Mozilla Firefox 26.0
Approved changes feed: RSS · Atom
cpe:2.3:a:mozilla:firefox:26.0:*:*:*:*:*:*:*
part: a version: 26.0 update: *
| Vendor | Mozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1) |
|---|---|
| Product | Firefox (d152d976-2d5e-5cc4-89b6-e80c6d067896) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/firefox |
purl2cpe | 2026-06-01 10:17:52.835393 |
pkg:mozilla/mozilla-central |
purl2cpe | 2026-06-01 10:17:52.835394 |
pkg:rpm/fedora/firefox |
purl2cpe | 2026-06-01 10:17:52.835396 |
pkg:rpm/opensuse/mozillafirefox |
purl2cpe | 2026-06-01 10:17:52.835397 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-0836 |
vulnerable | 2026-06-08 05:06:23.921937 |
Details available
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Published: 2015-02-25T11:00:00.000Z
Updated: 2024-08-06T04:26:10.603Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0835 |
vulnerable | 2026-06-08 05:06:23.915490 |
Details available
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Published: 2015-02-25T11:00:00.000Z
Updated: 2024-08-06T04:26:11.134Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0834 |
vulnerable | 2026-06-08 05:06:23.909460 |
Details available
The WebRTC subsystem in Mozilla Firefox before 36.0 recognizes turns: and stuns: URIs but accesses the TURN or STUN server without using TLS, which makes it easier for man-in-the-middle attackers to discover credentials by spoofing a server and completing a brute-force attack within a short time window.
Published: 2015-02-25T11:00:00.000Z
Updated: 2024-08-06T04:26:11.083Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0833 |
vulnerable | 2026-06-08 05:06:23.876345 |
Details available
Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 on Windows, when the Maintenance Service is not used, allow local users to gain privileges via a Trojan horse DLL in (1) the current working directory or (2) a temporary directory, as demonstrated by bcrypt.dll.
Published: 2015-02-25T11:00:00.000Z
Updated: 2024-08-06T04:26:11.160Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0832 |
vulnerable | 2026-06-08 05:06:23.335440 |
Details available
Mozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and without a trailing . (dot) character, which allows man-in-the-middle attackers to bypass the HPKP and HSTS protection mechanisms by constructing a URL with this character and leveraging access to an X.509 certificate for a domain with this character.
Published: 2015-02-25T11:00:00.000Z
Updated: 2024-08-06T04:26:11.059Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0831 |
vulnerable | 2026-06-08 05:06:23.322622 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0830 |
vulnerable | 2026-06-08 05:06:23.308011 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0829 |
vulnerable | 2026-06-08 05:06:23.298007 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0828 |
vulnerable | 2026-06-08 05:06:23.288745 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0827 |
vulnerable | 2026-06-08 05:06:23.276086 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0826 |
vulnerable | 2026-06-08 05:06:23.262005 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0825 |
vulnerable | 2026-06-08 05:06:23.252490 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0824 |
vulnerable | 2026-06-08 05:06:23.246089 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0823 |
vulnerable | 2026-06-08 05:06:23.239599 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0822 |
vulnerable | 2026-06-08 05:06:23.148329 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0821 |
vulnerable | 2026-06-08 05:06:23.142271 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0820 |
vulnerable | 2026-06-08 05:06:23.135577 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0819 |
vulnerable | 2026-06-08 05:06:23.122907 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1527 |
vulnerable | 2026-06-08 05:05:25.280625 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1506 |
vulnerable | 2026-06-08 05:05:25.096277 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1501 |
vulnerable | 2026-06-08 05:05:25.078960 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.