Skip to contentMozilla vulnerabilities
Newest
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2026-109722Public exploitFix available8.1 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the JavaScript Engine: JIT componentCVE-2026-109721Public exploitFix available5.4 Medium
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript: WebAssembly componentCVE-2026-109720Fix available7.1 High
- mozilla firefox, thunderbird +1 moreRace condition, use-after-free in the Graphics: CanvasWebGL componentCVE-2026-109719Fix available4.2 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the XML componentCVE-2026-109718Fix available5.4 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Bindings (WebIDL) componentCVE-2026-109717Fix available5.4 Medium
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the JavaScript Engine componentCVE-2026-109716Fix available8.1 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the JavaScript Engine componentCVE-2026-109715Public exploitFix available8.1 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Crash Reporting componentCVE-2026-109713Fix available5.4 Medium
- mozilla firefox, thunderbird +1 moreSandbox escape due to uninitialized memory in the Graphics componentCVE-2026-109712Fix available7.1 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics: Canvas2D componentCVE-2026-109711Fix available5.4 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics: Text componentCVE-2026-109710Fix available5.4 Medium
- mozilla firefox, thunderbird +1 moreInformation disclosure, privilege escalation in the Security: Process Sandboxing componentCVE-2026-109709Fix available8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Networking componentCVE-2026-109708Fix available9.6 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Networking componentCVE-2026-109707Fix available9.6 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the Storage: IndexedDB componentCVE-2026-109706Fix available5.4 Medium
- mozilla firefox, thunderbird +1 moreSandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking componentCVE-2026-109705Fix available9.6 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Application Update componentCVE-2026-1097048.8 High
- mozilla node-convictCVE-2026-106550CVE-2026-1065507.5 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the File Handling componentCVE-2026-1060169.8 Critical
- mozilla thunderbirdHeap buffer overflow opening large emailCVE-2026-103500Fix available6.1 Medium
- mozilla firefox, firefox mobile +1 moreSpoofing issue in the Downloads component in Firefox for AndroidCVE-2026-1008235.4 Medium
- mozilla firefox, thunderbird +1 moreOther issue in the JavaScript: WebAssembly componentCVE-2026-1008175.4 Medium
- mozilla firefox, thunderbird +1 moreInvalid pointer in the JavaScript Engine: JIT componentCVE-2026-1008138.8 High
- mozilla firefox, thunderbird +1 moreOther issue in the DevTools componentCVE-2026-1008109.8 Critical
- mozilla firefox, thunderbird +1 moreRace condition, use-after-free in the Audio/Video componentCVE-2026-1008057.5 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Preferences: Backend componentCVE-2026-1008049.6 Critical
- mozilla firefox, thunderbird +1 moreUninitialized memory in the Graphics: WebGPU componentCVE-2026-1008024.3 Medium
- mozilla firefox, thunderbird +1 moreUninitialized memory in the Graphics: WebGPU componentCVE-2026-1007994.3 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: WebAssembly componentCVE-2026-1007968.8 High
- mozilla firefox, thunderbird +1 moreDenial-of-service in the Networking componentCVE-2026-1007956.5 Medium
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine componentCVE-2026-1007936.5 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics: WebGPU componentCVE-2026-1007688.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Graphics: WebGPU componentCVE-2026-1007648.8 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics: WebGPU componentCVE-2026-1007639.1 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation due to use-after-free in the Graphics: WebGPU componentCVE-2026-1007618.8 High
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Networking componentCVE-2026-96869Fix available4.3 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics: Canvas2D componentCVE-2026-100832Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: UI Events & Focus Handling componentCVE-2026-100831Fix available8.8 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Navigation componentCVE-2026-100830Fix available8.1 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security componentCVE-2026-100829Fix available9.6 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Bookmarks & History componentCVE-2026-100828Fix available9.6 Critical
- mozilla firefox, thunderbird +1 moreDenial-of-service in the Storage: StorageManager componentCVE-2026-100826Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript Engine: JIT componentCVE-2026-100825Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Places componentCVE-2026-100824Fix available8.8 High
- mozilla firefox, thunderbird +1 moreSpoofing issue in the Networking: HTTP componentCVE-2026-100822Fix available5.4 Medium
- mozilla firefox, thunderbird +1 moreSite isolation issue in the Panning and Zooming componentCVE-2026-100821Fix available4.7 Medium
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Address Bar componentCVE-2026-100820Fix available8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the XPCOM componentCVE-2026-100819Fix available9.6 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Widget: Gtk componentCVE-2026-100818Fix available9.6 Critical
- Show moreLoading…