Mozilla vulnerabilities
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-109746Mitigation bypass in the DOM: Security component
- CVE-2026-109745Sandbox escape due to uninitialized memory in the DOM: Web Serial component
- CVE-2026-109744Other issue in the DOM: File component
- CVE-2026-109743Privilege escalation in the Panning and Zooming component
- CVE-2026-109742Information disclosure in the PDF Viewer component
- CVE-2026-109741Use-after-free in the Storage: Bucket File System component
- CVE-2026-109740Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
- CVE-2026-109739Privilege escalation in the WebExtensions component
- CVE-2026-109738Use-after-free in the Audio/Video: Playback component
- CVE-2026-109737Mitigation bypass in the Enterprise Policies component
- CVE-2026-109736Frame poisoning in the Layout component
- CVE-2026-109735Use-after-free in the DOM: Animation component
- CVE-2026-109734Mitigation bypass in the DOM: Security component
- CVE-2026-109731Incorrect boundary conditions in the Graphics: Canvas2D component
- CVE-2026-109724Use-after-free in the DOM: Core & HTML component
- CVE-2026-109723Integer overflow in the Layout: Text and Fonts component
- CVE-2026-109721Incorrect boundary conditions in the JavaScript Engine: JIT component
- CVE-2026-109720JIT miscompilation in the JavaScript: WebAssembly component
- CVE-2026-109717Use-after-free in the DOM: Bindings (WebIDL) component
- CVE-2026-109714Incorrect boundary conditions in the Layout component
- CVE-2026-109713Use-after-free in the Crash Reporting component
- CVE-2026-109711Use-after-free in the Graphics: Canvas2D component
- CVE-2026-109709Information disclosure, privilege escalation in the Security: Process Sandboxing component
- CVE-2026-109708Sandbox escape due to incorrect boundary conditions in the Networking component
- CVE-2026-109707Sandbox escape due to use-after-free in the Networking component
- CVE-2026-109705Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component
- CVE-2026-109704Privilege escalation in the Application Update component
- CVE-2026-109753Incorrect boundary conditions in the Layout component
- CVE-2026-109733JIT miscompilation in the JavaScript Engine: JIT component
- CVE-2026-109732Use-after-free in the DOM: Streams component