Skip to contentMozilla vulnerabilities
Newest
- mozilla firefox, thunderbird +1 moreInteger overflow in the Graphics componentCVE-2026-74964Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the Networking: Cookies componentCVE-2026-74963Fix available5.4 Medium
- mozilla firefox, thunderbird +1 moreSite isolation issue in the Networking: Cookies componentCVE-2026-74962Fix available8.1 High
- mozilla firefox, thunderbird +1 moreSite isolation issue in the WebExtensions componentCVE-2026-74960Fix available8.1 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Storage: Cache API componentCVE-2026-74959Fix available9.1 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Safe Browsing componentCVE-2026-74957Fix available8.1 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Networking: Cookies componentCVE-2026-74953Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics: Canvas2D componentCVE-2026-74949Fix available8.8 High
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Graphics componentCVE-2026-74948Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreInformation disclosure due to incorrect boundary conditions in the Graphics: CanvasWebGL componentCVE-2026-74946Fix available8.8 High
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Graphics: Text componentCVE-2026-74945Public exploitFix available6.5 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Core & HTML componentCVE-2026-74944Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics: ImageLib componentCVE-2026-74943Public exploitFix available9.8 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Remote Settings Client componentCVE-2026-74942Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Graphics: CanvasWebGL componentCVE-2026-74941Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics: Text componentCVE-2026-74940Fix available9.8 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Navigation componentCVE-2026-74939Public exploitFix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: WebAssembly componentCVE-2026-74936Public exploitFix available9.8 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Networking componentCVE-2026-74935Fix available8.8 High
- mozilla firefox, thunderbird +1 moreSite isolation issue in the Graphics: CanvasWebGL componentCVE-2026-74934Fix available7.5 High
- mozilla firefoxInformation disclosure in Firefox for Android and Firefox Focus for AndroidCVE-2026-188096.5 Medium
- mozilla thunderbirdOff-by-one out of bounds read in MIME header parser for forwardingCVE-2026-14899Fix available7.5 High
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Thunderbird ESR 140.13CVE-2026-16361Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Thunderbird ESR 140.13 and Thunderbird 153CVE-2026-16360Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Thunderbird ESR 140.13 and Thunderbird 153CVE-2026-16412Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Thunderbird 153CVE-2026-164119.8 Critical
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2026-164109.8 Critical
- mozilla firefox, thunderbird +1 moreInvalid pointer in the Security: PSM componentCVE-2026-164097.5 High
- mozilla firefox, thunderbird +1 moreInteger overflow in the Audio/Video: Playback componentCVE-2026-164089.8 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Service Workers componentCVE-2026-164079.8 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Networking componentCVE-2026-164069.1 Critical
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Networking: WebSockets componentCVE-2026-16405Fix available7.5 High
- mozilla firefox, firefox mobile +1 moreSpoofing issue in Firefox for AndroidCVE-2026-164047.4 High
- mozilla firefox, thunderbird +1 moreSpoofing issue in the Address Bar componentCVE-2026-164036.5 Medium
- mozilla firefox, thunderbird +1 moreInteger overflow in the Graphics: ImageLib componentCVE-2026-164029.8 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Data Loss Prevention componentCVE-2026-164018.8 High
- mozilla firefox, thunderbird +1 moreInformation disclosure in the DOM: Security componentCVE-2026-164007.5 High
- mozilla firefox, thunderbird +1 moreSite isolation issue in the DOM: Navigation componentCVE-2026-163997.5 High
- mozilla firefox, thunderbird +1 moreSite isolation issue in the Graphics componentCVE-2026-163987.5 High
- mozilla firefoxClickjacking issue in the WebExtensions component in Firefox for AndroidCVE-2026-163976.5 Medium
- mozilla firefox, thunderbird +1 morePrivilege escalation in WebExtensionsCVE-2026-16396Fix available8.8 High
- mozilla firefox, thunderbird +1 moreInteger overflow in the Audio/Video componentCVE-2026-163959.8 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security componentCVE-2026-163949.1 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Audio/Video: GMP componentCVE-2026-16359Fix available9.1 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics: WebGPU componentCVE-2026-163939.1 Critical
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2026-163929.1 Critical
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Storage: IndexedDB componentCVE-2026-16391Fix available7.5 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Enterprise Policies componentCVE-2026-16390Fix available9.1 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions, integer overflow in the Libraries component in NSSCVE-2026-16389Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape in the DOM: Networking componentCVE-2026-163889.8 Critical
- Show moreLoading…