Mozilla vulnerabilities
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-2803Information disclosure, mitigation bypass in the Settings UI component
- CVE-2026-2802Race condition in the JavaScript: GC component
- CVE-2026-2801Incorrect boundary conditions in the JavaScript: WebAssembly component
- CVE-2026-2800Spoofing issue in the WebAuthn component in Firefox for Android
- CVE-2026-2799Use-after-free in the DOM: Core & HTML component
- CVE-2026-2798Use-after-free in the DOM: Core & HTML component
- CVE-2026-2797Use-after-free in the JavaScript: GC component
- CVE-2026-2796JIT miscompilation in the JavaScript: WebAssembly component
- CVE-2026-2795Use-after-free in the JavaScript: GC component
- CVE-2026-2794Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android
- CVE-2026-2634Spoofed web content presented under trusted domains using scripted navigation on Firefox iOS
- CVE-2026-2793Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148
- CVE-2026-2792Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148
- CVE-2026-2791Mitigation bypass in the Networking: Cache component
- CVE-2026-2790Same-origin policy bypass in the Networking: JAR component
- CVE-2026-2789Use-after-free in the Graphics: ImageLib component
- CVE-2026-2788Incorrect boundary conditions in the Audio/Video: GMP component
- CVE-2026-2787Use-after-free in the DOM: Window and Location component
- CVE-2026-2786Use-after-free in the JavaScript Engine component
- CVE-2026-2785Invalid pointer in the JavaScript Engine component
- CVE-2026-2784Mitigation bypass in the DOM: Security component
- CVE-2026-2783Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component
- CVE-2026-2782Privilege escalation in the Netmonitor component
- CVE-2026-2781Integer overflow in the Libraries component in NSS
- CVE-2026-2780Privilege escalation in the Netmonitor component
- CVE-2026-2779Incorrect boundary conditions in the Networking: JAR component
- CVE-2026-2778Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component
- CVE-2026-2777Privilege escalation in the Messaging System component
- CVE-2026-2776Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software
- CVE-2026-2775Mitigation bypass in the DOM: HTML Parser component