CVE-2026-16404
Published Jul 21, 2026Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153.
- evidence mentions
- 2
- Buzz score
- 21.0
Vendor/product archive
mozilla / firefox_mobile CVEs
Beta · best-effort25 CVEs tagged to mozilla / firefox_mobile — 18 Critical, 2 High, 5 Medium, 0 Low, 0 Unrated.
CVE-2026-16373
Published Jul 21, 2026Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153.
- evidence mentions
- 2
- Buzz score
- 21.0
CVE-2026-14906
Published Jul 13, 2026Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the Firefox for iOS application sandbox. This vulnerability…
- evidence mentions
- 2
- Buzz score
- 21.0
CVE-2026-53900
Published Jun 16, 2026Firefox for iOS preserved cookies set on the initial PDF request across cross-origin HTTP redirects in TemporaryDocument, allowing a malicious site to inject arbitrary cookies int…
- evidence mentions
- 2
- Buzz score
- 21.0
CVE-2026-53899
Published Jun 16, 2026Firefox for iOS used partial domain matching when attaching cookies to PDF requests, allowing a malicious site on a suffix domain to receive cookies belonging to the target site.…
- evidence mentions
- 2
- Buzz score
- 21.0
CVE-2012-3979
Published Aug 29, 2012Mozilla Firefox before 15.0 on Android does not properly implement unspecified callers of the __android_log_print function, which allows remote attackers to execute arbitrary code…
CVE-2012-1144
Published Apr 25, 2012FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and m…
CVE-2012-1143
Published Apr 25, 2012FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (divide-by-zero error) via a crafte…
CVE-2012-1142
Published Apr 25, 2012FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and m…
CVE-2012-1141
Published Apr 25, 2012FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and me…
CVE-2012-1140
Published Apr 25, 2012FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and me…
CVE-2012-1139
Published Apr 25, 2012Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid stack…
CVE-2012-1138
Published Apr 25, 2012FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and me…
CVE-2012-1137
Published Apr 25, 2012FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and me…
CVE-2012-1136
Published Apr 25, 2012FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and m…
CVE-2012-1135
Published Apr 25, 2012FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and me…
CVE-2012-1134
Published Apr 25, 2012FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and m…
CVE-2012-1133
Published Apr 25, 2012FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and m…
CVE-2012-1132
Published Apr 25, 2012FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and me…
CVE-2012-1131
Published Apr 25, 2012FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, on 64-bit platforms allows remote attackers to cause a denial of service (invalid heap r…
CVE-2012-1130
Published Apr 25, 2012FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and me…
CVE-2012-1129
Published Apr 25, 2012FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and me…
CVE-2012-1128
Published Apr 25, 2012FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and memor…
CVE-2012-1127
Published Apr 25, 2012FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and me…
CVE-2012-1126
Published Apr 25, 2012FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and me…
Showing 1-25 of 25 CVEsPage 1 of 1