Skip to contentMozilla vulnerabilities
Newest
- mozilla firefox, thunderbird +1 moreUse-after-free in the Networking componentCVE-2026-117884Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: HTML Parser componentCVE-2026-117883Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Layout componentCVE-2026-117882Fix available6.3 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Core & HTML componentCVE-2026-117881Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the XML componentCVE-2026-117880Fix available6.3 Medium
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Layout: Tables componentCVE-2026-117879Fix available7.3 High
- mozilla firefox, thunderbird +1 moreOther issue, use-after-free in the Storage: IndexedDB componentCVE-2026-117878Fix available6.3 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the Layout: Text and Fonts componentCVE-2026-117877Fix available6.3 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the Layout: Text and Fonts componentCVE-2026-117876Fix available6.3 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the Layout: Scrolling and Overflow componentCVE-2026-117875Fix available6.3 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the Internationalization componentCVE-2026-117874Fix available6.3 Medium
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Audio/Video: Playback componentCVE-2026-117873Fix available8.1 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: Standard Library componentCVE-2026-117872Fix available8.8 High
- mozilla firefox, thunderbird +1 moreInvalid pointer in the Graphics componentCVE-2026-117871Fix available7.3 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript Engine componentCVE-2026-117870Fix available7.3 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Core & HTML componentCVE-2026-117869Fix available8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape in the DOM: Networking componentCVE-2026-117868Fix available9.6 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the Layout componentCVE-2026-117867Fix available7.3 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to use-after-free in the Graphics: Canvas2D componentCVE-2026-117866Fix available7.3 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: GC componentCVE-2026-117865Fix available6.3 Medium
- mozilla firefox, thunderbird +1 moreSandbox escape in the Form Manager componentCVE-2026-117864Fix available8.8 High
- mozilla firefox, thunderbird +1 moreInformation disclosure due to uninitialized memory in the Audio/Video componentCVE-2026-117863Fix available6.5 Medium
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Networking componentCVE-2026-117862Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape in the DOM: Navigation componentCVE-2026-117861Fix available9.6 Critical
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the DOM: Navigation componentCVE-2026-117860Fix available8.1 High
- mozilla firefox for iosExternal protocol handler (tel:) address bar spoofCVE-2026-1166315.4 Medium
- mozilla firefox for iosFacetime protocol handler enabled spoofingCVE-2026-1166325.4 Medium
- mozilla thunderbirdUse-after-free in S/MIME decryption during a security device password promptCVE-2026-1138695.4 Medium
- mozilla thunderbirdUninitialized memory disclosure and out-of-bounds read in POP3 and SMTP NTLM authenticationCVE-2026-113868Fix available5.3 Medium
- mozilla thunderbirdStanza injection in XMPP chatCVE-2026-113867Fix available9.1 Critical
- mozilla thunderbirdAccount password sent unencrypted during Exchange account setupCVE-2026-113866Fix available5.9 Medium
- mozilla firefox, thunderbird +1 moreDenial-of-service in the PDF Viewer componentCVE-2026-1134016.5 Medium
- mozilla firefox, thunderbird +1 moreUninitialized memory in the Audio/Video: cubeb componentCVE-2026-1134005.4 Medium
- mozilla firefox, thunderbird +1 moreCryptographic issue in the Security Block-lists, Allow-lists, and other State componentCVE-2026-113470Fix available5.4 Medium
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the SVG componentCVE-2026-1133999.8 Critical
- mozilla thunderbirdDenial-of-service in the Exchange email componentCVE-2026-110249Fix available8.6 High
- mozilla thunderbirdInteger overflow in libmime buffer growth could lead to heap corruptionCVE-2026-1102478.4 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Core & HTML componentCVE-2026-1097809.8 Critical
- mozilla firefox, thunderbird +1 moreRace condition in the Networking: DNS componentCVE-2026-1097794.2 Medium
- mozilla firefox, thunderbird +1 moreInvalid pointer, undefined behavior in the DOM: Notifications componentCVE-2026-1097749.8 Critical
- mozilla firefox, thunderbird +1 moreDenial-of-service in the Sync componentCVE-2026-1097736.5 Medium
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the DevTools componentCVE-2026-1097729.1 Critical
- mozilla firefox, thunderbird +1 moreInformation disclosure in the WebRTC: Networking componentCVE-2026-1097714.3 Medium
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Networking: Cache componentCVE-2026-1097694.3 Medium
- mozilla firefox, thunderbird +1 moreDenial-of-service in the Site Reports componentCVE-2026-1097686.5 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: WebAssembly componentCVE-2026-1097615.4 Medium
- mozilla firefox, thunderbird +1 moreSandbox escape in the DOM: Content Processes componentCVE-2026-1097559.6 Critical
- mozilla firefox, thunderbird +1 moreSite isolation issue in the DOM: Web Authentication componentCVE-2026-1097509.6 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: WebAssembly componentCVE-2026-1097495.4 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: WebAssembly componentCVE-2026-1097485.4 Medium
- Show moreLoading…