Mozilla CVEs
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-0885Use-after-free in the JavaScript: GC component
- CVE-2026-0884Use-after-free in the JavaScript Engine component
- CVE-2026-0883Information disclosure in the Networking component
- CVE-2026-0882Use-after-free in the IPC component
- CVE-2026-0881Sandbox escape in the Messaging System component
- CVE-2026-0880Sandbox escape due to integer overflow in the Graphics component
- CVE-2026-0879Sandbox escape due to incorrect boundary conditions in the Graphics component
- CVE-2026-0878Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component
- CVE-2026-0877Mitigation bypass in the DOM: Security component
- CVE-2025-14861Memory safety bugs fixed in Firefox 146.0.1
- CVE-2025-14860Use-after-free in the Disability Access APIs component
- CVE-2025-14744Filename spoofing via Unicode Right-to-Left Override in Firefox for iOS
- CVE-2025-14333Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146
- CVE-2025-14332Memory safety bugs fixed in Firefox 146 and Thunderbird 146
- CVE-2025-14331Same-origin policy bypass in the Request Handling component
- CVE-2025-14330JIT miscompilation in the JavaScript Engine: JIT component
- CVE-2025-14329Privilege escalation in the Netmonitor component
- CVE-2025-14328Privilege escalation in the Netmonitor component
- CVE-2025-14327Spoofing issue in the Downloads Panel component
- CVE-2025-14326Use-after-free in the Audio/Video: GMP component
- CVE-2025-14325JIT miscompilation in the JavaScript Engine: JIT component
- CVE-2025-14324JIT miscompilation in the JavaScript Engine: JIT component
- CVE-2025-14323Privilege escalation in the DOM: Notifications component
- CVE-2025-14322Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component
- CVE-2025-14321Use-after-free in the WebRTC: Signaling component
- CVE-2025-66453Rhino vulnerable high CPU usage and potential DoS when passing specific numbers to toFixed() function
- CVE-2025-13027Memory safety bugs fixed in Firefox 145 and Thunderbird 145
- CVE-2025-13020Use-after-free in the WebRTC: Audio/Video component
- CVE-2025-13019Same-origin policy bypass in the DOM: Workers component
- CVE-2025-13018Mitigation bypass in the DOM: Security component