Mozilla Firefox

• CVE-2025-8038 Critical 9.8 CSP frame-src was not correctly enforced for paths 0.3%
• CVE-2025-8032 High 8.1 XSLT documents could bypass CSP 0.4%
• CVE-2025-8031 Critical 9.8 Incorrect URL stripping in CSP reports 0.5%
• CVE-2025-8030 High 8.1 Potential user-assisted code execution in “Copy as cURL” command 0.4%
• CVE-2025-8037 Critical 9.1 Nameless cookies shadow secure cookies 0.3%
• CVE-2025-8036 High 8.1 DNS rebinding circumvents CORS 0.4%
• CVE-2025-8029 High 8.1 javascript: URLs executed on object and embed tags 0.4%
• CVE-2025-8028 Critical 9.8 Large branch table could lead to truncated instruction 0.6%
• CVE-2025-8027 Medium 6.5 JavaScript engine only wrote partial return value to stack 0.4%
• CVE-2025-6436 High 8.1 Memory safety bugs fixed in Firefox 140 and Thunderbird 140 4.3%
• CVE-2025-6435 High 8.1 Save as in Devtools could download files without sanitizing the extension 0.5%
• CVE-2025-6434 Medium 4.3 HTTPS-Only exception screen lacked anti-clickjacking delay 0.3%
• CVE-2025-6433 Critical 9.8 WebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificate 0.3%
• CVE-2025-6432 High 8.6 DNS Requests leaked outside of a configured SOCKS proxy 0.4%
• CVE-2025-6431 Medium 6.5 The prompt in Firefox for Android that asks before opening a link in an external application could be bypassed 0.3%
• CVE-2025-6428 Medium 4.3 Firefox for Android opened URLs specified in a link querystring parameter 0.2%
• CVE-2025-6427 Critical 9.1 connect-src Content Security Policy restriction could be bypassed 0.4%
• CVE-2025-6430 Medium 6.1 Content-Disposition header ignored when a file is included in an embed or object tag 0.3%
• CVE-2025-6429 Medium 6.5 Incorrect parsing of URLs could have allowed embedding of youtube.com 0.4%
• CVE-2025-6426 High 8.8 No warning when opening executable terminal files on macOS 0.2%
• CVE-2025-6425 Medium 4.3 The WebCompat WebExtension shipped with Firefox exposed a persistent UUID 0.3%
• CVE-2025-6424 Critical 9.8 Use-after-free in FontFaceSet 8.0%
• CVE-2025-49710 Critical 9.8 Integer overflow in OrderedHashTable 0.7%
• CVE-2025-49709 Critical 9.8 Memory corruption in canvas surfaces 0.7%
• CVE-2025-5272 High 7.3 Memory safety bugs fixed in Firefox 139 and Thunderbird 139 0.3%
• CVE-2025-5271 Medium 6.5 Devtools' preview ignored CSP headers 0.3%
• CVE-2025-5270 High 7.5 SNI was sometimes unencrypted 0.3%
• CVE-2025-5269 High 8.1 Memory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.11 0.5%
• CVE-2025-5268 High 8.1 Memory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.11 0.5%
• CVE-2025-5267 Medium 5.4 Clickjacking vulnerability could have led to leaking saved payment card details 0.3%
• CVE-2025-5266 Medium 4.3 Script element events leaked cross-origin resource status 0.3%
• CVE-2025-5265 Medium 4.8 Potential local code execution in “Copy as cURL” command 0.2%
• CVE-2025-5264 Medium 4.8 Potential local code execution in “Copy as cURL” command 0.3%
• CVE-2025-5263 Medium 4.3 Error handling for script execution was incorrectly isolated from web content 0.3%
• CVE-2025-4919 High 8.8 Out-of-bounds access when optimizing linear sums 9.1%
• CVE-2025-4918 Critical 9.8 Out-of-bounds access when resolving Promise objects 9.5%
• CVE-2025-4093 High 8.1 Memory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.10 0.5%
• CVE-2025-4092 Medium 6.5 Memory safety bugs fixed in Firefox 138 and Thunderbird 138 0.3%
• CVE-2025-4091 High 8.1 Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 0.5%
• CVE-2025-4090 Medium 5.3 Leaked library paths in Thunderbird for Android 0.3%
• CVE-2025-4089 Medium 5.1 Potential local code execution in "copy as cURL" command 0.2%
• CVE-2025-4088 Medium 6.5 Cross-site request forgery via storage access API redirects 0.2%
• CVE-2025-4087 Medium 4.8 Unsafe attribute access during XPath parsing 0.3%
• CVE-2025-4086 Medium 6.5 Specially crafted filename could be used to obscure download type 0.3%
• CVE-2025-4085 High 7.1 Potential information leakage and privilege escalation in UITour actor 0.3%
• CVE-2025-4084 Medium 5.7 Potential local code execution in "copy as cURL" command 0.4%
• CVE-2025-4083 Critical 9.1 Process isolation bypass using "javascript:" URI links in cross-origin frames 0.5%
• CVE-2025-4082 Medium 5.9 WebGL shader attribute memory corruption in Thunderbird for macOS 0.5%
• CVE-2025-2817 High 8.8 Privilege escalation in Thunderbird Updater 0.7%
• CVE-2025-3608 Medium 6.5 Race condition in nsHttpTransaction could lead to memory corruption 0.3%