Mozilla vulnerabilities
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-117962Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component
- CVE-2026-117961Incorrect boundary conditions in the Layout: Text and Fonts component
- CVE-2026-117960Spoofing issue in the DOM: Core & HTML component
- CVE-2026-117959Site isolation issue in the DOM: Service Workers component
- CVE-2026-117958Site isolation issue in the Networking: HTTP component
- CVE-2026-117957Cryptographic issue in the WebRTC: Networking component
- CVE-2026-117956Invalid pointer in the Nimbus Desktop Client component
- CVE-2026-117955JIT miscompilation in the JavaScript: WebAssembly component
- CVE-2026-117954Use-after-free in the Layout: Positioned component
- CVE-2026-117953Use-after-free in the DOM: Core & HTML component
- CVE-2026-117952Uninitialized memory in the Networking component
- CVE-2026-117951Use-after-free in the DOM: Core & HTML component
- CVE-2026-117950Incorrect boundary conditions in the DOM: Core & HTML component
- CVE-2026-117949Use-after-free in the DOM: Core & HTML component
- CVE-2026-117948Use-after-free in the SVG component
- CVE-2026-117947Use-after-free in the XML component
- CVE-2026-117946Incorrect boundary conditions in the JavaScript Engine component
- CVE-2026-117945Incorrect boundary conditions in the XML component
- CVE-2026-117944Use-after-free in the Layout component
- CVE-2026-117943Use-after-free in the DOM: Core & HTML component
- CVE-2026-117942Incorrect boundary conditions in the JavaScript Engine: JIT component
- CVE-2026-117941Use-after-free in the DOM: CSS Object Model component
- CVE-2026-117940Use-after-free in the DOM: Core & HTML component
- CVE-2026-117939Use-after-free in the XML component
- CVE-2026-117938Use-after-free in the Layout component
- CVE-2026-117937Invalid pointer in the JavaScript Engine component
- CVE-2026-117936Use-after-free in the DOM: Core & HTML component
- CVE-2026-117935Use-after-free in the DOM: Bindings (WebIDL) component
- CVE-2026-117934Use-after-free in the Layout component
- CVE-2026-117933Frame poisoning in the CSS Parsing and Computation component