Mozilla vulnerabilities
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-124942Invalid pointer in the DOM: Streams component
- CVE-2026-124941Information disclosure in the Security: RLBox component
- CVE-2026-124940Mitigation bypass in the File Handling component
- CVE-2026-124939JIT miscompilation in the JavaScript Engine: JIT component
- CVE-2026-124938Mitigation bypass in the Add-ons Manager component
- CVE-2026-124935Undefined behavior in the WebRTC: Networking component
- CVE-2026-124934Spoofing issue in the Security component
- CVE-2026-124933Sandbox escape in the Console component
- CVE-2026-124932Use-after-free in the Graphics component
- CVE-2026-124931Same-origin policy bypass in the DOM: Core & HTML component
- CVE-2026-124930Information disclosure in the Address Bar component
- CVE-2026-124929Information disclosure in the Layout: Form Controls component
- CVE-2026-124927Site isolation issue in the Graphics: WebRender component
- CVE-2026-124926Incorrect boundary conditions in the WebRTC component
- CVE-2026-124924Incorrect boundary conditions in the Graphics: WebRender component
- CVE-2026-124922Use-after-free in the CSS Transitions and Animations component
- CVE-2026-124919Privilege escalation due to use-after-free in the WebRTC: Networking component
- CVE-2026-124918Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component
- CVE-2026-124917Sandbox escape due to use-after-free in the Widget: Gtk component
- CVE-2026-124915Incorrect boundary conditions in the Graphics: WebGPU component
- CVE-2026-124914Site isolation issue in the DOM: Navigation component
- CVE-2026-124913Site isolation issue in the Networking component
- CVE-2026-124912Spoofing issue in the DOM: Security component
- CVE-2026-124910Mitigation bypass in the WebExtensions component
- CVE-2026-124909Information disclosure in the Private Browsing component
- CVE-2026-124907Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component
- CVE-2026-124906Use-after-free in the Graphics: WebRender component
- CVE-2026-124905Sandbox escape in the DOM: Navigation component
- CVE-2026-124903Sandbox escape due to use-after-free in the IPC component
- CVE-2026-124902Same-origin policy bypass due to race condition in the Audio/Video component