Mozilla vulnerabilities
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-16385Information disclosure due to uninitialized memory in the Graphics: WebGPU component
- CVE-2026-16384Information disclosure due to uninitialized memory in the Graphics: WebGPU component
- CVE-2026-16383Mitigation bypass in the DOM: Networking component
- CVE-2026-16382Mitigation bypass in the DOM: Service Workers component
- CVE-2026-16381Same-origin policy bypass in the Networking: DNS component
- CVE-2026-16380Mitigation bypass in the Networking component
- CVE-2026-16358Site isolation issue in the Graphics: WebRender component
- CVE-2026-16379Privilege escalation in the DOM: Content Processes component
- CVE-2026-16378Other issue in the DOM: Copy & Paste and Drag & Drop component
- CVE-2026-16377Mitigation bypass in the PDF Viewer component
- CVE-2026-16376Denial-of-service in the Graphics: WebGPU component
- CVE-2026-16375Site isolation issue in the Networking: HTTP component
- CVE-2026-16374Information disclosure in the Framework component in DevTools
- CVE-2026-16373Information disclosure in the Privacy component in Firefox for Android
- CVE-2026-16372Privilege escalation in the DOM: Content Processes component
- CVE-2026-16371Privilege escalation in the DOM: Navigation component
- CVE-2026-16370Mitigation bypass in the DOM: Networking component
- CVE-2026-16357Incorrect boundary conditions in the Graphics component
- CVE-2026-16356Sandbox escape due to use-after-free in the Disability Access APIs component
- CVE-2026-16355JIT miscompilation in the JavaScript Engine: JIT component
- CVE-2026-16369Integer overflow in the JavaScript: WebAssembly component
- CVE-2026-16368Incorrect boundary conditions in the JavaScript: WebAssembly component
- CVE-2026-16367Sandbox escape due to invalid pointer in the Disability Access APIs component
- CVE-2026-16354Information disclosure in the Graphics: ImageLib component
- CVE-2026-16353Invalid pointer in the DOM: Bindings (WebIDL) component
- CVE-2026-16366Privilege escalation in the DOM: Navigation component
- CVE-2026-16365Privilege escalation in the DOM: Workers component
- CVE-2026-16364Incorrect boundary conditions in the Audio/Video: Playback component
- CVE-2026-16363JIT miscompilation in the JavaScript: WebAssembly component
- CVE-2026-16352Sandbox escape due to use-after-free in the Disability Access APIs component