Mozilla vulnerabilities
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-124901Other issue in the Networking: JAR component
- CVE-2026-124899Use-after-free in the Layout: Text and Fonts component
- CVE-2026-124898Use-after-free in the DOM: Editor component
- CVE-2026-124897Use-after-free in the JavaScript: GC component
- CVE-2026-124896Invalid pointer in the Layout: Text and Fonts component
- CVE-2026-124895Use-after-free in the Storage: localStorage & sessionStorage component
- CVE-2026-124894Use-after-free in the Networking: Cookies component
- CVE-2026-124893Use-after-free in the DOM: Workers component
- CVE-2026-124892Use-after-free in the JavaScript: GC component
- CVE-2026-124891Incorrect boundary conditions in the DOM: Selection component
- CVE-2026-124890Use-after-free in the DOM: Core & HTML component
- CVE-2026-124889Use-after-free in the CSS Parsing and Computation component
- CVE-2026-124888Incorrect boundary conditions in the Layout: Text and Fonts component
- CVE-2026-124887Incorrect boundary conditions in the Layout: Text and Fonts component
- CVE-2026-124886Invalid pointer in the Layout: Text and Fonts component
- CVE-2026-124885Use-after-free in the Graphics: Text component
- CVE-2026-124884Use-after-free in the JavaScript: GC component
- CVE-2026-124883Use-after-free in the DOM: Core & HTML component
- CVE-2026-124882Use-after-free in the CSS Parsing and Computation component
- CVE-2026-124881Use-after-free in the CSS Parsing and Computation component
- CVE-2026-124880Use-after-free in the DOM: Core & HTML component
- CVE-2026-124879Invalid pointer in the Networking: Cache component
- CVE-2026-124877Use-after-free in the Layout: Positioned component
- CVE-2026-124876Use-after-free in the CSS Parsing and Computation component
- CVE-2026-124875Incorrect boundary conditions in the DOM: CSS Object Model component
- CVE-2026-124874Same-origin policy bypass in the Networking: HTTP component
- CVE-2026-124873Invalid pointer in the DOM: Editor component
- CVE-2026-124872Use-after-free in the Cycle Collector component
- CVE-2026-124870Incorrect boundary conditions in the JavaScript: GC component
- CVE-2026-124869Use-after-free in the DOM: Core & HTML component