Mozilla vulnerabilities

Products

• Firefox 3,719
• Thunderbird 2,422
• Firefox Esr 712
• Seamonkey 704
• Firefox Esr 537
• Thunderbird Esr 228
• Bugzilla 145
• Mozilla 108
• Firefox Mobile 87
• Firefox For Ios 60
• Network Security Services 50
• Firefox For Android 33
• Suite 27
• Firefox Focus 20
• Focus 19
• Focus For Android 17
• Firefox Os 14
• Nss 14
• Focus For Ios 13
• Thunderbird Esr 13
• Firefox And Thunderbird 6
• Bleach 5
• Bonsai 4
• Camino 4
• Bleach 4
• Vpn 4
• Convict 3
• Netscape Portable Runtime 3
• Geckodriver 2
• Hawk 2
• Hubs Cloud 2
• Vpn 2
• Mozjpeg 2
• Network Security Services (nss) 2
• Nunjucks 2
• Pollbot 2
• Webthings Gateway 2
• Webthings Gateway 2

Newest

• mozilla firefox Incorrect boundary conditions in the Layout: Block and Inline component CVE-2026-120572 8.8 HighNovember 3, 2026
• mozilla thunderbird Matrix homeserver could redirect the chat session to a local file or network share CVE-2026-118180 Fix available No scoreOctober 27, 2026
• mozilla thunderbird Request forgery via news: links CVE-2026-118179 Fix available No scoreOctober 27, 2026
• mozilla thunderbird RSS feed could redirect its subscription to a local file or network share CVE-2026-118178 Fix available No scoreOctober 27, 2026
• mozilla thunderbird Calendar discovery accepted local file and remote network share locations CVE-2026-118177 Fix available No scoreOctober 27, 2026
• mozilla thunderbird Bypass of remote UNC path restriction in mailbox: URLs CVE-2026-118176 Fix available No scoreOctober 27, 2026
• mozilla thunderbird Content of other messages could be included when replying to a crafted message CVE-2026-118175 Fix available No scoreOctober 27, 2026
• mozilla thunderbird Displaying a message could load an attacker-chosen URL through an OpenPGP key attachment CVE-2026-118174 Fix available No scoreOctober 27, 2026
• mozilla firefox Frame poisoning in the Layout component CVE-2026-118027 No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Invalid pointer in the JavaScript: GC component CVE-2026-118026 No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Other issue in the SVG component CVE-2026-118025 No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the Graphics: Text component CVE-2026-118024 No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Sandbox escape due to use-after-free in the Graphics: WebRender component CVE-2026-118023 No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Sandbox escape due to use-after-free in the Disability Access APIs component CVE-2026-118022 No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Sandbox escape due to use-after-free in the XPCOM component CVE-2026-118021 No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the Layout component CVE-2026-118020 No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Race condition, use-after-free in the DOM: File component CVE-2026-118019 No scoreOctober 27, 2026
• mozilla firefox Spoofing issue in the Downloads component in Firefox for Android CVE-2026-118018 No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the SVG component CVE-2026-118017 No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the DOM: Core & HTML component CVE-2026-118016 No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the DOM: Core & HTML component CVE-2026-118015 No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the JavaScript Engine: JIT component CVE-2026-118014 No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the Layout: Images, Video, and HTML Frames component CVE-2026-118013 No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the DOM: Animation component CVE-2026-118012 No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Frame poisoning in the CSS Parsing and Computation component CVE-2026-118011 No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the Disability Access APIs component CVE-2026-118010 No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Integer overflow, use-after-free in the Graphics: Text component CVE-2026-118009 No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Privilege escalation in the DOM: Navigation component CVE-2026-118008 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the JavaScript: GC component CVE-2026-118007 No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Privilege escalation due to use-after-free in the WebRTC: Signaling component CVE-2026-118006 No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the WebRTC: Signaling component CVE-2026-118005 No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Incorrect boundary conditions in the CSS Transitions and Animations component CVE-2026-118004 Fix available No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Information disclosure in the Networking: DNS component CVE-2026-118003 Fix available No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Information disclosure due to race condition in the Networking component CVE-2026-118002 Fix available No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Information disclosure in the Networking: HTTP component CVE-2026-118000 Fix available No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Race condition in the IPC component CVE-2026-117999 Fix available No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Mitigation bypass in the DOM: Push Subscriptions component CVE-2026-117998 Fix available No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Sandbox escape due to use-after-free in the Widget component CVE-2026-117997 Fix available No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Incorrect boundary conditions in the WebRTC component CVE-2026-117996 Fix available No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Privilege escalation in the DOM: UI Events & Focus Handling component CVE-2026-117995 Fix available No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the JavaScript: GC component CVE-2026-117994 Fix available No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Integer overflow in the Graphics: Text component CVE-2026-117993 Fix available No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Information disclosure in the CSS Parsing and Computation component CVE-2026-117992 Fix available No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Incorrect boundary conditions in the Layout: Text and Fonts component CVE-2026-117991 Fix available No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component CVE-2026-117990 Fix available No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the Graphics component CVE-2026-117989 Fix available No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component CVE-2026-117988 Fix available No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the Graphics component CVE-2026-117987 Fix available No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the Graphics component CVE-2026-117986 Fix available No scoreOctober 27, 2026
• mozilla firefox, thunderbird +1 more Sandbox escape due to use-after-free in the Graphics component CVE-2026-117985 Fix available No scoreOctober 27, 2026
• Show olderLoading…