Mozilla Firefox Mobile — known CVE vulnerabilities

Every CVE whose affected-product data names Mozilla Firefox Mobile, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (22)

• CVE-2012-1126 — CVSS 10.0 (critical): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of…
• CVE-2012-1127 — CVSS 9.3 (critical): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of…
• CVE-2012-1128 — CVSS 9.3 (critical): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of…
• CVE-2012-1129 — CVSS 9.3 (critical): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of…
• CVE-2012-1130 — CVSS 9.3 (critical): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of…
• CVE-2012-1131 — CVSS 9.3 (critical): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, on 64-bit platforms allows remote attackers to…
• CVE-2012-1132 — CVSS 9.3 (critical): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of…
• CVE-2012-1133 — CVSS 9.3 (critical): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of…
• CVE-2012-1134 — CVSS 9.3 (critical): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of…
• CVE-2012-1135 — CVSS 9.3 (critical): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of…
• CVE-2012-1136 — CVSS 9.3 (critical): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of…
• CVE-2012-1138 — CVSS 9.3 (critical): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of…
• CVE-2012-1139 — CVSS 9.3 (critical): Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to…
• CVE-2012-1140 — CVSS 9.3 (critical): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of…
• CVE-2012-1141 — CVSS 9.3 (critical): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of…
• CVE-2012-1142 — CVSS 9.3 (critical): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of…
• CVE-2012-1137 — CVSS 9.3 (critical): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of…
• CVE-2012-1144 — CVSS 9.3 (critical): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of…
• CVE-2012-3979 — CVSS 6.8 (medium): Mozilla Firefox before 15.0 on Android does not properly implement unspecified callers of the __android_log_print function, which allows…
• CVE-2026-53899 — CVSS 6.5 (medium): Firefox for iOS used partial domain matching when attaching cookies to PDF requests, allowing a malicious site on a suffix domain to…
• CVE-2026-53900 — CVSS 4.3 (medium): Firefox for iOS preserved cookies set on the initial PDF request across cross-origin HTTP redirects in TemporaryDocument, allowing a…
• CVE-2012-1143 — CVSS 4.3 (medium): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of…