Mozilla vulnerabilities
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-92058Use-after-free in the Graphics component
- CVE-2026-92057Mitigation bypass in the Enterprise Policies component
- CVE-2026-92056Use-after-free in the Graphics: Text component
- CVE-2026-92055Privilege escalation in the DevTools component
- CVE-2026-92054Privilege escalation in the Memory component
- CVE-2026-92053Privilege escalation in the Graphics: CanvasWebGL component
- CVE-2026-92052Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component
- CVE-2026-92051Spoofing issue due to invalid pointer in the Graphics component
- CVE-2026-92050Sandbox escape due to race condition in the XPConnect component
- CVE-2026-92049Use-after-free in the Widget: Win32 component
- CVE-2026-92048Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
- CVE-2026-92047Privilege escalation in the Crash Reporting component
- CVE-2026-92046Use-after-free in the Graphics component
- CVE-2026-92045Sandbox escape due to incorrect boundary conditions in the WebRTC component
- CVE-2026-92044Information disclosure in the Networking: HTTP component
- CVE-2026-92043Privilege escalation due to incorrect boundary conditions in the Audio/Video component
- CVE-2026-92042Race condition in the DOM: Content Processes component
- CVE-2026-92041Mitigation bypass in the DOM: Networking component
- CVE-2026-92040Use-after-free in the JavaScript: WebAssembly component
- CVE-2026-92039Mitigation bypass in the DOM: Notifications component
- CVE-2026-92038Mitigation bypass in the Remote Settings Client component
- CVE-2026-92037Incorrect boundary conditions in the DOM: Animation component
- CVE-2026-92036Incorrect boundary conditions in the Networking: HTTP component
- CVE-2026-92035Sandbox escape due to incorrect boundary conditions in the Graphics component
- CVE-2026-92034Site isolation issue in the Graphics component
- CVE-2026-92033Privilege escalation in Firefox for Android
- CVE-2026-92032Sandbox escape due to invalid pointer in the Graphics component
- CVE-2026-92031Information disclosure in the Graphics: ImageLib component
- CVE-2026-92030Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component
- CVE-2026-92029Use-after-free in the SVG component