Mozilla vulnerabilities
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-8947Use-after-free in the DOM: Bindings (WebIDL) component
- CVE-2026-8946Incorrect boundary conditions in the Audio/Video: Web Codecs component
- CVE-2026-8945Sandbox escape in Firefox and Firefox Focus for Android
- CVE-2026-8401Sandbox escape in the Profile Backup component
- CVE-2026-8391Other issue in the JavaScript Engine component
- CVE-2026-8390Use-after-free in the JavaScript: WebAssembly component
- CVE-2026-8389JIT miscompilation in the JavaScript Engine: JIT component
- CVE-2026-8388Incorrect boundary conditions in the JavaScript Engine: JIT component
- CVE-2026-8094Other issue in the WebRTC component
- CVE-2026-8093Memory safety bugs fixed in Thunderbird 150.0.2
- CVE-2026-8092Memory safety bugs fixed in Thunderbird ESR 140.10.2 and Thunderbird 150.0.2
- CVE-2026-8091Incorrect boundary conditions in the Audio/Video: Playback component
- CVE-2026-8090Use-after-free in the DOM: Networking component
- CVE-2026-7321Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component
- CVE-2026-7324Memory safety bugs fixed in Thunderbird 150.0.1
- CVE-2026-7323Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1
- CVE-2026-7322Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1
- CVE-2026-7320Information disclosure due to incorrect boundary conditions in the Audio/Video component
- CVE-2026-6786Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150
- CVE-2026-6785Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150
- CVE-2026-6784Memory safety bugs fixed in Firefox 150 and Thunderbird 150
- CVE-2026-6783Incorrect boundary conditions, integer overflow in the Audio/Video: Playback component
- CVE-2026-6782Information disclosure in the IP Protection component
- CVE-2026-6781Denial-of-service in the Audio/Video: Playback component
- CVE-2026-6780Denial-of-service in the Audio/Video: Playback component
- CVE-2026-6779Other issue in the JavaScript Engine component
- CVE-2026-6778Invalid pointer in the Audio/Video: Playback component
- CVE-2026-6777Other issue in the Networking: DNS component
- CVE-2026-6776Incorrect boundary conditions in the WebRTC: Networking component
- CVE-2026-6775Incorrect boundary conditions in the WebRTC component