Mozilla Firefox Mobile vulnerabilities, page 3
87 vulnerabilities
Known vulnerabilities in Mozilla Firefox Mobile, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2012-1134debianfreetype+2
EPSS score4.58%
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted private-dictionary data in a Type 1 font.CVE-2012-1139debianfreetype+2EPSS score3.77%
Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid stack read operation and memory corruption) or possibly execute arbitrary code via crafted glyph data in a BDF font.CVE-2012-1144debianfreetype+2EPSS score4.86%
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via a crafted TrueType font.CVE-2012-3979mozillafirefox+1EPSS score1.88%
Mozilla Firefox before 15.0 on Android does not properly implement unspecified callers of the __android_log_print function, which allows remote attackers to execute arbitrary code via a crafted web page that calls the JavaScript dump function.CVE-2024-0953chainguardfirefox+4EPSS score0.31%
When a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before being navigated to the page specified in the code. This may surprise the user and potentially direct them to unwanted content. This vulnerability affects Firefox for iOS < 129.CVE-2024-43111chainguardfirefox+10EPSS score0.27%
Long pressing on a download link could potentially allow Javascript commands to be executed within the browser This vulnerability affects Firefox for iOS < 129.CVE-2024-43113chainguardfirefox+10EPSS score0.25%
The contextual menu for links could provide an opportunity for cross-site scripting attacks This vulnerability affects Firefox for iOS < 129.CVE-2024-43112chainguardfirefox+10EPSS score0.25%
Long pressing on a download link could potentially provide a means for cross-site scripting This vulnerability affects Firefox for iOS < 129.CVE-2024-7523chainguardfirefox+12EPSS score0.28%
A select option could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions.
*This issue only affects Android versions of Firefox.* This vulnerability affects Firefox < 129.CVE-2024-38313chainguardfirefox+4EPSS score0.25%
In certain scenarios a malicious website could attempt to display a fake location URL bar which could mislead users as to the actual website address This vulnerability affects Firefox for iOS < 127.CVE-2024-38312chainguardfirefox+4EPSS score0.29%
When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after app termination This vulnerability affects Firefox for iOS < 127.CVE-2019-17003mozillafirefox_mobileEPSS score0.41%
Scanning a QR code that contained a javascript: URL would have resulted in the Javascript being executed.CVE-2026-74980ubuntumozjs102+8EPSS score0.27%
Clickjacking issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.CVE-2026-74951ubuntumozjs102+8EPSS score0.27%
Clickjacking issue in Firefox for Android. This vulnerability was fixed in Firefox 154.CVE-2026-74975ubuntumozjs102+8EPSS score0.25%
Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.CVE-2026-16404ubuntumozjs102+8EPSS score0.16%
Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153.CVE-2026-16373ubuntumozjs102+8EPSS score0.27%
Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153.CVE-2026-84117ubuntumozjs102+8EPSS score0.35%
Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 155.CVE-2026-84135ubuntumozjs102+8EPSS score0.45%
Other issue in Firefox Focus for Android. This vulnerability was fixed in Firefox 155.CVE-2026-84127ubuntumozjs102+8EPSS score0.26%
Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155.