Mozilla vulnerabilities
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-118023Sandbox escape due to use-after-free in the Graphics: WebRender component
- CVE-2026-118022Sandbox escape due to use-after-free in the Disability Access APIs component
- CVE-2026-118021Sandbox escape due to use-after-free in the XPCOM component
- CVE-2026-118020Use-after-free in the Layout component
- CVE-2026-118019Race condition, use-after-free in the DOM: File component
- CVE-2026-118018Spoofing issue in the Downloads component in Firefox for Android
- CVE-2026-118017Use-after-free in the SVG component
- CVE-2026-118016Use-after-free in the DOM: Core & HTML component
- CVE-2026-118015Use-after-free in the DOM: Core & HTML component
- CVE-2026-118014Use-after-free in the JavaScript Engine: JIT component
- CVE-2026-118013Use-after-free in the Layout: Images, Video, and HTML Frames component
- CVE-2026-118012Use-after-free in the DOM: Animation component
- CVE-2026-118011Frame poisoning in the CSS Parsing and Computation component
- CVE-2026-118010Use-after-free in the Disability Access APIs component
- CVE-2026-118009Integer overflow, use-after-free in the Graphics: Text component
- CVE-2026-118008Privilege escalation in the DOM: Navigation component
- CVE-2026-118007Use-after-free in the JavaScript: GC component
- CVE-2026-118006Privilege escalation due to use-after-free in the WebRTC: Signaling component
- CVE-2026-118005Use-after-free in the WebRTC: Signaling component
- CVE-2026-118004Incorrect boundary conditions in the CSS Transitions and Animations component
- CVE-2026-118003Information disclosure in the Networking: DNS component
- CVE-2026-118002Information disclosure due to race condition in the Networking component
- CVE-2026-118000Information disclosure in the Networking: HTTP component
- CVE-2026-117999Race condition in the IPC component
- CVE-2026-117998Mitigation bypass in the DOM: Push Subscriptions component
- CVE-2026-117997Sandbox escape due to use-after-free in the Widget component
- CVE-2026-117996Incorrect boundary conditions in the WebRTC component
- CVE-2026-117995Privilege escalation in the DOM: UI Events & Focus Handling component
- CVE-2026-117994Use-after-free in the JavaScript: GC component
- CVE-2026-117993Integer overflow in the Graphics: Text component