Skip to contentMozilla vulnerabilities
Newest
- mozilla firefox, thunderbird +1 moreInformation disclosure in the DOM: Security componentCVE-2026-89657.5 High
- mozilla firefox, thunderbird +1 moreSpoofing issue in the Popup Blocker componentCVE-2026-89647.5 High
- mozilla firefox, thunderbird +1 moreSpoofing issue in the Web Speech componentCVE-2026-89637.5 High
- mozilla firefox, thunderbird +1 moreSpoofing issue in WebExtensionsCVE-2026-89607.5 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Application Update componentCVE-2026-89528.8 High
- mozilla firefoxSpoofing issue in the Toolbar component in Firefox for AndroidCVE-2026-89516.5 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreSame-origin policy bypass in the DOM: Networking componentCVE-2026-89489.1 Critical
- mozilla firefox, firefox focus, red hat enterprise linux 10 +4 more +6 moreSandbox escape in Firefox and Firefox Focus for AndroidCVE-2026-89457.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151CVE-2026-8975Fix available8.8 High
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151CVE-2026-8974Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Security componentCVE-2026-8970Fix available8.8 High
- mozilla firefox, thunderbird +1 moreDenial-of-service due to invalid pointer in the Audio/Video: Web Codecs componentCVE-2026-8968Fix available7.5 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security componentCVE-2026-8962Fix available8.1 High
- mozilla firefox, thunderbird +1 moreSpoofing issue in the Form Autofill componentCVE-2026-8961Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Widget: Win32 componentCVE-2026-89599.6 Critical
- mozilla firefox, thunderbird +1 moreInformation disclosure, sandbox escape in the Security: Process Sandboxing componentCVE-2026-8958Fix available8.6 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Enterprise Policies componentCVE-2026-8957Fix available8.8 High
- mozilla firefox, thunderbird +1 moreInteger overflow in the Networking: JAR componentCVE-2026-8956Fix available9.8 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Workers componentCVE-2026-8955Fix available8.8 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions, integer overflow in the Audio/Video componentCVE-2026-8954Fix available7.5 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Disability Access APIs componentCVE-2026-8953Fix available9.6 Critical
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the Networking: HTTP componentCVE-2026-8950Fix available9.3 Critical
- mozilla firefox, thunderbird +1 moreInteger overflow in the Widget: Win32 componentCVE-2026-89497.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreUse-after-free in the DOM: Bindings (WebIDL) componentCVE-2026-8947Fix available7.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreIncorrect boundary conditions in the Audio/Video: Web Codecs componentCVE-2026-8946Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreSandbox escape in the Profile Backup componentCVE-2026-8401Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreOther issue in the JavaScript Engine componentCVE-2026-8391Fix available5.3 Medium
- mozilla firefox, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreUse-after-free in the JavaScript: WebAssembly componentCVE-2026-83907.3 High
- mozilla firefox, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2026-8389Public exploit8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreIncorrect boundary conditions in the JavaScript Engine: JIT componentCVE-2026-8388Public exploitFix available6.5 Medium
- 0din-ai ai-scanner, mozilla 0din scanner +1 moreRemote code execution via JavaScript injection in `BrowserAutomation::PlaywrightService`CVE-2026-415129.9 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreOther issue in the WebRTC componentCVE-2026-8094Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Thunderbird 150.0.2CVE-2026-80938.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bugs fixed in Thunderbird ESR 140.10.2 and Thunderbird 150.0.2CVE-2026-8092Fix available8.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +16 more +18 moreIncorrect boundary conditions in the Audio/Video: Playback componentCVE-2026-8091Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreUse-after-free in the DOM: Networking componentCVE-2026-8090Fix available7.3 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the WebRTC: Networking componentCVE-2026-7321Fix available9.6 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Thunderbird 150.0.1CVE-2026-73247.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +16 more +18 moreMemory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1CVE-2026-7323Fix available7.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +16 more +18 moreMemory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1CVE-2026-7322Fix available7.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +16 more +18 moreInformation disclosure due to incorrect boundary conditions in the Audio/Video componentCVE-2026-7320Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreMemory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150CVE-2026-6786Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreMemory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150CVE-2026-6785Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Firefox 150 and Thunderbird 150CVE-2026-67847.5 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions, integer overflow in the Audio/Video: Playback componentCVE-2026-67835.3 Medium
- mozilla firefox, thunderbird +1 moreInformation disclosure in the IP Protection componentCVE-2026-67827.5 High
- mozilla firefox, thunderbird +1 moreDenial-of-service in the Audio/Video: Playback componentCVE-2026-67817.5 High
- mozilla firefox, thunderbird +1 moreDenial-of-service in the Audio/Video: Playback componentCVE-2026-67807.5 High
- mozilla firefox, thunderbird +1 moreOther issue in the JavaScript Engine componentCVE-2026-67795.3 Medium
- mozilla firefox, thunderbird +1 moreInvalid pointer in the Audio/Video: Playback componentCVE-2026-67785.3 Medium
- Show moreLoading…