| CVE-2025-6436 |
Memory safety bugs present in Firefox 139 and Thunderbird 139
|
8.1
High
|
Jun 24, 2025 |
| CVE-2025-6435 |
If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not…
|
8.1
High
|
Jun 24, 2025 |
| CVE-2025-6434 |
The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an…
|
4.3
Medium
|
Jun 24, 2025 |
| CVE-2025-6433 |
If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a…
|
9.8
Critical
|
Jun 24, 2025 |
| CVE-2025-6432 |
When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was…
|
8.6
High
|
Jun 24, 2025 |
| CVE-2025-6431 |
When a link can be opened in an external application, Firefox for Android will, by default, prompt the user before doing…
|
6.5
Medium
|
Jun 24, 2025 |
| CVE-2025-6428 |
When a URL was provided in a link querystring parameter, Firefox for Android would follow that URL instead of the…
|
4.3
Medium
|
Jun 24, 2025 |
| CVE-2025-6427 |
An attacker was able to bypass the `connect-src` directive of a Content Security Policy by manipulating subdocuments
|
9.1
Critical
|
Jun 24, 2025 |
| CVE-2025-6430 |
When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file…
|
6.1
Medium
|
Jun 24, 2025 |
| CVE-2025-6426 |
The executable file warning did not warn users before opening files with the `terminal` extension
|
8.8
High
|
Jun 24, 2025 |
| CVE-2025-6429 |
Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in…
|
6.5
Medium
|
Jun 24, 2025 |
| CVE-2025-6425 |
An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that…
|
4.3
Medium
|
Jun 24, 2025 |
| CVE-2025-6424 |
A use-after-free in FontFaceSet resulted in a potentially exploitable crash
|
9.8
Critical
|
Jun 24, 2025 |
| CVE-2025-49710 |
An integer overflow was present in `OrderedHashTable` used by the JavaScript engine
|
9.8
Critical
|
Jun 11, 2025 |
| CVE-2025-49709 |
Certain canvas operations could have lead to memory corruption
|
9.8
Critical
|
Jun 11, 2025 |
| CVE-2025-5272 |
Memory safety bugs present in Firefox 138 and Thunderbird 138
|
7.3
High
|
May 27, 2025 |
| CVE-2025-5271 |
Previewing a response in Devtools ignored CSP headers, which could have allowed content injection attacks
|
6.5
Medium
|
May 27, 2025 |
| CVE-2025-5270 |
In certain cases, SNI could have been sent unencrypted even when encrypted DNS was enabled
|
7.5
High
|
May 27, 2025 |
| CVE-2025-5269 |
Memory safety bug present in Firefox ESR 128.10, and Thunderbird 128.10
|
8.1
High
|
May 27, 2025 |
| CVE-2025-5268 |
Memory safety bugs present in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10
|
8.1
High
|
May 27, 2025 |
| CVE-2025-5267 |
A clickjacking vulnerability could have been used to trick a user into leaking saved payment card details to a malicious…
|
5.4
Medium
|
May 27, 2025 |
| CVE-2025-5266 |
Script elements loading cross-origin resources generated load and error events which leaked information enabling…
|
4.3
Medium
|
May 27, 2025 |
| CVE-2025-5265 |
Due to insufficient escaping of the ampersand character in the “Copy as cURL” feature, an attacker could trick a user…
|
4.8
Medium
|
May 27, 2025 |
| CVE-2025-5264 |
Due to insufficient escaping of the newline character in the “Copy as cURL” feature, an attacker could trick a user into…
|
4.8
Medium
|
May 27, 2025 |
| CVE-2025-5263 |
Error handling for script execution was incorrectly isolated from web content, which could have allowed cross-origin…
|
4.3
Medium
|
May 27, 2025 |