Mozilla vulnerabilities
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-92028Use-after-free in the DOM: Core & HTML component
- CVE-2026-92027Use-after-free in the DOM: Streams component
- CVE-2026-92026Use-after-free in the Networking component
- CVE-2026-92025Use-after-free in the DOM: Navigation component
- CVE-2026-92024Use-after-free in the SVG component
- CVE-2026-92023Use-after-free in the XML component
- CVE-2026-92022Use-after-free in the DOM: HTML Parser component
- CVE-2026-92021Use-after-free in the JavaScript Engine: JIT component
- CVE-2026-92020Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component
- CVE-2026-92019Mitigation bypass in the Remote Settings Client component
- CVE-2026-92018Sandbox escape in the DOM: Core & HTML component
- CVE-2026-92017Privilege escalation in the DOM: Service Workers component
- CVE-2026-92016Use-after-free in the Disability Access APIs component
- CVE-2026-92015Privilege escalation in the WebExtensions component
- CVE-2026-92014Privilege escalation due to incorrect boundary conditions in the Graphics component
- CVE-2026-92013Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
- CVE-2026-92012Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
- CVE-2026-92011Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
- CVE-2026-92010Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
- CVE-2026-92009Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
- CVE-2026-92008Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
- CVE-2026-92007Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
- CVE-2026-92006Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
- CVE-2026-92005Use-after-free in the Audio/Video: Web Codecs component
- CVE-2026-86853Repeated external URL scheme launches could potentially cause a denial of service in Firefox for iOS
- CVE-2026-84642Allowed UNC hostnames for attachments interpreted as a regular expression
- CVE-2026-84641Information disclosure due to malicious IMAP server response
- CVE-2026-84640One byte overflow read in mail parser
- CVE-2026-84639Uninitialized memory in MIME parsing
- CVE-2026-84637Calendar invitation attachments could launch local executables