Skip to contentMozilla vulnerabilities
Newest
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics: Text componentCVE-2026-4719Fix available7.5 High
- mozilla firefox, thunderbird +1 moreUndefined behavior in the WebRTC: Signaling componentCVE-2026-4718Fix available8.1 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Netmonitor componentCVE-2026-4717Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions, uninitialized memory in the JavaScript Engine componentCVE-2026-4716Fix available9.1 Critical
- mozilla firefox, thunderbird +1 moreUninitialized memory in the Graphics: Canvas2D componentCVE-2026-4715Fix available9.1 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Audio/Video componentCVE-2026-4714Fix available7.5 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics componentCVE-2026-4713Fix available7.5 High
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Widget: Cocoa componentCVE-2026-47127.5 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Widget: Cocoa componentCVE-2026-47119.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Audio/Video componentCVE-2026-4710Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Audio/Video: GMP componentCVE-2026-4709Fix available7.5 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics componentCVE-2026-4708Fix available7.5 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics: Canvas2D componentCVE-2026-4707Fix available7.5 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics: Canvas2D componentCVE-2026-4706Fix available7.5 High
- mozilla firefox, thunderbird +1 moreUndefined behavior in the WebRTC: Signaling componentCVE-2026-4705Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreDenial-of-service in the WebRTC: Signaling componentCVE-2026-4704Fix available7.5 High
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine componentCVE-2026-4702Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript Engine componentCVE-2026-4701Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMitigation bypass in the Networking: HTTP componentCVE-2026-4700Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Layout: Text and Fonts componentCVE-2026-4699Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2026-4698Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Audio/Video: Web Codecs componentCVE-2026-4697Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the Layout: Text and Fonts componentCVE-2026-4696Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Audio/Video: Web Codecs componentCVE-2026-4695Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions, integer overflow in the Graphics componentCVE-2026-4694Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Audio/Video: Playback componentCVE-2026-4693Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape in the Responsive Design Mode componentCVE-2026-4692Public exploitFix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the CSS Parsing and Computation componentCVE-2026-4691Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM componentCVE-2026-4690Fix available8.6 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM componentCVE-2026-4689Fix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to use-after-free in the Disability Access APIs componentCVE-2026-4688Fix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the Telemetry componentCVE-2026-4687Fix available8.6 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Graphics: Canvas2D componentCVE-2026-4686Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Graphics: Canvas2D componentCVE-2026-4685Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreRace condition, use-after-free in the Graphics: WebRender componentCVE-2026-4684Fix available7.5 High
- mozilla firefoxMemory safety bugs fixed in Firefox 148.0.2CVE-2026-38478.8 High
- mozilla firefoxSame-origin policy bypass in the CSS Parsing and Computation componentCVE-2026-38466.5 Medium
- mozilla firefoxHeap buffer overflow in the Audio/Video: Playback component in Firefox for AndroidCVE-2026-38458.8 High
- mozilla focus for ios, firefox focus +1 moreAttacker-controlled content shown under spoofed domains in Focus for iOS via stalled navigation and iframe redirectCVE-2026-29194.3 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Firefox 148 and Thunderbird 148CVE-2026-28079.8 Critical
- mozilla firefox, thunderbird +1 moreUninitialized memory in the Graphics: Text componentCVE-2026-28069.1 Critical
- mozilla firefox, thunderbird +1 moreInvalid pointer in the DOM: Core & HTML componentCVE-2026-28059.8 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: WebAssembly componentCVE-2026-28045.4 Medium
- mozilla firefox, thunderbird +1 moreInformation disclosure, mitigation bypass in the Settings UI componentCVE-2026-28037.5 High
- mozilla firefox, thunderbird +1 moreRace condition in the JavaScript: GC componentCVE-2026-28024.2 Medium
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the JavaScript: WebAssembly componentCVE-2026-28017.5 High
- mozilla firefox, thunderbird +1 moreSpoofing issue in the WebAuthn component in Firefox for AndroidCVE-2026-28009.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreUse-after-free in the DOM: Core & HTML componentCVE-2026-27999.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreUse-after-free in the DOM: Core & HTML componentCVE-2026-27988.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreUse-after-free in the JavaScript: GC componentCVE-2026-27979.8 Critical
- Show moreLoading…