Mozilla vulnerabilities
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-74989Internally found bugs fixed in Firefox 154
- CVE-2026-74988Internally found bugs fixed in Firefox ESR 153.1 and Firefox 154
- CVE-2026-74986Site isolation issue in the CSS Parsing and Computation component
- CVE-2026-74985Privilege escalation in the Enterprise Policies component
- CVE-2026-74984Race condition in the JavaScript Engine component
- CVE-2026-74982Denial-of-service in the Widget component
- CVE-2026-74981Site isolation issue in the Audio/Video: Web Codecs component
- CVE-2026-74980Clickjacking issue in the Downloads component in Firefox for Android
- CVE-2026-74979Mitigation bypass in the Add-ons Manager component
- CVE-2026-74978Clickjacking issue in the Widget component
- CVE-2026-74977Integer overflow in the Graphics component
- CVE-2026-74975Spoofing issue in the Downloads component in Firefox for Android
- CVE-2026-74970Site isolation issue in the Graphics component
- CVE-2026-74968Site isolation issue in the Graphics: WebRender component
- CVE-2026-74966Information disclosure in the Form Autofill component
- CVE-2026-74961Side-channel in the Web Audio component
- CVE-2026-74958Information disclosure in the WebRTC component
- CVE-2026-74956Same-origin policy bypass in the DOM: Service Workers component
- CVE-2026-74955Privilege escalation in the Request Handling component
- CVE-2026-74954Information disclosure due to side-channel in the Storage: Cache API component
- CVE-2026-74952Privilege escalation in the Application Update component
- CVE-2026-74951Clickjacking issue in Firefox for Android
- CVE-2026-74950Privilege escalation in the Downloads API component
- CVE-2026-74947Privilege escalation due to invalid pointer in the Graphics component
- CVE-2026-74938Mitigation bypass in the JavaScript: GC component
- CVE-2026-74937Use-after-free in the JavaScript: GC component
- CVE-2026-75874Sandbox escape in the Remote Settings Client component
- CVE-2026-74990Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154
- CVE-2026-74987Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154
- CVE-2026-74983Mitigation bypass in the Data Loss Prevention component