5.4Media
Spoofing issue in the Downloads component in Firefox for Android
Mozilla Firefox
Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 157.
Vulnerabilidades de mozilla firefox mobile (CVE)
Registros CVE publicados para mozilla firefox mobile, los más recientes primero. Siga el producto para recibir un correo con cada nueva.
8.8Alta
Privilege escalation in Firefox for Android
Mozilla Firefox
Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 156.
4.3Media
Repeated external URL scheme launches could potentially cause a denial of service in Firefox for iOS
Mozilla Firefox for iOS
A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches. This could make Firefox for iOS temporarily unusable until the page is closed. This vulnerability was fixed in Firefox for iOS 155.1.
9.8Crítica
Other issue in Firefox Focus for Android
Mozilla Firefox
Other issue in Firefox Focus for Android. This vulnerability was fixed in Firefox 155.
4.3Media
Information disclosure in the WebExtensions component in Firefox for Android
Mozilla Firefox
Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155.
8.8Alta
Privilege escalation in Firefox for Android
Mozilla Firefox
Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 155.
5.4Media
Stalled popup navigation could allow address bar origin spoofing in Firefox for iOS
Mozilla Firefox for iOS
A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 155.0.
6.5Media
Clickjacking issue in the Downloads component in Firefox for Android
Mozilla Firefox
Clickjacking issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.
5.4Media
Spoofing issue in the Downloads component in Firefox for Android
Mozilla Firefox
Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.
6.5Media
Clickjacking issue in Firefox for Android
Mozilla Firefox
Clickjacking issue in Firefox for Android. This vulnerability was fixed in Firefox 154.
7.4Alta
Spoofing issue in Firefox for Android
Mozilla Firefox
Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153.
7.5Alta
Information disclosure in the Privacy component in Firefox for Android
Mozilla Firefox
Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153.
5.3Media
Malicious webpage titles could allow overwriting of bundled PDF resources when saving webpages as PDFs in Firefox for iOS
Mozilla Firefox for iOS
Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the Firefox for iOS application sandbox. This vulnerability was fixed in Firefox for iOS 152.4.
4.3Media
Cookie injection was possible when opening a PDF link
Mozilla Firefox for iOS
Firefox for iOS preserved cookies set on the initial PDF request across cross-origin HTTP redirects in TemporaryDocument, allowing a malicious site to inject arbitrary cookies into requests to an unrelated target domain. This vulnerability was fixed in Firefo…
6.5Media
Cross-origin cookies could be leaked when opening a PDF link
Mozilla Firefox for iOS
Firefox for iOS used partial domain matching when attaching cookies to PDF requests, allowing a malicious site on a suffix domain to receive cookies belonging to the target site. This vulnerability was fixed in Firefox for iOS 152.0.
9.6Crítica
CVE-2022-26486
KEV
Mozilla Firefox Use-After-Free Vulnerability
Mozilla Firefox; Mozilla Firefox ESR; Mozilla Firefox for Android; Mozilla Thunderbird
An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for Andro…
2.4%EPSS
8.8Alta
CVE-2022-26485
KEV
Mozilla Firefox Use-After-Free Vulnerability
Mozilla Firefox; Mozilla Firefox ESR; Mozilla Firefox for Android; Mozilla Thunderbird
Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for Android < 97.3.0, Thund…
14%EPSS