Most recent entries from all

bdu:2024-00059

2026-10-05T21:20:49.439645+00:00

bdu:2024-00059

certfr-2023-avi-1048 — De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Elles permettent…

2026-10-05T21:20:49.439700+00:00

certfr-2023-avi-1048

cnvd-2024-00195

2026-10-05T21:20:49.439721+00:00

cnvd-2024-00195

EUVD-2026-217101

2026-10-05T21:20:49.439734+00:00

EUVD-2026-217101

fkie_cve-2023-6872

2026-10-05T21:20:49.439745+00:00

Browser tab titles were being leaked by GNOME to system logs. This could potentially expose the browsing habits of users running in a private tab. This vulnerability affects Firefox < 121.

GHSA-qm6q-r7qr-vxjp

2026-10-05T21:20:49.439774+00:00

Browser tab titles were being leaked by GNOME to system logs. This could potentially expose the browsing habits of users running in a private tab. This vulnerability affects Firefox < 121.

gsd-2023-6872

2026-10-05T21:20:49.439790+00:00

gsd-2023-6872

OESA-2025-1322 — firefox security update

2026-10-05T21:20:49.439801+00:00

Affected: openEuler:22.03-LTS-SP3: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo Security Fix(es):

Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox < 121.(CVE-2023-6135)

Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.(CVE-2023-6207)

When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboard. *This bug only affects Firefox on X11. Other systems are unaffected.* This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.(CVE-2023-6208)

Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in the path could be used to override the specified host…

openSUSE-SU-2024:13531-1 — MozillaFirefox-121.0-1.1 on GA media

2026-10-05T21:20:49.439871+00:00

MozillaFirefox-121.0-1.1 on GA media

UBUNTU-CVE-2023-6872

2026-10-05T21:20:49.439900+00:00

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:24.04:LTS: mozjs102

Browser tab titles were being leaked by GNOME to system logs. This could potentially expose the browsing habits of users running in a private tab. This vulnerability affects Firefox < 121.

WID-SEC-W-2023-3185 — Mozilla Firefox und Thunderbird: Mehrere Schwachstellen

2026-10-05T21:20:49.439932+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Firefox ESR und Thunderbird ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen und undefiniertes Verhalten zu verursachen.