Mozilla vulnerabilities
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-100761Privilege escalation due to use-after-free in the Graphics: WebGPU component
- CVE-2026-100760Sandbox escape in the Security: Process Sandboxing component
- CVE-2026-100759Uninitialized memory in the Storage: Quota Manager component
- CVE-2026-100758Sandbox escape in the DOM: Navigation component
- CVE-2026-100757Use-after-free in the Widget component
- CVE-2026-100756Incorrect boundary conditions in the Audio/Video: Playback component
- CVE-2026-92240Out-of-bounds read in IMAP response parser
- CVE-2026-92239Buffer overrun in IMAP
- CVE-2026-92238Ambiguous parsing of mail headers
- CVE-2026-92079Mitigation bypass in the Widget: Win32 component
- CVE-2026-92078Denial-of-service in the Security component
- CVE-2026-92077Denial-of-service in the SVG component
- CVE-2026-92076Incorrect boundary conditions in the Networking component
- CVE-2026-92075Mitigation bypass in the Networking component
- CVE-2026-92074Mitigation bypass in the Popup Blocker component
- CVE-2026-92073Privilege escalation in the Enterprise Policies component
- CVE-2026-92072Incorrect boundary conditions in the Safe Browsing component
- CVE-2026-92071Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
- CVE-2026-92070Information disclosure in the Networking component
- CVE-2026-92069Spoofing issue in the DOM: Navigation component
- CVE-2026-92068Site isolation issue in the Reader Mode component
- CVE-2026-92067Use-after-free in the Widget: Gtk component
- CVE-2026-92066Sandbox escape in the Profile Backup component
- CVE-2026-92065Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
- CVE-2026-92064Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
- CVE-2026-92063Denial-of-service in the Audio/Video component
- CVE-2026-92062Privilege escalation in the Session Restore component
- CVE-2026-92061Incorrect boundary conditions in the Security: Process Sandboxing component
- CVE-2026-92060Use-after-free in the Internationalization component
- CVE-2026-92059Incorrect boundary conditions in the DOM: Editor component