| CVE-2025-14323 |
Privilege escalation in the DOM: Notifications component
|
8.8
High
|
Dec 9, 2025 |
| CVE-2025-14322 |
Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component
|
8.0
High
|
Dec 9, 2025 |
| CVE-2025-14321 |
Use-after-free in the WebRTC: Signaling component
|
9.8
Critical
|
Dec 9, 2025 |
| CVE-2025-13020 |
Use-after-free in the WebRTC: Audio/Video component
|
8.8
High
|
Nov 11, 2025 |
| CVE-2025-13027 |
Memory safety bugs present in Firefox 144 and Thunderbird 144
|
8.1
High
|
Nov 11, 2025 |
| CVE-2025-13019 |
Same-origin policy bypass in the DOM: Workers component
|
8.1
High
|
Nov 11, 2025 |
| CVE-2025-13018 |
Mitigation bypass in the DOM: Security component
|
8.1
High
|
Nov 11, 2025 |
| CVE-2025-13017 |
Same-origin policy bypass in the DOM: Notifications component
|
8.1
High
|
Nov 11, 2025 |
| CVE-2025-13025 |
Incorrect boundary conditions in the Graphics: WebGPU component
|
7.5
High
|
Nov 11, 2025 |
| CVE-2025-13026 |
Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component
|
9.8
Critical
|
Nov 11, 2025 |
| CVE-2025-13024 |
JIT miscompilation in the JavaScript Engine: JIT component
|
9.8
Critical
|
Nov 11, 2025 |
| CVE-2025-13016 |
Incorrect boundary conditions in the JavaScript: WebAssembly component
|
7.5
High
|
Nov 11, 2025 |
| CVE-2025-13023 |
Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component
|
9.8
Critical
|
Nov 11, 2025 |
| CVE-2025-13022 |
Incorrect boundary conditions in the Graphics: WebGPU component
|
9.8
Critical
|
Nov 11, 2025 |
| CVE-2025-13021 |
Incorrect boundary conditions in the Graphics: WebGPU component
|
9.8
Critical
|
Nov 11, 2025 |
| CVE-2025-13015 |
Spoofing issue in Firefox
|
3.4
Low
|
Nov 11, 2025 |
| CVE-2025-13014 |
Use-after-free in the Audio/Video component
|
8.8
High
|
Nov 11, 2025 |
| CVE-2025-13013 |
Mitigation bypass in the DOM: Core & HTML component
|
6.1
Medium
|
Nov 11, 2025 |
| CVE-2025-13012 |
Race condition in the Graphics component
|
7.5
High
|
Nov 11, 2025 |
| CVE-2025-12380 |
Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or…
|
9.8
Critical
|
Oct 28, 2025 |
| CVE-2025-11720 |
The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full…
|
8.1
High
|
Oct 14, 2025 |
| CVE-2025-11721 |
Memory safety bug present in Firefox 143 and Thunderbird 143
|
9.8
Critical
|
Oct 14, 2025 |
| CVE-2025-11718 |
When the address bar was hidden due to scrolling on Android, a malicious page could create a fake address bar to fool…
|
6.5
Medium
|
Oct 14, 2025 |
| CVE-2025-11717 |
When switching between Android apps using the card carousel Firefox shows a black screen as its card image when a…
|
9.1
Critical
|
Oct 14, 2025 |
| CVE-2025-11719 |
Starting in Thunderbird 143, the use of the native messaging API by web extensions on Windows could lead to crashes…
|
9.8
Critical
|
Oct 14, 2025 |