Mozilla Firefox any version

Memory safety bug fixed in Firefox 152

Denial-of-service in the PDF Viewer component

Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40

Memory safety bugs fixed in Thunderbird 150.0.1

Denial-of-service in the Graphics: WebGPU component

A use-after-free could result if a JavaScript realm was in the process of being initialized when a garbage collection started. This vulnerability affects Firefox < 125.

Race condition, use-after-free in the Graphics: WebRender component

Use-after-free in the JavaScript: WebAssembly component

Information disclosure in the Graphics: ImageLib component

Malicious scripts could spam popups for denial of service attacks

Information disclosure in the Storage: IndexedDB component

Information disclosure in the Framework component in DevTools

Memory safety bug fixed in Thunderbird ESR 140.12

Information disclosure, mitigation bypass in the Privacy component in Firefox for Android

Information disclosure due to uninitialized memory in the Graphics: WebGPU component

Information disclosure due to uninitialized memory in the Graphics: WebGPU component

Information disclosure due to uninitialized memory in the Graphics: WebGPU component

Memory safety bug fixed in Firefox 152

Other issue in the DOM: Copy & Paste and Drag & Drop component

JIT miscompilation in the DOM: Core & HTML component

Incorrect boundary conditions in the Graphics: Text component

Invalid pointer in the Security: PSM component

Memory safety bug fixed in Firefox 152

SNI was sometimes unencrypted

Incorrect boundary conditions in the Graphics: WebGPU component

Information disclosure in the Networking: WebSockets component

Memory safety bug fixed in Firefox 152

Memory safety bug fixed in Firefox 152

Memory safety bug fixed in Firefox 152

Information disclosure in the DOM: Security component

Race condition in the Graphics component

JIT miscompilation in the JavaScript Engine: JIT component

Site isolation issue in the Graphics: CanvasWebGL component

Site isolation issue in the DOM: Navigation component

Site isolation issue in the Graphics component

Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 rely on unintended expiration dates for Preloaded Public Key Pinning, which allows man-in-the-middle attackers to spoof add-on updates by leveraging possession of an X.509 server certificate for addons.mozilla.org signed by an arbitrary built-in Certification Authority.

Mozilla Firefox before 44.0 allows user-assisted remote attackers to spoof a trailing substring in the address bar by leveraging a user's paste of a (1) wyciwyg: URI or (2) resource: URI.

Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine. This vulnerability affects Firefox < 85.

A Content Provider in Firefox for Android allowed local files accessible by the browser to be read by a remote webpage, leading to sensitive data disclosure, including cookies for other origins. This vulnerability affects Firefox for < Android.

If an image had not loaded correctly (such as when it is not actually an image), it could be dragged and dropped cross-domain, resulting in a cross-origin information leak. This vulnerability affects Firefox < 71.