening maliciously-crafted URLs in Firefox from other apps such as Safari could have allowed attackers to spoof website…
|
4.3
Medium
|
May 21, 2025 |
| CVE-2025-27425 |
Scanning certain QR codes that included text with a website URL could allow the URL to be opened without presenting…
|
4.3
Medium
|
Mar 4, 2025 |
| CVE-2025-27424 |
Websites redirecting to a non-HTTP scheme URL could allow a website address to be spoofed for a malicious page
|
4.3
Medium
|
Mar 4, 2025 |
| CVE-2025-27426 |
Malicious websites utilizing a server-side redirect to an internal error page could result in a spoofed website URL
|
5.4
Medium
|
Mar 4, 2025 |
| CVE-2025-23109 |
Long hostnames in URLs could be leveraged to obscure the actual host of the website or spoof the website address
|
6.5
Medium
|
Jan 11, 2025 |
| CVE-2025-23108 |
Opening Javascript links in a new tab via long-press in the Firefox iOS client could result in a malicious script…
|
4.3
Medium
|
Jan 11, 2025 |
| CVE-2024-53975 |
Accessing a non-secure HTTP site that uses a non-existent port may cause the SSL padlock icon in the location URL bar…
|
5.4
Medium
|
Nov 26, 2024 |
| CVE-2024-53976 |
Under certain circumstances, navigating to a webpage would result in the address missing from the location URL bar,…
|
5.4
Medium
|
Nov 26, 2024 |
| CVE-2024-10004 |
Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in…
|
9.1
Critical
|
Oct 15, 2024 |
| CVE-2024-43111 |
Long pressing on a download link could potentially allow Javascript commands to be executed within the browser This…
|
9.8
Critical
|
Aug 6, 2024 |
| CVE-2024-43113 |
The contextual menu for links could provide an opportunity for cross-site scripting attacks This vulnerability affects…
|
6.1
Medium
|
Aug 6, 2024 |
| CVE-2024-43112 |
Long pressing on a download link could potentially provide a means for cross-site scripting This vulnerability affects…
|
6.1
Medium
|
Aug 6, 2024 |
| CVE-2024-38313 |
In certain scenarios a malicious website could attempt to display a fake location URL bar which could mislead users as…
|
4.3
Medium
|
Jun 13, 2024 |
| CVE-2024-38312 |
When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly…
|
6.5
Medium
|
Jun 13, 2024 |
| CVE-2024-31393 |
Dragging Javascript URLs to the address bar could cause them to be loaded, bypassing restrictions and security…
|
4.3
Medium
|
Apr 3, 2024 |
| CVE-2024-31392 |
If an insecure element was added to a page after a delay, Firefox would not replace the secure icon with a mixed content…
|
7.5
High
|
Apr 3, 2024 |
| CVE-2024-26281 |
Upon scanning a JavaScript URI with the QR code scanner, an attacker could have executed unauthorized scripts on the…
|
4.7
Medium
|
Feb 22, 2024 |
| CVE-2024-26282 |
Using an AMP url with a canonical element, an attacker could have executed JavaScript from an opened bookmarked page
|
7.1
High
|
Feb 22, 2024 |
| CVE-2024-26283 |
An attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI when opening an external…
|
7.8
High
|
Feb 22, 2024 |
| CVE-2024-0953 |
When a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before being navigated to the…
|
6.1
Medium
|
Feb 5, 2024 |
| CVE-2023-49061 |
An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information
|
Not rated
|
Nov 21, 2023 |
| CVE-2023-49060 |
An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the…
|
Not rated
|
Nov 21, 2023 |
| CVE-2023-5758 |
When opening a page in reader mode, the redirect URL could have caused attacker-controlled script to execute in a…
|
6.1
Medium
|
Oct 24, 2023 |
| CVE-2023-37456 |
The session restore helper crashed whenever there was no parameter sent to the message handler
|
Not rated
|
Jul 12, 2023 |
| CVE-2023-37455 |
The permission request prompt from the site in the background tab was overlaid on top of the site in the foreground tab
|
Not rated
|
Jul 12, 2023 |