Known vulnerabilities in Firefox for Android - page 23

Vendor: Mozilla
Software CPE: cpe:2.3:a:mozilla:firefox_for_android:*:*:*:*:*:*:*:*
Total vulnerabilities: 838
Public exploits: 10
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Firefox for Android Firefox for Android is affected by 838 known vulnerabilities: 6 critical, 348 high, 261 medium, 223 low Critical High Medium Low

Vulnerabilities (838)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105322 - Improper Restriction of Rendered UI Layers or Frames
CVE-2025-1940
CWE-1021 High
No
No
136.0 05.03.2025 SB2025030502
#VU105321 - Improper Restriction of Rendered UI Layers or Frames
CVE-2025-1939
CWE-1021 High
No
No
136.0 05.03.2025 SB2025030502
#VU105320 - Memory corruption
CVE-2025-1943
CWE-119 High
No
No
136.0 05.03.2025 SB2025030502
SB2025030503
SB2025030520
and 4 more
#VU104043 - Memory corruption
CVE-2025-1414
CWE-119 High
No
No
135.0.1 18.02.2025 SB2025021824
#VU103614 - Memory corruption
CVE-2025-1020
CWE-119 High
No
No
135.0 04.02.2025 SB2025020463
SB2025020465
SB2025021102
and 1 more
#VU103613 - Insufficient UI Warning of Dangerous Operations
CVE-2025-1019
CWE-357 Medium
No
No
135.0 04.02.2025 SB2025020463
SB2025020465
SB2025021102
and 1 more
#VU103612 - Insufficient UI Warning of Dangerous Operations
CVE-2025-1018
CWE-357 Medium
No
No
135.0 04.02.2025 SB2025020463
SB2025020465
SB2025021102
and 1 more
#VU103611 - Memory corruption
CVE-2025-1017
CWE-119 High
No
No
135.0 04.02.2025 SB2025020463
SB2025020464
SB2025020465
and 34 more
#VU103610 - Improper Certificate Validation
CVE-2025-1014
CWE-295 Low
No
No
135.0 04.02.2025 SB2025020463
SB2025020464
SB2025020465
and 34 more
#VU103609 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-1013
CWE-362 Low
No
No
135.0 04.02.2025 SB2025020463
SB2025020464
SB2025020465
and 34 more
#VU103608 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-1011
CWE-94 High
No
No
135.0 04.02.2025 SB2025020463
SB2025020464
SB2025020465
and 34 more
#VU103607 - Memory corruption
CVE-2025-1016
CWE-119 High
No
No
135.0 04.02.2025 SB2025020463
SB2025020464
SB2025020465
and 34 more
#VU103606 - Use After Free
CVE-2025-1012
CWE-416 High
No
No
135.0 04.02.2025 SB2025020463
SB2025020464
SB2025020465
and 34 more
#VU103605 - Use After Free
CVE-2025-1010
CWE-416 High
No
No
135.0 04.02.2025 SB2025020463
SB2025020464
SB2025020465
and 34 more
#VU103604 - Use After Free
CVE-2025-1009
CWE-416 High
No
No
135.0 04.02.2025 SB2025020463
SB2025020464
SB2025020465
and 34 more
#VU102430 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2025-0244
CWE-451 Medium
No
No
134.0 07.01.2025 SB2025010985
#VU102426 - Use After Free
CVE-2025-0240
CWE-416 Medium
No
No
134.0 07.01.2025 SB2025010749
SB2025010801
SB2025010802
and 33 more
#VU102425 - Improper Certificate Validation
CVE-2025-0239
CWE-295 Medium
No
No
134.0 07.01.2025 SB2025010749
SB2025010801
SB2025010802
and 33 more
#VU102424 - Unintended Proxy or Intermediary ('Confused Deputy')
CVE-2025-0237
CWE-441 Low
No
No
134.0 07.01.2025 SB2025010749
SB2025010801
SB2025010802
and 33 more
#VU102422 - Use After Free
CVE-2025-0238
CWE-416 High
No
No
134.0 07.01.2025 SB2025010749
SB2025010801
SB2025010802
and 38 more


Showing elements 441 - 460 out of 838