The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Alarm API in Mozilla Firefox before 33.0 and Firefox ESR 31.x before 31.2 does not properly restrict toJSON calls, which allows remote attackers to bypass the Same Origin Policy via crafted API calls that access sensitive information within the JSON data of an alarm.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefoxUpgrade xulrunnerUpgrade xulrunner-devel | Dec 1, 2016 | Oct 15, 2014 |
| Freebsd | — | Upgrade linux-firefoxUpgrade firefox-esrUpgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade libxulUpgrade firefoxUpgrade thunderbird | Dec 10, 2025 | Oct 14, 2014 |
| Gentoo Linux | — | Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird.Upgrade dev-libs/nspr.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade www-client/firefox-bin. | Oct 30, 2017 | Oct 15, 2014 |
| Mfsa2014 82 | — | Upgrade to Mozilla Firefox version 33.0Upgrade to Mozilla Firefox ESR version 31.2Upgrade to the latest version of Mozilla Firefox | Oct 16, 2014 | Oct 14, 2014 |
| Oracle Solaris | — | Upgrade web/data/firefox-bookmarks to version 31.6.0-0.175.2.11.0.3.0 on Solaris 11.2Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.3.0.0.28.0 on Solaris 11.3Upgrade web/browser/firefox/multi-user-desktop to version 31.6.0-0.175.2.11.0.3.0 on Solaris 11.2Upgrade web/browser/firefox to version 31.6.0-0.175.2.11.0.3.0 on Solaris 11.2 | May 29, 2017 | Oct 15, 2014 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade firefoxUpgrade xulrunner-devel | Oct 16, 2024 | Oct 15, 2014 |
| Suse | — | Upgrade MozillaFirefoxUpgrade mozilla-nsprUpgrade libfreebl3-hmacUpgrade mozilla-nss-32bitUpgrade libsoftokn3-x86Upgrade libfreebl3-32bitUpgrade MozillaFirefox-translations-commonUpgrade libsoftokn3-32bitUpgrade mozilla-nspr-develUpgrade mozilla-nss-develUpgrade mozillafirefox-branding-sleUpgrade MozillaFirefox-translationsUpgrade mozilla-nspr-32bitUpgrade mozilla-nss-x86Upgrade mozilla-nspr-x86Upgrade mozilla-nss-certsUpgrade mozilla-nss-toolsUpgrade MozillaFirefox-develUpgrade libsoftokn3Upgrade MozillaFirefox-branding-SLEDUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-certs-32bitUpgrade libsoftokn3-hmac-32bitUpgrade libfreebl3Upgrade mozilla-nssUpgrade libfreebl3-x86Upgrade libfreebl3-hmac-32bitUpgrade libsoftokn3-hmac | Dec 18, 2015 | Oct 15, 2014 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Oct 15, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub