Veille CVE

Recherche « Mozilla Focus »

10 CVE

Critique 2 Élevée 5 Moyenne 3 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Mozilla Focus » ✕
  1. CVE-2026-100831 8.8 Élevée

    Mozilla Firefox · Mozilla Thunderbird

    Use-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

  2. CVE-2026-84135 9.8 Critique

    Mozilla Firefox · Mozilla firefox mobile

    Other issue in Firefox Focus for Android. This vulnerability was fixed in Firefox 155.

  3. CVE-2026-74971 4.3 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Information disclosure in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  4. CVE-2026-18809 6.5 Moyenne

    Mozilla Firefox

    Information disclosure in Firefox for Android and Firefox Focus for Android. This vulnerability was fixed in Firefox 153.0.3.

  5. CVE-2026-11799 7.5 Élevée

    Mozilla Focus for iOS · Mozilla Klar for iOS · Mozilla focus · Mozilla klar

    UXSS in Focus for iOS / Klar Webkit navigation. This vulnerability was fixed in Focus for iOS 151.3.1 and Klar for iOS 151.3.1.

  6. CVE-2026-8945 7.5 Élevée

    Mozilla Firefox · Red Hat Enterprise Linux 10 · Red Hat Enterprise Linux 6 · Red Hat Enterprise Linux 7

    Sandbox escape in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 151.

  7. CVE-2025-10290 6.5 Moyenne

    Mozilla Focus for iOS · Mozilla firefox focus

    Opening links via the contextual menu in Focus iOS for certain URL schemes would fail to load but would not refresh the toolbar correctly, allowing attackers to spoof websites if users were coerced into opening a link explicitly through a long-press. This vulnerability was fixed in Focus for iOS 143.0.

  8. CVE-2023-29539 8.8 Élevée

    Mozilla Firefox · Mozilla Focus for Android · Mozilla Firefox ESR · Mozilla Firefox for Android

    When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character. This could have led to reflected file download attacks potentially tricking users to install malware. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.

  9. CVE-2023-29536 8.8 Élevée

    Mozilla Firefox · Mozilla Focus for Android · Mozilla Firefox ESR · Mozilla Firefox for Android

    An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially exploitable crash. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.

  10. CVE-2022-26486 9.6 Critique Exploitée

    Mozilla Firefox · Mozilla Firefox ESR · Mozilla Firefox for Android · Mozilla Thunderbird

    An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for Android < 97.3.0, Thunderbird < 91.6.2, and Focus < 97.3.0.