Skip to contentMozilla Firefox vulnerabilities
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript Engine: JIT componentCVE-2026-2766Public exploitFix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript Engine componentCVE-2026-2765Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreJIT miscompilation, use-after-free in the JavaScript Engine: JIT componentCVE-2026-2764Public exploitFix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript Engine componentCVE-2026-2763Public exploitFix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreInteger overflow in the JavaScript: Standard Library componentCVE-2026-2762Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape in the Graphics: WebRender componentCVE-2026-2761Fix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the Graphics: WebRender componentCVE-2026-2760Fix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Graphics: ImageLib componentCVE-2026-2759Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript: GC componentCVE-2026-2758Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the WebRTC: Audio/Video componentCVE-2026-2757Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat ai inference server 3.3 +18 more +20 moreHeap buffer overflow in libvpxCVE-2026-2447Fix available8.8 High
- mozilla firefox, firefox for ios +1 moreInterrupted page loads in new tabs could allow website spoofing under trusted domains in Firefox iOSCVE-2026-20324.3 Medium
- mozilla firefox, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreUse-after-free in the Layout: Scrolling and Overflow componentCVE-2026-248698.8 High
- mozilla firefoxMitigation bypass in the Privacy: Anti-Tracking componentCVE-2026-248686.5 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 147 and Thunderbird 147CVE-2026-08929.8 Critical
- mozilla firefox, thunderbird +1 moreDenial-of-service in the DOM: Service Workers componentCVE-2026-08897.5 High
- mozilla firefox, thunderbird +1 moreInformation disclosure in the XML componentCVE-2026-08885.3 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreSandbox escape in the Messaging System componentCVE-2026-088110.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMemory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147CVE-2026-0891Fix available8.1 High
- mozilla firefox, thunderbird +1 moreSpoofing issue in the DOM: Copy & Paste and Drag & Drop componentCVE-2026-0890Fix available5.4 Medium
- mozilla firefox, thunderbird +1 moreClickjacking issue, information disclosure in the PDF Viewer componentCVE-2026-0887Fix available4.3 Medium
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics componentCVE-2026-0886Fix available5.3 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: GC componentCVE-2026-0885Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript Engine componentCVE-2026-0884Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Networking componentCVE-2026-0883Fix available5.3 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the IPC componentCVE-2026-0882Fix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to integer overflow in the Graphics componentCVE-2026-0880Fix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the Graphics componentCVE-2026-0879Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL componentCVE-2026-0878Fix available8.0 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMitigation bypass in the DOM: Security componentCVE-2026-0877Fix available8.1 High
- mozilla firefoxMemory safety bugs fixed in Firefox 146.0.1CVE-2025-148618.8 High
- mozilla firefoxUse-after-free in the Disability Access APIs componentCVE-2025-148609.8 Critical
- mozilla firefox, firefox for ios +1 moreFilename spoofing via Unicode Right-to-Left Override in Firefox for iOSCVE-2025-147446.5 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146CVE-2025-14333Fix available8.1 High
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 146 and Thunderbird 146CVE-2025-143327.3 High
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the Request Handling componentCVE-2025-14331Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2025-14330Fix available9.8 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Netmonitor componentCVE-2025-14329Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Netmonitor componentCVE-2025-14328Fix available8.8 High
- mozilla firefox, thunderbird +1 moreSpoofing issue in the Downloads Panel componentCVE-2025-14327Fix available7.5 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Audio/Video: GMP componentCVE-2025-143269.8 Critical
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2025-14325Public exploitFix available7.3 High
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2025-14324Fix available9.8 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Notifications componentCVE-2025-14323Fix available8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL componentCVE-2025-14322Fix available8.0 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the WebRTC: Signaling componentCVE-2025-14321Public exploitFix available9.8 Critical
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 145 and Thunderbird 145CVE-2025-130278.1 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the WebRTC: Audio/Video componentCVE-2025-13020Fix available8.8 High
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the DOM: Workers componentCVE-2025-13019Fix available8.1 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security componentCVE-2025-13018Fix available8.1 High
- Show moreLoading…