Mozilla vulnerabilities
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-16361Memory safety bugs fixed in Thunderbird ESR 140.13
- CVE-2026-16360Memory safety bugs fixed in Thunderbird ESR 140.13 and Thunderbird 153
- CVE-2026-16412Memory safety bugs fixed in Thunderbird ESR 140.13 and Thunderbird 153
- CVE-2026-16411Memory safety bugs fixed in Thunderbird 153
- CVE-2026-16410JIT miscompilation in the JavaScript Engine: JIT component
- CVE-2026-16409Invalid pointer in the Security: PSM component
- CVE-2026-16408Integer overflow in the Audio/Video: Playback component
- CVE-2026-16407Mitigation bypass in the DOM: Service Workers component
- CVE-2026-16406Mitigation bypass in the Networking component
- CVE-2026-16405Information disclosure in the Networking: WebSockets component
- CVE-2026-16404Spoofing issue in Firefox for Android
- CVE-2026-16403Spoofing issue in the Address Bar component
- CVE-2026-16402Integer overflow in the Graphics: ImageLib component
- CVE-2026-16401Privilege escalation in the Data Loss Prevention component
- CVE-2026-16400Information disclosure in the DOM: Security component
- CVE-2026-16399Site isolation issue in the DOM: Navigation component
- CVE-2026-16398Site isolation issue in the Graphics component
- CVE-2026-16397Clickjacking issue in the WebExtensions component in Firefox for Android
- CVE-2026-16396Privilege escalation in WebExtensions
- CVE-2026-16395Integer overflow in the Audio/Video component
- CVE-2026-16394Mitigation bypass in the DOM: Security component
- CVE-2026-16359Incorrect boundary conditions in the Audio/Video: GMP component
- CVE-2026-16393Incorrect boundary conditions in the Graphics: WebGPU component
- CVE-2026-16392JIT miscompilation in the JavaScript Engine: JIT component
- CVE-2026-16391Information disclosure in the Storage: IndexedDB component
- CVE-2026-16390Mitigation bypass in the Enterprise Policies component
- CVE-2026-16389Incorrect boundary conditions, integer overflow in the Libraries component in NSS
- CVE-2026-16388Sandbox escape in the DOM: Networking component
- CVE-2026-16387Site isolation issue in the Networking component
- CVE-2026-16386Information disclosure due to uninitialized memory in the Graphics: WebGPU component