Skip to contentMozilla vulnerabilities
Newest
- mozilla firefox, thunderbird +1 moreSite isolation issue in the Networking componentCVE-2026-16387Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreInformation disclosure due to uninitialized memory in the Graphics: WebGPU componentCVE-2026-163867.5 High
- mozilla firefox, thunderbird +1 moreInformation disclosure due to uninitialized memory in the Graphics: WebGPU componentCVE-2026-163857.5 High
- mozilla firefox, thunderbird +1 moreInformation disclosure due to uninitialized memory in the Graphics: WebGPU componentCVE-2026-163847.5 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Networking componentCVE-2026-16383Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Service Workers componentCVE-2026-163829.8 Critical
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the Networking: DNS componentCVE-2026-16381Fix available9.1 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Networking componentCVE-2026-163809.1 Critical
- mozilla firefox, thunderbird +1 moreSite isolation issue in the Graphics: WebRender componentCVE-2026-16358Fix available9.8 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Content Processes componentCVE-2026-16379Fix available8.8 High
- mozilla firefox, thunderbird +1 moreOther issue in the DOM: Copy & Paste and Drag & Drop componentCVE-2026-163787.5 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the PDF Viewer componentCVE-2026-16377Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreDenial-of-service in the Graphics: WebGPU componentCVE-2026-163767.5 High
- mozilla firefox, thunderbird +1 moreSite isolation issue in the Networking: HTTP componentCVE-2026-16375Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Framework component in DevToolsCVE-2026-16374Fix available7.5 High
- mozilla firefox, firefox mobile +1 moreInformation disclosure in the Privacy component in Firefox for AndroidCVE-2026-163737.5 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Content Processes componentCVE-2026-163728.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Navigation componentCVE-2026-16371Fix available8.8 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Networking componentCVE-2026-163709.1 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics componentCVE-2026-16357Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Disability Access APIs componentCVE-2026-16356Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2026-16355Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreInteger overflow in the JavaScript: WebAssembly componentCVE-2026-16369Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the JavaScript: WebAssembly componentCVE-2026-16368Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to invalid pointer in the Disability Access APIs componentCVE-2026-1636710.0 Critical
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Graphics: ImageLib componentCVE-2026-16354Fix available7.5 High
- mozilla firefox, thunderbird +1 moreInvalid pointer in the DOM: Bindings (WebIDL) componentCVE-2026-16353Fix available9.8 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Navigation componentCVE-2026-163668.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Workers componentCVE-2026-16365Fix available8.8 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Audio/Video: Playback componentCVE-2026-163649.1 Critical
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript: WebAssembly componentCVE-2026-16363Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Disability Access APIs componentCVE-2026-16352Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the DOM: Navigation componentCVE-2026-16351Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the WebRTC: Audio/Video componentCVE-2026-16362Fix available8.8 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Audio/Video: cubeb componentCVE-2026-16350Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the DOM: Navigation componentCVE-2026-16349Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreSite isolation issue in the DOM: Navigation componentCVE-2026-15719Fix available5.4 Medium
- mozilla firefox, thunderbird +1 moreInvalid pointer in the JavaScript: WebAssembly componentCVE-2026-15718Public exploitFix available4.3 Medium
- mozilla firefox for ios, firefox mobile +1 moreMalicious webpage titles could allow overwriting of bundled PDF resources when saving webpages as PDFs in Firefox for iOSCVE-2026-149065.3 Medium
- mozilla firefox, firefox for ios +1 moreInterrupted navigation could allow address bar origin spoofing in Firefox for iOSCVE-2026-133566.3 Medium
- mozilla thunderbirdChat UI manipulation by injectionCVE-2026-57963Fix available6.5 Medium
- mozilla thunderbirdDenial-of-service via malicious LDAP address-book serverCVE-2026-57962Fix available5.3 Medium
- mozilla firefoxMemory safety bugs fixed in Firefox 152.0.4CVE-2026-14241Fix available9.8 Critical
- mozilla firefox for ios, firefox mobile +1 moreCookie injection was possible when opening a PDF linkCVE-2026-539004.3 Medium
- mozilla firefox for ios, firefox mobile +1 moreCross-origin cookies could be leaked when opening a PDF linkCVE-2026-538996.5 Medium
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Internationalization componentCVE-2026-12330Fix available5.4 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bug fixed in Thunderbird ESR 140.12CVE-2026-12329Fix available5.3 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152CVE-2026-12328Fix available8.1 High
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152CVE-2026-12327Fix available8.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Firefox 152 and Thunderbird 152CVE-2026-123268.1 High
- Show moreLoading…