目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1000 CNY

100.0%
コーヒーを一杯おごる

mozilla 厂商漏洞列表 / CVE 中文分析 1773

mozilla 厂商相关 1773 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Mozilla 致力于开发开源互联网工具，核心产品 Firefox 浏览器及 Thunderbird 邮件客户端广泛用于全球用户。其历史漏洞多集中于内存安全缺陷，如缓冲区溢出导致的远程代码执行（RCE），以及跨站脚本（XSS）和权限提升问题。值得关注的是，Mozilla 积极推行零信任架构与增强型隐私保护特性，并定期发布安全更新以修复高危风险，持续维护开源生态的安全性与透明度。

上位製品 mozilla: Firefox Thunderbird Firefox ESR Firefox for iOS Firefox for Android Focus for iOS Thunderbird ESR nss Mozilla VPN Hubs Cloud WebThings Gateway Mozilla Bleach Focus sccache Nunjucks Convict PollBot Mozilla VPN 2.28.0 neqo rhino thin-vec common-voice Mozilla VPN 2.16.1 hawk geckodriver Mozilla VPN iOS 1.0.7 Firefox for Bugzilla Network Security Services (NSS) Network Security Services
CVE IDタイトルCVSS深刻度公開日
CVE-2025-10532 Incorrect boundary conditions in the JavaScript: GC component — Firefox 8.1AIHighAI2025-09-16
CVE-2025-10527 Sandbox escape due to use-after-free in the Graphics: Canvas2D component — Firefox 8.1AIHighAI2025-09-16
CVE-2025-10533 Integer overflow in the SVG component — Firefox 8.1AIHighAI2025-09-16
CVE-2025-10528 Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component — Firefox 8.1AIHighAI2025-09-16
CVE-2025-55033 Drag and drop gestures in Focus for iOS could allow JavaScript links to be executed incorrectly — Focus for iOS 5.4 -2025-08-19
CVE-2025-55032 Focus incorrectly ignores Content-Disposition headers for some MIME types — Focus for iOS 5.4 -2025-08-19
CVE-2025-55029 Malicious scripts could spam popups for denial of service attacks — Firefox for iOS 6.5 -2025-08-19
CVE-2025-55031 Passkey phishing within Bluetooth range — Firefox for iOS 7.3 -2025-08-19
CVE-2025-55028 JavaScript alerts could impede UI interaction or allow denial of service attacks — Firefox for iOS 6.5 -2025-08-19
CVE-2025-55030 Content-Disposition headers incorrectly ignored for some MIME types — Firefox for iOS 6.1 -2025-08-19
CVE-2025-54144 Internal Firefox open-text URL scheme allowed loading of arbitrary URLs — Firefox for iOS 6.5 -2025-08-19
CVE-2025-54145 Scanning a malicious URL utilizing Firefox's open-text scheme with the QR code scanner could load arbitrary websites — Firefox for iOS 8.1 -2025-08-19
CVE-2025-54143 Sandboxed iframes could allow local downloads despite sandbox restrictions — Firefox for iOS 9.3 -2025-08-19
CVE-2025-8042 Sandboxed iframe could start downloads — Firefox 9.3 -2025-08-19
CVE-2025-8364 Address bar spoofing using an blob URI on Firefox for Android — Firefox 4.3 -2025-08-19
CVE-2025-8041 Incorrect URL truncation in Firefox for Android — Firefox 4.3 -2025-08-19
CVE-2025-9184 Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 — Firefox 9.8 -2025-08-19
CVE-2025-9187 Memory safety bugs fixed in Firefox 142 and Thunderbird 142 — Firefox 9.8 -2025-08-19
CVE-2025-9182 Denial-of-service due to out-of-memory in the Graphics: WebRender component — Firefox 6.5 -2025-08-19
CVE-2025-9183 Spoofing issue in the Address Bar component — Firefox 4.3 -2025-08-19
CVE-2025-9185 Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 — Firefox 9.8 -2025-08-19
CVE-2025-9186 Spoofing issue in the Address Bar component of Firefox Focus for Android — Firefox 4.3 -2025-08-19
CVE-2025-9180 Same-origin policy bypass in the Graphics: Canvas2D component — Firefox 9.1 -2025-08-19
CVE-2025-9181 Uninitialized memory in the JavaScript Engine component — Firefox 8.8 -2025-08-19
CVE-2025-9179 Sandbox escape due to invalid pointer in the Audio/Video: GMP component — Firefox 9.8 -2025-08-19
CVE-2025-8043 Incorrect URL truncation — Firefox 7.1 -2025-07-22
CVE-2025-8035 Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 — Firefox 9.8 -2025-07-22
CVE-2025-8044 Memory safety bugs fixed in Firefox 141 and Thunderbird 141 — Firefox 9.8 -2025-07-22
CVE-2025-8034 Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 — Firefox 9.8 -2025-07-22
CVE-2025-8040 Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 — Firefox 8.8 -2025-07-22

本页汇总了 mozilla 厂商截至目前公开的全部 1773 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。