Skip to contentMozilla vulnerabilities
Newest
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Copy & Paste and Drag & Drop componentCVE-2026-92030Fix available5.4 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the SVG componentCVE-2026-92029Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Core & HTML componentCVE-2026-92028Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Streams componentCVE-2026-92027Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Networking componentCVE-2026-92026Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Navigation componentCVE-2026-92025Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the SVG componentCVE-2026-92024Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the XML componentCVE-2026-92023Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: HTML Parser componentCVE-2026-92022Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript Engine: JIT componentCVE-2026-92021Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Graphics: WebRender componentCVE-2026-92020Fix available8.8 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Remote Settings Client componentCVE-2026-92019Fix available8.1 High
- mozilla firefox, thunderbird +1 moreSandbox escape in the DOM: Core & HTML componentCVE-2026-92018Fix available9.6 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Service Workers componentCVE-2026-92017Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Disability Access APIs componentCVE-2026-92016Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the WebExtensions componentCVE-2026-92015Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Graphics componentCVE-2026-92014Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentCVE-2026-92013Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentCVE-2026-92012Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentCVE-2026-92011Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentCVE-2026-92010Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentCVE-2026-92009Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentCVE-2026-92008Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentCVE-2026-92007Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentCVE-2026-92006Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Audio/Video: Web Codecs componentCVE-2026-92005Fix available5.3 Medium
- mozilla firefox for ios, firefox mobile +1 moreRepeated external URL scheme launches could potentially cause a denial of service in Firefox for iOSCVE-2026-868534.3 Medium
- mozilla thunderbirdAllowed UNC hostnames for attachments interpreted as a regular expressionCVE-2026-846427.5 High
- mozilla thunderbirdInformation disclosure due to malicious IMAP server responseCVE-2026-84641Fix available7.5 High
- mozilla thunderbirdOne byte overflow read in mail parserCVE-2026-84640Fix available7.5 High
- mozilla thunderbirdUninitialized memory in MIME parsingCVE-2026-84639Fix available9.1 Critical
- mozilla thunderbirdCalendar invitation attachments could launch local executablesCVE-2026-846379.8 Critical
- mozilla firefox, thunderbird +1 moreInternally found bugs fixed in Thunderbird 155 and Thunderbird ESR 153.2CVE-2026-841447.5 High
- mozilla firefox, thunderbird +1 moreInternally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15CVE-2026-84143Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreInternally found bugs fixed in Thunderbird 155CVE-2026-841429.8 Critical
- mozilla firefox, thunderbird +1 moreInteger overflow in the Graphics: ImageLib componentCVE-2026-841419.8 Critical
- mozilla firefox, thunderbird +1 moreSite isolation issue in the DOM: Navigation componentCVE-2026-841409.8 Critical
- mozilla firefox, thunderbird +1 moreClickjacking issue in the DOM: Events componentCVE-2026-841396.1 Medium
- mozilla firefox, thunderbird +1 moreDenial-of-service in the PDF Viewer componentCVE-2026-841386.5 Medium
- mozilla firefox, thunderbird +1 moreSpoofing issue in the DOM: Core & HTML componentCVE-2026-841374.3 Medium
- mozilla firefox, thunderbird +1 moreOther issue in the DOM: Navigation componentCVE-2026-841366.1 Medium
- mozilla firefox, firefox mobile +1 moreOther issue in Firefox Focus for AndroidCVE-2026-841359.8 Critical
- mozilla firefox, thunderbird +1 moreOther issue in the Profile Backup componentCVE-2026-841349.8 Critical
- mozilla firefox, thunderbird +1 moreSite isolation issue in the DOM: Push Subscriptions componentCVE-2026-841339.8 Critical
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Networking: HTTP componentCVE-2026-841327.5 High
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Graphics: WebGPU componentCVE-2026-841307.5 High
- mozilla firefox, thunderbird +1 moreSite isolation issue in the DOM: Navigation componentCVE-2026-841299.8 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the WebDriver BiDi componentCVE-2026-841288.8 High
- mozilla firefox, firefox mobile +1 moreInformation disclosure in the WebExtensions component in Firefox for AndroidCVE-2026-841274.3 Medium
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Layout: Grid componentCVE-2026-841264.3 Medium
- Show moreLoading…