Mozilla vulnerabilities
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-100791Use-after-free in the DOM: Core & HTML component
- CVE-2026-100790Use-after-free in the XSLT component
- CVE-2026-100789Use-after-free in the Graphics: Canvas2D component
- CVE-2026-100788Invalid pointer in the JavaScript: WebAssembly component
- CVE-2026-100787Sandbox escape in the XUL component
- CVE-2026-100786Sandbox escape due to use-after-free in the Graphics component
- CVE-2026-100785Use-after-free in the DOM: Core & HTML component
- CVE-2026-100784Use-after-free in the Layout: Text and Fonts component
- CVE-2026-100783Uninitialized memory in the Audio/Video component
- CVE-2026-100782Privilege escalation due to incorrect boundary conditions in the Graphics component
- CVE-2026-100781Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component
- CVE-2026-100780Use-after-free in the DOM: Core & HTML component
- CVE-2026-100779Use-after-free in the XSLT component
- CVE-2026-100778Sandbox escape due to use-after-free in the DOM: Core & HTML component
- CVE-2026-100777Use-after-free in the Graphics: Canvas2D component
- CVE-2026-100776Use-after-free in the JavaScript: WebAssembly component
- CVE-2026-100775Sandbox escape in the Graphics component
- CVE-2026-100774Use-after-free in the DOM: Core & HTML component
- CVE-2026-100773Use-after-free in the Storage: IndexedDB component
- CVE-2026-100772Use-after-free in the DOM: Core & HTML component
- CVE-2026-100771Undefined behavior in the DOM: Streams component
- CVE-2026-100770Sandbox escape due to use-after-free in the DOM: Content Processes component
- CVE-2026-100769Use-after-free in the JavaScript: WebAssembly component
- CVE-2026-100768Use-after-free in the Graphics: WebGPU component
- CVE-2026-100767Use-after-free in the Networking: Cache component
- CVE-2026-100766Information disclosure in the Networking: JAR component
- CVE-2026-100765Use-after-free in the JavaScript: WebAssembly component
- CVE-2026-100764Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component
- CVE-2026-100763Incorrect boundary conditions in the Graphics: WebGPU component
- CVE-2026-100762Sandbox escape due to use-after-free in the DOM: Content Processes component