Mozilla Firefox

• CVE-2025-3035 Medium 5.3 Tab title disclosure across pages when using AI chatbot 0.3%
• CVE-2025-3034 High 8.1 Memory safety bugs fixed in Firefox 137 and Thunderbird 137 0.5%
• CVE-2025-3033 High 7.7 Opening local .url files could lead to another file being opened 0.2%
• CVE-2025-3032 High 7.4 Leaking file descriptors from the fork server 0.4%
• CVE-2025-3031 Medium 6.5 JIT optimization bug with different stack slot sizes 0.3%
• CVE-2025-3030 High 8.1 Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9 0.5%
• CVE-2025-3029 High 7.3 URL Bar Spoofing via non-BMP Unicode characters 0.4%
• CVE-2025-3028 Medium 6.5 Use-after-free triggered by XSLTProcessor 0.9%
• CVE-2025-2857 Critical 10.0 Incorrect handle could lead to sandbox escapes 2.0%
• CVE-2025-1943 High 8.2 Memory safety bugs fixed in Firefox 136 and Thunderbird 136 0.4%
• CVE-2025-1938 Medium 6.5 Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8 0.3%
• CVE-2025-1937 High 7.5 Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.8 0.6%
• CVE-2025-1936 High 7.3 Adding %00 and a fake extension to a jar: URL changed the interpretation of the contents 0.4%
• CVE-2025-1935 Medium 4.3 Clickjacking the registerProtocolHandler info-bar 0.3%
• CVE-2025-1942 Critical 9.8 Disclosure of uninitialized memory when .toUpperCase() causes string to get longer 0.5%
• CVE-2025-1941 Critical 9.1 Lock screen setting bypass in Firefox Focus for Android 0.4%
• CVE-2025-1934 Medium 6.5 Unexpected GC during RegExp bailout processing 0.5%
• CVE-2025-1940 High 7.1 Android Intent confirmation prompt tapjacking using Select options 0.2%
• CVE-2025-1933 High 7.6 JIT corruption of WASM i32 return values on 64-bit CPUs 0.3%
• CVE-2025-1932 High 8.1 Inconsistent comparator in XSLT sorting led to out-of-bounds access 0.4%
• CVE-2025-1931 High 7.5 Use-after-free in WebTransportChild 0.5%
• CVE-2025-1939 Low 3.9 Tapjacking in Android Custom Tabs using transition animations 0.2%
• CVE-2025-1930 High 8.8 AudioIPC StreamData could trigger a use-after-free in the Browser process 0.4%
• CVE-2025-1414 Medium 6.5 Memory safety bugs fixed in Firefox 135.0.1 0.5%
• CVE-2025-1020 Critical 9.8 Memory safety bugs fixed in Firefox 135 and Thunderbird 135 0.5%
• CVE-2025-1017 Critical 9.8 Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7 0.6%
• CVE-2025-1016 Critical 9.8 Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7 0.6%
• CVE-2025-1014 High 8.8 Certificate length was not properly checked 0.4%
• CVE-2025-1013 Medium 6.5 Potential opening of private browsing tabs in normal browsing windows 0.3%
• CVE-2025-1019 Medium 4.3 Fullscreen notification not properly displayed 0.4%
• CVE-2025-1012 Critical 9.8 Use-after-free during concurrent delazification 0.5%
• CVE-2025-1011 Critical 9.8 A bug in WebAssembly code generation could result in a crash 0.6%
• CVE-2025-1018 High 7.3 Fullscreen notification is not displayed when fullscreen is re-requested 0.4%
• CVE-2025-1010 Critical 9.8 Use-after-free in Custom Highlight 0.5%
• CVE-2025-1009 Critical 9.8 Use-after-free in XSLT 1.2%
• CVE-2025-0247 Critical 9.8 Memory safety bugs fixed in Firefox 134 and Thunderbird 134 10.6%
• CVE-2025-0243 Medium 5.1 Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6 0.2%
• CVE-2025-0242 Medium 6.5 Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6 14.7%
• CVE-2025-0241 High 7.7 Memory corruption when using JavaScript Text Segmentation 0.7%
• CVE-2025-0240 Medium 4.0 Compartment mismatch when parsing JavaScript JSON module 0.7%
• CVE-2025-0239 Medium 4.0 Alt-Svc ALPN validation failure when redirected 0.2%
• CVE-2025-0238 Medium 5.3 Use-after-free when breaking lines in text 0.8%
• CVE-2025-0237 Medium 5.4 WebChannel APIs susceptible to confused deputy attack 0.6%
• CVE-2025-0246 Medium 6.5 Address bar spoofing using an invalid protocol scheme on Firefox for Android 0.4%
• CVE-2025-0245 Low 3.3 Lock screen setting bypass in Firefox Focus for Android 0.3%
• CVE-2025-0244 Medium 5.3 Address bar spoofing using an invalid protocol scheme on Firefox for Android 7.4%
• CVE-2024-11699 High 8.8 Memory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could 0.7%
• CVE-2024-11708 Medium 6.5 Missing thread synchronization primitives could have led to a data race on members of the PlaybackParams structure. This vulnerability affects Firefox < 133 and Thunderbird < 133. 0.4%
• CVE-2024-11706 Medium 6.5 A null pointer dereference may have inadvertently occurred in `pk12util`, and specifically in the `SEC_ASN1DecodeItem_Util` function, when handling malformed or improperly formatted input files. This 0.5%
• CVE-2024-11705 Critical 9.1 `NSC_DeriveKey` inadvertently assumed that the `phKey` parameter is always non-NULL. When it was passed as NULL, a segmentation fault (SEGV) occurred, leading to crashes. This behavior conflicted with 0.7%