Mozilla vulnerabilities
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-5735Memory safety bugs fixed in Firefox 149.0.2 and Thunderbird 149.0.2
- CVE-2026-5734Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2
- CVE-2026-5733Incorrect boundary conditions in the Graphics: WebGPU component
- CVE-2026-5732Incorrect boundary conditions, integer overflow in the Graphics: Text component
- CVE-2026-5731Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2
- CVE-2026-4371Out of bounds read in IMAP parsing
- CVE-2026-3889Spoofing issue in Thunderbird
- CVE-2026-4721Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149
- CVE-2026-4729Memory safety bugs fixed in Firefox 149 and Thunderbird 149
- CVE-2026-4720Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149
- CVE-2026-4719Incorrect boundary conditions in the Graphics: Text component
- CVE-2026-4718Undefined behavior in the WebRTC: Signaling component
- CVE-2026-4728Spoofing issue in the Privacy: Anti-Tracking component
- CVE-2026-4727Denial-of-service in the Libraries component in NSS
- CVE-2026-4726Denial-of-service in the XML component
- CVE-2026-4717Privilege escalation in the Netmonitor component
- CVE-2026-4716Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component
- CVE-2026-4715Uninitialized memory in the Graphics: Canvas2D component
- CVE-2026-4714Incorrect boundary conditions in the Audio/Video component
- CVE-2026-4713Incorrect boundary conditions in the Graphics component
- CVE-2026-4712Information disclosure in the Widget: Cocoa component
- CVE-2026-4725Sandbox escape due to use-after-free in the Graphics: Canvas2D component
- CVE-2026-4711Use-after-free in the Widget: Cocoa component
- CVE-2026-4710Incorrect boundary conditions in the Audio/Video component
- CVE-2026-4709Incorrect boundary conditions in the Audio/Video: GMP component
- CVE-2026-4708Incorrect boundary conditions in the Graphics component
- CVE-2026-4707Incorrect boundary conditions in the Graphics: Canvas2D component
- CVE-2026-4706Incorrect boundary conditions in the Graphics: Canvas2D component
- CVE-2026-4705Undefined behavior in the WebRTC: Signaling component
- CVE-2026-4704Denial-of-service in the WebRTC: Signaling component