Mozilla vulnerabilities
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-9078Firefox iOS RTL Domain Rendering Issue in Link Preview
- CVE-2026-8706Sensitive user data could be leaked to other applications through Reader mode
- CVE-2026-8975Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151
- CVE-2026-8974Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151
- CVE-2026-8973Memory safety bugs fixed in Thunderbird 151
- CVE-2026-8972Privilege escalation in the WebRTC: Audio/Video component
- CVE-2026-8971Same-origin policy bypass in the Networking: JAR component
- CVE-2026-8970Privilege escalation in the Security component
- CVE-2026-8969Mitigation bypass in the DOM: Security component
- CVE-2026-8968Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component
- CVE-2026-8967Information disclosure in the Graphics: WebGPU component
- CVE-2026-8966Information disclosure in the IP Protection component
- CVE-2026-8965Information disclosure in the DOM: Security component
- CVE-2026-8964Spoofing issue in the Popup Blocker component
- CVE-2026-8963Spoofing issue in the Web Speech component
- CVE-2026-8962Mitigation bypass in the DOM: Security component
- CVE-2026-8961Spoofing issue in the Form Autofill component
- CVE-2026-8960Spoofing issue in WebExtensions
- CVE-2026-8959Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
- CVE-2026-8958Information disclosure, sandbox escape in the Security: Process Sandboxing component
- CVE-2026-8957Privilege escalation in the Enterprise Policies component
- CVE-2026-8956Integer overflow in the Networking: JAR component
- CVE-2026-8955Privilege escalation in the DOM: Workers component
- CVE-2026-8954Incorrect boundary conditions, integer overflow in the Audio/Video component
- CVE-2026-8953Sandbox escape due to use-after-free in the Disability Access APIs component
- CVE-2026-8952Privilege escalation in the Application Update component
- CVE-2026-8951Spoofing issue in the Toolbar component in Firefox for Android
- CVE-2026-8950Same-origin policy bypass in the Networking: HTTP component
- CVE-2026-8949Integer overflow in the Widget: Win32 component
- CVE-2026-8948Same-origin policy bypass in the DOM: Networking component