Mozilla Firefox Mobile vulnerabilities, page 5
87 vulnerabilities
Known vulnerabilities in Mozilla Firefox Mobile, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2023-29550debianfirefox-esr+16
EPSS score0.71%
Memory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.CVE-2023-29544ubuntufirefox+10EPSS score0.45%
If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.CVE-2023-29539debianfirefox-esr+15EPSS score0.74%
When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character. This could have led to reflected file download attacks potentially tricking users to install malware. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.CVE-2023-29543ubuntufirefox+10EPSS score0.53%
An attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global object's debugger vector. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.CVE-2023-5758chainguardfirefox-esr+2EPSS score0.43%
When opening a page in reader mode, the redirect URL could have caused attacker-controlled script to execute in a reflected Cross-Site Scripting (XSS) attack. This vulnerability affects Firefox for iOS < 119.CVE-2023-49060chainguardfirefox-esr+2EPSS score0.64%
An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the `referrerpolicy` attribute. This vulnerability affects Firefox for iOS < 120.CVE-2023-49061chainguardfirefox-esr+2EPSS score0.31%
An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS < 120.