Mozilla vulnerabilities
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-117932Use-after-free in the DOM: Core & HTML component
- CVE-2026-117931Use-after-free in the DOM: Events component
- CVE-2026-117930Use-after-free in the DOM: Bindings (WebIDL) component
- CVE-2026-117929Use-after-free in the DOM: Core & HTML component
- CVE-2026-117928Same-origin policy bypass in the CSS Parsing and Computation component
- CVE-2026-117927Use-after-free in the SVG component
- CVE-2026-117926Incorrect boundary conditions in the SVG component
- CVE-2026-117925Use-after-free in the DOM: Core & HTML component
- CVE-2026-117924Use-after-free in the XSLT component
- CVE-2026-117923Use-after-free in the Audio/Video component
- CVE-2026-117922Use-after-free in the Networking: WebSockets component
- CVE-2026-117921Use-after-free in the CSS Parsing and Computation component
- CVE-2026-117920Use-after-free in the DOM: HTML Parser component
- CVE-2026-117919Use-after-free in the DOM: Core & HTML component
- CVE-2026-117918Use-after-free in the Graphics: Canvas2D component
- CVE-2026-117917Invalid pointer in the Graphics: WebRender component
- CVE-2026-117916Use-after-free in the XSLT component
- CVE-2026-117915Incorrect boundary conditions in the Layout: Block and Inline component
- CVE-2026-117914Use-after-free in the SVG component
- CVE-2026-117913Use-after-free in the SVG component
- CVE-2026-117912Same-origin policy bypass in the CSS Parsing and Computation component
- CVE-2026-117911Use-after-free in the Audio/Video: Playback component
- CVE-2026-117910Invalid pointer in the JavaScript Engine component
- CVE-2026-117909Use-after-free in the JavaScript: GC component
- CVE-2026-117908Use-after-free in the Graphics: ImageLib component
- CVE-2026-117907Use-after-free in the Networking component
- CVE-2026-117906Use-after-free in the CSS Parsing and Computation component
- CVE-2026-117905Use-after-free in the Audio/Video: Playback component
- CVE-2026-117904Use-after-free in the JavaScript: GC component
- CVE-2026-117903Use-after-free in the Audio/Video component