Mozilla vulnerabilities
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-2774Integer overflow in the Audio/Video component
- CVE-2026-2773Incorrect boundary conditions in the Web Audio component
- CVE-2026-2772Use-after-free in the Audio/Video: Playback component
- CVE-2026-2771Undefined behavior in the DOM: Core & HTML component
- CVE-2026-2770Use-after-free in the DOM: Bindings (WebIDL) component
- CVE-2026-2769Use-after-free in the Storage: IndexedDB component
- CVE-2026-2768Sandbox escape in the Storage: IndexedDB component
- CVE-2026-2767Use-after-free in the JavaScript: WebAssembly component
- CVE-2026-2766Use-after-free in the JavaScript Engine: JIT component
- CVE-2026-2765Use-after-free in the JavaScript Engine component
- CVE-2026-2764JIT miscompilation, use-after-free in the JavaScript Engine: JIT component
- CVE-2026-2763Use-after-free in the JavaScript Engine component
- CVE-2026-2762Integer overflow in the JavaScript: Standard Library component
- CVE-2026-2761Sandbox escape in the Graphics: WebRender component
- CVE-2026-2760Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component
- CVE-2026-2759Incorrect boundary conditions in the Graphics: ImageLib component
- CVE-2026-2758Use-after-free in the JavaScript: GC component
- CVE-2026-2757Incorrect boundary conditions in the WebRTC: Audio/Video component
- CVE-2026-2032Interrupted page loads in new tabs could allow website spoofing under trusted domains in Firefox iOS
- CVE-2026-2447Heap buffer overflow in libvpx
- CVE-2026-0818CSS-based exfiltration of the content from partially encrypted emails when allowing remote content
- CVE-2026-24869Use-after-free in the Layout: Scrolling and Overflow component
- CVE-2026-24868Mitigation bypass in the Privacy: Anti-Tracking component
- CVE-2026-0892Memory safety bugs fixed in Firefox 147 and Thunderbird 147
- CVE-2026-0891Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147
- CVE-2026-0890Spoofing issue in the DOM: Copy & Paste and Drag & Drop component
- CVE-2026-0889Denial-of-service in the DOM: Service Workers component
- CVE-2026-0888Information disclosure in the XML component
- CVE-2026-0887Clickjacking issue, information disclosure in the PDF Viewer component
- CVE-2026-0886Incorrect boundary conditions in the Graphics component