Mozilla vulnerabilities
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-4724Undefined behavior in the Audio/Video component
- CVE-2026-4723Use-after-free in the JavaScript Engine component
- CVE-2026-4702JIT miscompilation in the JavaScript Engine component
- CVE-2026-4722Privilege escalation in the IPC component
- CVE-2026-4701Use-after-free in the JavaScript Engine component
- CVE-2026-4700Mitigation bypass in the Networking: HTTP component
- CVE-2026-4699Incorrect boundary conditions in the Layout: Text and Fonts component
- CVE-2026-4698JIT miscompilation in the JavaScript Engine: JIT component
- CVE-2026-4697Incorrect boundary conditions in the Audio/Video: Web Codecs component
- CVE-2026-4696Use-after-free in the Layout: Text and Fonts component
- CVE-2026-4695Incorrect boundary conditions in the Audio/Video: Web Codecs component
- CVE-2026-4694Incorrect boundary conditions, integer overflow in the Graphics component
- CVE-2026-4693Incorrect boundary conditions in the Audio/Video: Playback component
- CVE-2026-4692Sandbox escape in the Responsive Design Mode component
- CVE-2026-4691Use-after-free in the CSS Parsing and Computation component
- CVE-2026-4690Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component
- CVE-2026-4689Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component
- CVE-2026-4688Sandbox escape due to use-after-free in the Disability Access APIs component
- CVE-2026-4687Sandbox escape due to incorrect boundary conditions in the Telemetry component
- CVE-2026-4686Incorrect boundary conditions in the Graphics: Canvas2D component
- CVE-2026-4685Incorrect boundary conditions in the Graphics: Canvas2D component
- CVE-2026-4684Race condition, use-after-free in the Graphics: WebRender component
- CVE-2026-3847Memory safety bugs fixed in Firefox 148.0.2
- CVE-2026-3846Same-origin policy bypass in the CSS Parsing and Computation component
- CVE-2026-3845Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android
- CVE-2026-2919Attacker-controlled content shown under spoofed domains in Focus for iOS via stalled navigation and iframe redirect
- CVE-2026-2807Memory safety bugs fixed in Firefox 148 and Thunderbird 148
- CVE-2026-2806Uninitialized memory in the Graphics: Text component
- CVE-2026-2805Invalid pointer in the DOM: Core & HTML component
- CVE-2026-2804Use-after-free in the JavaScript: WebAssembly component