Mozilla vulnerabilities
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-74976JIT miscompilation in the JavaScript Engine: JIT component
- CVE-2026-74974Same-origin policy bypass in the Graphics: ImageLib component
- CVE-2026-74973Race condition, use-after-free in the Graphics component
- CVE-2026-74972Information disclosure in the DOM: Push Subscriptions component
- CVE-2026-74971Information disclosure in the DOM: UI Events & Focus Handling component
- CVE-2026-74969Race condition, use-after-free in the Layout: Text and Fonts component
- CVE-2026-74967Same-origin policy bypass in the Audio/Video: Playback component
- CVE-2026-74965Privilege escalation in the Shell Integration component
- CVE-2026-74964Integer overflow in the Graphics component
- CVE-2026-74963Same-origin policy bypass in the Networking: Cookies component
- CVE-2026-74962Site isolation issue in the Networking: Cookies component
- CVE-2026-74960Site isolation issue in the WebExtensions component
- CVE-2026-74959Mitigation bypass in the Storage: Cache API component
- CVE-2026-74957Mitigation bypass in the Safe Browsing component
- CVE-2026-74953Privilege escalation in the Networking: Cookies component
- CVE-2026-74949Use-after-free in the Graphics: Canvas2D component
- CVE-2026-74948Information disclosure in the Graphics component
- CVE-2026-74946Information disclosure due to incorrect boundary conditions in the Graphics: CanvasWebGL component
- CVE-2026-74945Information disclosure in the Graphics: Text component
- CVE-2026-74944Use-after-free in the DOM: Core & HTML component
- CVE-2026-74943Use-after-free in the Graphics: ImageLib component
- CVE-2026-74942Privilege escalation in the Remote Settings Client component
- CVE-2026-74941Privilege escalation in the Graphics: CanvasWebGL component
- CVE-2026-74940Use-after-free in the Graphics: Text component
- CVE-2026-74939Privilege escalation in the DOM: Navigation component
- CVE-2026-74936Use-after-free in the JavaScript: WebAssembly component
- CVE-2026-74935Privilege escalation in the DOM: Networking component
- CVE-2026-74934Site isolation issue in the Graphics: CanvasWebGL component
- CVE-2026-18809Information disclosure in Firefox for Android and Firefox Focus for Android
- CVE-2026-14899Off-by-one out of bounds read in MIME header parser for forwarding