The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 skips pinning checks upon an unspecified issuer-verification error, which makes it easier for remote attackers to bypass an intended pinning configuration and spoof a web site via a crafted certificate that leads to presentation of the Untrusted Connection dialog to the user.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade thunderbirdUpgrade linux-seamonkeyUpgrade linux-firefoxUpgrade firefox-esrUpgrade linux-thunderbirdUpgrade libxulUpgrade firefoxUpgrade seamonkey | Dec 10, 2025 | Oct 14, 2014 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey-bin.Upgrade dev-libs/nspr.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey. | Oct 30, 2017 | Oct 15, 2014 |
| Mfsa2014 80 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 33.0 | Oct 16, 2014 | Oct 14, 2014 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.30Upgrade to the latest version of Mozilla SeaMonkey | Dec 11, 2014 | Oct 15, 2014 |
| Oracle Solaris | — | Upgrade web/browser/firefox to version 38.4.0-0.175.3.8.0.2.0 on Solaris 11.3Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3/documentation to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Oct 15, 2014 |
| Suse | — | Upgrade MozillaFirefox-translations-commonUpgrade MozillaFirefoxUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-other | Dec 18, 2015 | Oct 15, 2014 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Oct 15, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub