VPN vulnerabilities

2 known vulnerabilities in VPN from Mozilla. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Mozilla VPN 2.28.0: Improper Privilege Management

  CVE-2025-5687Jun 11, 2025Mozilla

  A vulnerability in Mozilla VPN on macOS allows privilege escalation from a normal user to root. *This bug only affects Mozilla VPN on macOS. Other operating systems are unaffected.*. This vulnerability was fixed in Mozilla VPN 2.28.0 (macOS).

• 7.8 High severity

  Mozilla VPN: Unrestricted Upload of File with Dangerous Type

  CVE-2022-0517Dec 22, 2022Mozilla

  Mozilla VPN can load an OpenSSL configuration file from an unsecured directory. A user or attacker with limited privileges could leverage this to launch arbitrary code with SYSTEM privilege. This vulnerability affects Mozilla VPN < 2.7.1.