| CVE-2025-11716 |
Links in a sandboxed iframe could open an external app on Android without the required "allow-" permission
|
6.5
Medium
|
Oct 14, 2025 |
| CVE-2025-11715 |
Memory safety bugs present in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143
|
8.8
High
|
Oct 14, 2025 |
| CVE-2025-11708 |
Use-after-free in MediaTrackGraphImpl::GetInstance()
|
9.8
Critical
|
Oct 14, 2025 |
| CVE-2025-11713 |
Insufficient escaping in the “Copy as cURL” feature could have been used to trick a user into executing unexpected…
|
8.1
High
|
Oct 14, 2025 |
| CVE-2025-11712 |
A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when…
|
6.1
Medium
|
Oct 14, 2025 |
| CVE-2025-11711 |
There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable
|
6.5
Medium
|
Oct 14, 2025 |
| CVE-2025-11710 |
A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks…
|
9.8
Critical
|
Oct 14, 2025 |
| CVE-2025-11714 |
Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and…
|
8.8
High
|
Oct 14, 2025 |
| CVE-2025-11709 |
A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using…
|
9.8
Critical
|
Oct 14, 2025 |
| CVE-2025-11153 |
JIT miscompilation in the JavaScript Engine: JIT component
|
7.5
High
|
Sep 30, 2025 |
| CVE-2025-11152 |
Sandbox escape due to integer overflow in the Graphics: Canvas2D component
|
8.6
High
|
Sep 30, 2025 |
| CVE-2025-10535 |
Information disclosure, mitigation bypass in the Privacy component in Firefox for Android
|
7.5
High
|
Sep 16, 2025 |
| CVE-2025-10534 |
Spoofing issue in the Site Permissions component
|
8.1
High
|
Sep 16, 2025 |
| CVE-2025-10531 |
Mitigation bypass in the Web Compatibility: Tooling component
|
5.4
Medium
|
Sep 16, 2025 |
| CVE-2025-10537 |
Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142
|
8.8
High
|
Sep 16, 2025 |
| CVE-2025-10530 |
Spoofing issue in the WebAuthn component in Firefox for Android
|
6.5
Medium
|
Sep 16, 2025 |
| CVE-2025-10536 |
Information disclosure in the Networking: Cache component
|
6.2
Medium
|
Sep 16, 2025 |
| CVE-2025-10532 |
Incorrect boundary conditions in the JavaScript: GC component
|
6.5
Medium
|
Sep 16, 2025 |
| CVE-2025-10529 |
Same-origin policy bypass in the Layout component
|
6.5
Medium
|
Sep 16, 2025 |
| CVE-2025-10528 |
Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component
|
7.3
High
|
Sep 16, 2025 |
| CVE-2025-10527 |
Sandbox escape due to use-after-free in the Graphics: Canvas2D component
|
7.1
High
|
Sep 16, 2025 |
| CVE-2025-10533 |
Integer overflow in the SVG component
|
8.8
High
|
Sep 16, 2025 |
| CVE-2025-8364 |
A crafted URL using a blob: URI could have hidden the true origin of the page, resulting in a potential spoofing attack
|
4.3
Medium
|
Aug 19, 2025 |
| CVE-2025-8042 |
Firefox for Android allowed a sandboxed iframe without the `allow-downloads` attribute to start downloads
|
9.8
Critical
|
Aug 19, 2025 |
| CVE-2025-8041 |
In the address bar, Firefox for Android truncated the display of URLs from the end instead of prioritizing the origin
|
5.3
Medium
|
Aug 19, 2025 |