Mozilla vulnerabilities
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-117872Use-after-free in the JavaScript: Standard Library component
- CVE-2026-117871Invalid pointer in the Graphics component
- CVE-2026-117870Use-after-free in the JavaScript Engine component
- CVE-2026-117869Use-after-free in the DOM: Core & HTML component
- CVE-2026-117868Sandbox escape in the DOM: Networking component
- CVE-2026-117867Use-after-free in the Layout component
- CVE-2026-117866Privilege escalation due to use-after-free in the Graphics: Canvas2D component
- CVE-2026-117865Use-after-free in the JavaScript: GC component
- CVE-2026-117864Sandbox escape in the Form Manager component
- CVE-2026-117863Information disclosure due to uninitialized memory in the Audio/Video component
- CVE-2026-117862Privilege escalation due to incorrect boundary conditions in the Networking component
- CVE-2026-117861Sandbox escape in the DOM: Navigation component
- CVE-2026-117860Same-origin policy bypass in the DOM: Navigation component
- CVE-2026-116631External protocol handler (tel:) address bar spoof
- CVE-2026-116632Facetime protocol handler enabled spoofing
- CVE-2026-113869Use-after-free in S/MIME decryption during a security device password prompt
- CVE-2026-113868Uninitialized memory disclosure and out-of-bounds read in POP3 and SMTP NTLM authentication
- CVE-2026-113867Stanza injection in XMPP chat
- CVE-2026-113866Account password sent unencrypted during Exchange account setup
- CVE-2026-113401Denial-of-service in the PDF Viewer component
- CVE-2026-113400Uninitialized memory in the Audio/Video: cubeb component
- CVE-2026-113399Incorrect boundary conditions in the SVG component
- CVE-2026-113470Cryptographic issue in the Security Block-lists, Allow-lists, and other State component
- CVE-2026-110249Denial-of-service in the Exchange email component
- CVE-2026-110247Integer overflow in libmime buffer growth could lead to heap corruption
- CVE-2026-109783Mitigation bypass in the File Handling component
- CVE-2026-109782Mitigation bypass in the File Handling component
- CVE-2026-109781Denial-of-service in the Printing: Output component
- CVE-2026-109780Mitigation bypass in the DOM: Core & HTML component
- CVE-2026-109779Race condition in the Networking: DNS component