Mozilla vulnerabilities
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-100820Privilege escalation in the Address Bar component
- CVE-2026-100819Sandbox escape due to incorrect boundary conditions in the XPCOM component
- CVE-2026-100818Sandbox escape due to use-after-free in the Widget: Gtk component
- CVE-2026-100817Other issue in the JavaScript: WebAssembly component
- CVE-2026-100816Site isolation issue in the DOM: Networking component
- CVE-2026-100815Use-after-free in the CSS Parsing and Computation component
- CVE-2026-100814Incorrect boundary conditions in the JavaScript Engine: JIT component
- CVE-2026-100813Invalid pointer in the JavaScript Engine: JIT component
- CVE-2026-100812Denial-of-service in the Graphics component
- CVE-2026-100811Sandbox escape due to use-after-free in the DOM: Core & HTML component
- CVE-2026-100810Other issue in the DevTools component
- CVE-2026-100809Same-origin policy bypass in the DevTools component
- CVE-2026-100808Mitigation bypass in the DOM: Service Workers component
- CVE-2026-100807Privilege escalation in the DOM: Service Workers component
- CVE-2026-100806Uninitialized memory in the Graphics: WebGPU component
- CVE-2026-100805Race condition, use-after-free in the Audio/Video component
- CVE-2026-100804Sandbox escape due to use-after-free in the Preferences: Backend component
- CVE-2026-100803Same-origin policy bypass in the WebExtensions component
- CVE-2026-100802Uninitialized memory in the Graphics: WebGPU component
- CVE-2026-100801Privilege escalation in the DLL Services component
- CVE-2026-100800Sandbox escape due to use-after-free in the Disability Access APIs component
- CVE-2026-100799Uninitialized memory in the Graphics: WebGPU component
- CVE-2026-100798Cryptography misuse in Storage: Quota Manager component
- CVE-2026-100797Privilege escalation due to use-after-free in the Graphics: WebRender component
- CVE-2026-100796Use-after-free in the JavaScript: WebAssembly component
- CVE-2026-100795Denial-of-service in the Networking component
- CVE-2026-96869Information disclosure in the Networking component
- CVE-2026-100794Sandbox escape due to incorrect boundary conditions in the Internationalization component
- CVE-2026-100793JIT miscompilation in the JavaScript Engine component
- CVE-2026-100792JIT miscompilation in the JavaScript: WebAssembly component