Vpn (Mozilla) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 16 known versions, newest CVE from 2025-06-11. Vendor: Mozilla.

CVEs of Vpn

• CVE-2025-5687 - CVSS 7.8 (high), 2025-06-11: A vulnerability in Mozilla VPN on macOS allows privilege escalation from a normal user to root. *This bug only affects Mozilla VPN on macOS. Other operating…
• CVE-2023-4104 - CVSS 5.5 (medium), 2023-09-11: An invalid Polkit Authentication check and missing authentication requirements for D-Bus methods allowed any local user to configure arbitrary VPN setups.…
• CVE-2022-0517 - CVSS 7.8 (high), 2022-12-22: Mozilla VPN can load an OpenSSL configuration file from an unsecured directory. A user or attacker with limited privileges could leverage this to launch…
• CVE-2020-15679 - CVSS 7.6 (high), 2022-12-22: An OAuth session fixation vulnerability existed in the VPN login flow, where an attacker could craft a custom login URL, convince a VPN user to login via that…