Security Advisories for Mozilla VPN

Impact key

• Critical Vulnerability can be used to run attacker code and install software, requiring no user interaction beyond normal browsing.
• High Vulnerability can be used to gather sensitive data from sites in other windows or inject data or code into those sites, requiring no more than normal browsing actions.
• Moderate Vulnerabilities that would otherwise be High or Critical except they only work in uncommon non-default configurations or require the user to perform complicated and/or unlikely steps.
• Low Minor security vulnerabilities such as Denial of Service attacks, minor data leaks, or spoofs. (Undetectable spoofs of SSL indicia would have "High" impact because those are generally used to steal sensitive data intended for other sites.)

# Fixed in Mozilla VPN 2.7.1

• 2022-08 Mozilla VPN local privilege escalation vis uncontrolled OpenSSL search path

# Fixed in Mozilla VPN 2.3

• 2021-31 Multiple Low Security Issues in Mozilla VPN