Skip to content

Known vulnerabilities in Mozilla Firefox

Is your version affected?

CVE Summary Score Published
CVE-2021-24001 A compromised content process could have performed session history manipulations it should not have been able to due… Not rated Jun 24, 2021
CVE-2021-24002 When a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the newlines would have been… Not rated Jun 24, 2021
CVE-2021-29944 Lack of escaping allowed HTML injection when a webpage was viewed in Reader View Not rated Jun 24, 2021
CVE-2021-29945 The WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read and result in a crash Not rated Jun 24, 2021
CVE-2021-29946 Ports that were written as an integer overflow above the bounds of a 16-bit integer could have bypassed port blocking… Not rated Jun 24, 2021
CVE-2021-29947 Mozilla developers and community members reported memory safety bugs present in Firefox 87 Not rated Jun 24, 2021
CVE-2021-29951 The Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which, in a domain network, grants… Not rated Jun 24, 2021
CVE-2021-29952 When Web Render components were destructed, a race condition could have caused undefined behavior, and we presume that… Not rated Jun 24, 2021
CVE-2021-29953 A malicious webpage could have forced a Firefox for Android user into executing attacker-controlled JavaScript in the… Not rated Jun 24, 2021
CVE-2021-29955 A transient execution vulnerability, named Floating Point Value Injection (FPVI) allowed an attacker to leak arbitrary… Not rated Jun 24, 2021
CVE-2021-29959 When a user has already allowed a website to access microphone and camera, disabling camera sharing would not fully… Not rated Jun 24, 2021
CVE-2021-29960 Firefox used to cache the last filename used for printing a file Not rated Jun 24, 2021
CVE-2021-29961 When styling and rendering an oversized `` element, Firefox did not apply correct clipping which allowed an attacker… Not rated Jun 24, 2021
CVE-2021-29962 Firefox for Android would become unstable and hard-to-recover when a website opened too many popups Not rated Jun 24, 2021
CVE-2021-29963 Address bar search suggestions in private browsing mode were re-using session data from normal mode Not rated Jun 24, 2021
CVE-2021-29964 A locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would process incorrectly, leading to… Not rated Jun 24, 2021
CVE-2021-29965 A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to… Not rated Jun 24, 2021
CVE-2021-29966 Mozilla developers reported memory safety bugs present in Firefox 88 Not rated Jun 24, 2021
CVE-2021-29967 Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11 Not rated Jun 24, 2021
CVE-2021-29968 When drawing text onto a canvas with WebRender disabled, an out of bounds read could occur Not rated Jun 24, 2021
CVE-2021-23981 A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack… Not rated Mar 31, 2021
CVE-2021-23982 Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal… Not rated Mar 31, 2021
CVE-2021-23983 By causing a transition on a parent node by removing a CSS rule, an invalid property for a marker could have been… Not rated Mar 31, 2021
CVE-2021-23984 A malicious extension could have opened a popup window lacking an address bar Not rated Mar 31, 2021
CVE-2021-23985 If an attacker is able to alter specific about:config values (for example malware running on the user's computer), the… Not rated Mar 31, 2021

Other Mozilla products