Mozilla vulnerabilities
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-117992Information disclosure in the CSS Parsing and Computation component
- CVE-2026-117991Incorrect boundary conditions in the Layout: Text and Fonts component
- CVE-2026-117990Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component
- CVE-2026-117989Use-after-free in the Graphics component
- CVE-2026-117988Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component
- CVE-2026-117987Use-after-free in the Graphics component
- CVE-2026-117986Use-after-free in the Graphics component
- CVE-2026-117985Sandbox escape due to use-after-free in the Graphics component
- CVE-2026-117984Incorrect boundary conditions in the Layout: Scrolling and Overflow component
- CVE-2026-117983Use-after-free in the Graphics component
- CVE-2026-117982Invalid pointer in the JavaScript Engine: JIT component
- CVE-2026-117981Privilege escalation in the Toolkit component
- CVE-2026-117980Use-after-free in the Graphics component
- CVE-2026-117979Incorrect boundary conditions in the Graphics: WebRender component
- CVE-2026-117978Incorrect boundary conditions in the Graphics component
- CVE-2026-117977Other issue in the Console component
- CVE-2026-117976Site isolation issue in the DOM: Navigation component
- CVE-2026-117975Sandbox escape due to invalid pointer in the Graphics: WebRender component
- CVE-2026-117974Use-after-free in the XML component
- CVE-2026-117973Use-after-free in the Networking: DNS component
- CVE-2026-117972Use-after-free in the Graphics component
- CVE-2026-117971Sandbox escape due to use-after-free in the Print Preview component
- CVE-2026-117970Race condition in the Disability Access APIs component
- CVE-2026-117969Invalid pointer in the JavaScript Engine: JIT component
- CVE-2026-117968Use-after-free in the DOM: Core & HTML component
- CVE-2026-117967Mitigation bypass in the DOM: Security component
- CVE-2026-117966Site isolation issue in the Networking: HTTP component
- CVE-2026-117965Same-origin policy bypass in the Address Bar component
- CVE-2026-117964Use-after-free in the Panning and Zooming component
- CVE-2026-117963Incorrect boundary conditions in the DOM: Service Workers component