Mozilla vulnerabilities
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-109778Privilege escalation in the WebExtensions component
- CVE-2026-109777Information disclosure in the Storage: IndexedDB component
- CVE-2026-109776Race condition in the XPCOM component
- CVE-2026-109775Denial-of-service in the WebRTC component
- CVE-2026-109774Invalid pointer, undefined behavior in the DOM: Notifications component
- CVE-2026-109773Denial-of-service in the Sync component
- CVE-2026-109772Same-origin policy bypass in the DevTools component
- CVE-2026-109771Information disclosure in the WebRTC: Networking component
- CVE-2026-109770Spoofing issue in the DOM: Web Serial component
- CVE-2026-109769Information disclosure in the Networking: Cache component
- CVE-2026-109768Denial-of-service in the Site Reports component
- CVE-2026-109767Information disclosure in the Networking component
- CVE-2026-109766Mitigation bypass in the Enterprise Policies component
- CVE-2026-109765Race condition, use-after-free in the Graphics: Text component
- CVE-2026-109764Mitigation bypass in the Enterprise Policies component
- CVE-2026-109763Mitigation bypass in the File Handling component
- CVE-2026-109762Incorrect boundary conditions in the SVG component
- CVE-2026-109761Use-after-free in the JavaScript: WebAssembly component
- CVE-2026-109760Mitigation bypass in the Networking: HTTP component
- CVE-2026-109759Site isolation issue in the Networking component
- CVE-2026-109757Sandbox escape due to race condition in the Networking component
- CVE-2026-109756Privilege escalation in the DOM: Navigation component
- CVE-2026-109755Sandbox escape in the DOM: Content Processes component
- CVE-2026-109754Incorrect boundary conditions in the DOM: Editor component
- CVE-2026-109752Use-after-free in the DOM: Workers component
- CVE-2026-109751Information disclosure in the Networking component
- CVE-2026-109750Site isolation issue in the DOM: Web Authentication component
- CVE-2026-109749Use-after-free in the JavaScript: WebAssembly component
- CVE-2026-109748Use-after-free in the JavaScript: WebAssembly component
- CVE-2026-109747Other issue in the Address Bar component