Mozilla vulnerabilities
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-16351Sandbox escape due to use-after-free in the DOM: Navigation component
- CVE-2026-16362Use-after-free in the WebRTC: Audio/Video component
- CVE-2026-16350Incorrect boundary conditions in the Audio/Video: cubeb component
- CVE-2026-16349Same-origin policy bypass in the DOM: Navigation component
- CVE-2026-15719Site isolation issue in the DOM: Navigation component
- CVE-2026-15718Invalid pointer in the JavaScript: WebAssembly component
- CVE-2026-14906Malicious webpage titles could allow overwriting of bundled PDF resources when saving webpages as PDFs in Firefox for iOS
- CVE-2026-13356Interrupted navigation could allow address bar origin spoofing in Firefox for iOS
- CVE-2026-57963Chat UI manipulation by injection
- CVE-2026-57962Denial-of-service via malicious LDAP address-book server
- CVE-2026-14241Memory safety bugs fixed in Firefox 152.0.4
- CVE-2026-53900Cookie injection was possible when opening a PDF link
- CVE-2026-53899Cross-origin cookies could be leaked when opening a PDF link
- CVE-2026-12330Incorrect boundary conditions in the Internationalization component
- CVE-2026-12329Memory safety bug fixed in Thunderbird ESR 140.12
- CVE-2026-12328Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152
- CVE-2026-12327Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152
- CVE-2026-12326Memory safety bugs fixed in Firefox 152 and Thunderbird 152
- CVE-2026-12325Denial-of-service in the Graphics: ImageLib component
- CVE-2026-12324Incorrect boundary conditions in the Graphics: CanvasWebGL component
- CVE-2026-12323Spoofing issue in the DOM: Core & HTML component
- CVE-2026-12322Clickjacking issue in the Widget: Gtk component
- CVE-2026-12321JIT miscompilation in the JavaScript: WebAssembly component
- CVE-2026-12320Information disclosure in the Password Manager component
- CVE-2026-12319Denial-of-service in the Audio/Video: Playback component
- CVE-2026-12318Incorrect boundary conditions in the Libraries component in NSS
- CVE-2026-12317Memory safety bug fixed in Thunderbird 152
- CVE-2026-12316Mitigation bypass in the DOM: Security component
- CVE-2026-12315Mitigation bypass in the DOM: Security component
- CVE-2026-12314Memory safety bug fixed in Thunderbird 152