Skip to contentMozilla vulnerabilities
Newest
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Core & HTML componentCVE-2026-841255.4 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Core & HTML componentCVE-2026-84124Fix available5.4 Medium
- mozilla firefox, thunderbird +1 morePrivilege escalation due to use-after-free in the Graphics: WebGPU componentCVE-2026-841238.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Audio/Video componentCVE-2026-84122Fix available5.4 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: GC componentCVE-2026-84118Public exploit5.4 Medium
- mozilla firefox, firefox mobile +1 morePrivilege escalation in Firefox for AndroidCVE-2026-841178.8 High
- mozilla firefox, thunderbird +1 moreInternally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15CVE-2026-84145Fix available7.5 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to invalid pointer in the Graphics componentCVE-2026-84131Fix available8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the DOM: Security componentCVE-2026-84121Fix available9.6 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the Audio/Video componentCVE-2026-84120Fix available5.4 Medium
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the DOM: Navigation componentCVE-2026-84119Fix available9.6 Critical
- mozilla firefox for ios, firefox mobile +1 moreStalled popup navigation could allow address bar origin spoofing in Firefox for iOSCVE-2026-812675.4 Medium
- mozilla firefox, thunderbird +1 moreInternally found bugs fixed in Firefox 154CVE-2026-749899.8 Critical
- mozilla firefox, thunderbird +1 moreInternally found bugs fixed in Firefox ESR 153.1 and Firefox 154CVE-2026-749889.8 Critical
- mozilla firefox, thunderbird +1 moreSite isolation issue in the CSS Parsing and Computation componentCVE-2026-749869.1 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Enterprise Policies componentCVE-2026-749859.8 Critical
- mozilla firefox, thunderbird +1 moreRace condition in the JavaScript Engine componentCVE-2026-749846.8 Medium
- mozilla firefox, thunderbird +1 moreDenial-of-service in the Widget componentCVE-2026-749827.5 High
- mozilla firefox, thunderbird +1 moreSite isolation issue in the Audio/Video: Web Codecs componentCVE-2026-749818.1 High
- mozilla firefox, firefox mobile +1 moreClickjacking issue in the Downloads component in Firefox for AndroidCVE-2026-749806.5 Medium
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Add-ons Manager componentCVE-2026-749799.8 Critical
- mozilla firefox, thunderbird +1 moreClickjacking issue in the Widget componentCVE-2026-749788.1 High
- mozilla firefox, thunderbird +1 moreInteger overflow in the Graphics componentCVE-2026-749777.5 High
- mozilla firefox, firefox mobile +1 moreSpoofing issue in the Downloads component in Firefox for AndroidCVE-2026-749755.4 Medium
- mozilla firefox, thunderbird +1 moreSite isolation issue in the Graphics componentCVE-2026-74970Public exploit5.4 Medium
- mozilla firefox, thunderbird +1 moreSite isolation issue in the Graphics: WebRender componentCVE-2026-749685.4 Medium
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Form Autofill componentCVE-2026-749667.5 High
- mozilla firefox, thunderbird +1 moreSide-channel in the Web Audio componentCVE-2026-749619.1 Critical
- mozilla firefox, thunderbird +1 moreInformation disclosure in the WebRTC componentCVE-2026-749587.5 High
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the DOM: Service Workers componentCVE-2026-749569.1 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Request Handling componentCVE-2026-749558.8 High
- mozilla firefox, thunderbird +1 moreInformation disclosure due to side-channel in the Storage: Cache API componentCVE-2026-749547.5 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Application Update componentCVE-2026-749528.8 High
- mozilla firefox, firefox mobile +1 moreClickjacking issue in Firefox for AndroidCVE-2026-749516.5 Medium
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Downloads API componentCVE-2026-749508.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to invalid pointer in the Graphics componentCVE-2026-749478.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape in the Remote Settings Client componentCVE-2026-75874Fix available10.0 Critical
- mozilla firefox, thunderbird +1 moreInternally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154CVE-2026-74990Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the JavaScript: GC componentCVE-2026-749389.1 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: GC componentCVE-2026-749378.8 High
- mozilla firefox, thunderbird +1 moreInternally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154CVE-2026-74987Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Data Loss Prevention componentCVE-2026-74983Fix available8.1 High
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2026-74976Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the Graphics: ImageLib componentCVE-2026-74974Fix available5.4 Medium
- mozilla firefox, thunderbird +1 moreRace condition, use-after-free in the Graphics componentCVE-2026-74973Fix available4.2 Medium
- mozilla firefox, thunderbird +1 moreInformation disclosure in the DOM: Push Subscriptions componentCVE-2026-74972Fix available4.3 Medium
- mozilla firefox, thunderbird +1 moreInformation disclosure in the DOM: UI Events & Focus Handling componentCVE-2026-74971Fix available4.3 Medium
- mozilla firefox, thunderbird +1 moreRace condition, use-after-free in the Layout: Text and Fonts componentCVE-2026-74969Fix available8.8 High
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the Audio/Video: Playback componentCVE-2026-74967Fix available5.4 Medium
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Shell Integration componentCVE-2026-74965Fix available8.8 High
- Show moreLoading…