Skip to contentMozilla vulnerabilities
Newest
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMemory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147CVE-2026-0891Fix available8.1 High
- mozilla firefox, thunderbird +1 moreSpoofing issue in the DOM: Copy & Paste and Drag & Drop componentCVE-2026-0890Fix available5.4 Medium
- mozilla firefox, thunderbird +1 moreClickjacking issue, information disclosure in the PDF Viewer componentCVE-2026-0887Fix available4.3 Medium
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics componentCVE-2026-0886Fix available5.3 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: GC componentCVE-2026-0885Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript Engine componentCVE-2026-0884Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Networking componentCVE-2026-0883Fix available5.3 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the IPC componentCVE-2026-0882Fix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to integer overflow in the Graphics componentCVE-2026-0880Fix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the Graphics componentCVE-2026-0879Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL componentCVE-2026-0878Fix available8.0 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMitigation bypass in the DOM: Security componentCVE-2026-0877Fix available8.1 High
- mozilla firefoxMemory safety bugs fixed in Firefox 146.0.1CVE-2025-148618.8 High
- mozilla firefoxUse-after-free in the Disability Access APIs componentCVE-2025-148609.8 Critical
- mozilla firefox, firefox for ios +1 moreFilename spoofing via Unicode Right-to-Left Override in Firefox for iOSCVE-2025-147446.5 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146CVE-2025-14333Fix available8.1 High
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 146 and Thunderbird 146CVE-2025-143327.3 High
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the Request Handling componentCVE-2025-14331Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2025-14330Fix available9.8 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Netmonitor componentCVE-2025-14329Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Netmonitor componentCVE-2025-14328Fix available8.8 High
- mozilla firefox, thunderbird +1 moreSpoofing issue in the Downloads Panel componentCVE-2025-14327Fix available7.5 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Audio/Video: GMP componentCVE-2025-143269.8 Critical
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2025-14325Public exploitFix available7.3 High
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2025-14324Fix available9.8 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Notifications componentCVE-2025-14323Fix available8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL componentCVE-2025-14322Fix available8.0 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the WebRTC: Signaling componentCVE-2025-14321Public exploitFix available9.8 Critical
- mozilla rhinoRhino vulnerable high CPU usage and potential DoS when passing specific numbers to toFixed() functionCVE-2025-66453Fix available5.5 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 145 and Thunderbird 145CVE-2025-130278.1 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the WebRTC: Audio/Video componentCVE-2025-13020Fix available8.8 High
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the DOM: Workers componentCVE-2025-13019Fix available8.1 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security componentCVE-2025-13018Fix available8.1 High
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the DOM: Notifications componentCVE-2025-13017Fix available8.1 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Graphics: WebGPU componentCVE-2025-130269.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics: WebGPU componentCVE-2025-130257.5 High
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2025-130249.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the JavaScript: WebAssembly componentCVE-2025-13016Fix available7.5 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Graphics: WebGPU componentCVE-2025-130239.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics: WebGPU componentCVE-2025-130229.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics: WebGPU componentCVE-2025-130219.8 Critical
- mozilla firefoxSpoofing issue in FirefoxCVE-2025-13015Fix available3.4 Low
- mozilla firefox, thunderbird +1 moreUse-after-free in the Audio/Video componentCVE-2025-13014Fix available8.8 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Core & HTML componentCVE-2025-13013Fix available6.1 Medium
- mozilla firefox, thunderbird +1 moreRace condition in the Graphics componentCVE-2025-13012Fix available7.5 High
- mozilla firefoxUse-after-free in WebGPU internals triggered from a compromised child processCVE-2025-12380Fix available9.8 Critical
- mozilla firefoxSpoofing risk in Android custom tabsCVE-2025-117208.1 High
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Firefox 144 and Thunderbird 144CVE-2025-117219.8 Critical
- mozilla firefoxAddress bar could be spoofed on Android using visibilitychangeCVE-2025-117186.5 Medium
- mozilla firefoxThe password edit screen was not hidden in Android card viewCVE-2025-117179.1 Critical
- Show moreLoading…