Mozilla vulnerabilities
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-6774Mitigation bypass in the DOM: Security component
- CVE-2026-6773Denial-of-service due to integer overflow in the Graphics: WebGPU component
- CVE-2026-6772Incorrect boundary conditions in the Libraries component in NSS
- CVE-2026-6771Mitigation bypass in the DOM: Security component
- CVE-2026-6770Other issue in the Storage: IndexedDB component
- CVE-2026-6769Privilege escalation in the Debugger component
- CVE-2026-6768Mitigation bypass in the Networking: Cookies component
- CVE-2026-6767Other issue in the Libraries component in NSS
- CVE-2026-6766Incorrect boundary conditions in the Libraries component in NSS
- CVE-2026-6765Information disclosure in the Form Autofill component
- CVE-2026-6764Incorrect boundary conditions in the DOM: Device Interfaces component
- CVE-2026-6763Mitigation bypass in the File Handling component
- CVE-2026-6762Spoofing issue in the DOM: Core & HTML component
- CVE-2026-6761Privilege escalation in the Networking component
- CVE-2026-6760Mitigation bypass in the Networking: Cookies component
- CVE-2026-6759Use-after-free in the Widget: Cocoa component
- CVE-2026-6758Use-after-free in the JavaScript: WebAssembly component
- CVE-2026-6757Invalid pointer in the JavaScript: WebAssembly component
- CVE-2026-6756Mitigation bypass in Firefox for Android
- CVE-2026-6755Mitigation bypass in the DOM: postMessage component
- CVE-2026-6754Use-after-free in the JavaScript Engine component
- CVE-2026-6753Incorrect boundary conditions in the WebRTC component
- CVE-2026-6752Incorrect boundary conditions in the WebRTC component
- CVE-2026-6751Uninitialized memory in the Audio/Video: Web Codecs component
- CVE-2026-6750Privilege escalation in the Graphics: WebRender component
- CVE-2026-6749Information disclosure due to uninitialized memory in the Graphics: Canvas2D component
- CVE-2026-6748Uninitialized memory in the Audio/Video: Web Codecs component
- CVE-2026-6747Use-after-free in the WebRTC component
- CVE-2026-6746Use-after-free in the DOM: Core & HTML component
- CVE-2026-6654Use-After-Free and Double-Free in IntoIter::drop when element drop panics