← Back

Mozilla

mozilla

3,612 CVEs • 44 products

Products (44)

Click to collapse
Toggle
Firefox
firefox
3,177 CVEs
Thunderbird
thunderbird
1,771 CVEs
Seamonkey
seamonkey
704 CVEs
Firefox Esr
firefox_esr
488 CVEs
Thunderbird Esr
thunderbird_esr
228 CVEs
Bugzilla
bugzilla
145 CVEs
Mozilla
mozilla
108 CVEs
Network Security Services
network_security_services
50 CVEs
Mozilla Suite
mozilla_suite
27 CVEs
Firefox Mobile
firefox_mobile
22 CVEs
Firefox Focus
firefox_focus
20 CVEs
Focus
focus
16 CVEs
Firefox Os
firefox_os
14 CVEs
Nss
nss
6 CVEs
Bleach
bleach
5 CVEs
Bonsai
bonsai
4 CVEs
Camino
camino
4 CVEs
Vpn
vpn
4 CVEs
Netscape Portable Runtime
netscape_portable_runtime
3 CVEs
Convict
convict
3 CVEs
Nunjucks
nunjucks
2 CVEs
Mozjpeg
mozjpeg
2 CVEs
Webthings Gateway
webthings_gateway
2 CVEs
Pollbot
pollbot
2 CVEs
Geckodriver
geckodriver
2 CVEs
Gecko
gecko
1 CVE
Durian Web Application Server
durian_web_application_server
1 CVE
Geckb
geckb
1 CVE
Libxul
libxul
1 CVE
Zamboni
zamboni
1 CVE
Firefoxos
firefoxos
1 CVE
Persona
persona
1 CVE
Hubs Cloud Reticulum
hubs_cloud_reticulum
1 CVE
Hubs Cloud
hubs_cloud
1 CVE
Mozilla Vpn
mozilla_vpn
1 CVE
Nss Esr
nss_esr
1 CVE
Hawk
hawk
1 CVE
Common Voice
common_voice
1 CVE
Sccache
sccache
1 CVE
Neqo
neqo
1 CVE
Rhino
rhino
1 CVE
0din Scanner
0din_scanner
1 CVE
Thin Vec
thin-vec
1 CVE
Klar
klar
1 CVE

CVEs (3,612)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-2783
1Mozilla
2Firefox
Thunderbird
Jun 17, 2026
Feb 24, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2782
1Mozilla
2Firefox
Thunderbird
Jun 17, 2026
Feb 24, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2781
1Mozilla
2Firefox
Thunderbird
Jun 17, 2026
Feb 24, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, Thunderbird 140.8, and Firefox ESR 115.35.
CVE-2026-2780
1Mozilla
2Firefox
Thunderbird
Jun 17, 2026
Feb 24, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2779
1Mozilla
2Firefox
Thunderbird
Jun 17, 2026
Feb 24, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Incorrect boundary conditions in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2778
1Mozilla
2Firefox
Thunderbird
Jun 17, 2026
Feb 24, 2026
N/A· v4
10.0 CRITICAL· v3
N/A· v2
Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2777
1Mozilla
2Firefox
Thunderbird
Jun 17, 2026
Feb 24, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Privilege escalation in the Messaging System component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2776
1Mozilla
2Firefox
Thunderbird
Jun 17, 2026
Feb 24, 2026
N/A· v4
10.0 CRITICAL· v3
N/A· v2
Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 14...Show more
Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.Show less
CVE-2026-2775
1Mozilla
2Firefox
Thunderbird
Jun 17, 2026
Feb 24, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Mitigation bypass in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2774
1Mozilla
2Firefox
Thunderbird
Jun 17, 2026
Feb 24, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2773
1Mozilla
2Firefox
Thunderbird
Jun 17, 2026
Feb 24, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2772
1Mozilla
2Firefox
Thunderbird
Jun 17, 2026
Feb 24, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2771
1Mozilla
2Firefox
Thunderbird
Jun 17, 2026
Feb 24, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Undefined behavior in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2770
1Mozilla
2Firefox
Thunderbird
Jun 17, 2026
Feb 24, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2769
1Mozilla
2Firefox
Thunderbird
Jun 17, 2026
Feb 24, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2768
1Mozilla
2Firefox
Thunderbird
Jun 17, 2026
Feb 24, 2026
N/A· v4
10.0 CRITICAL· v3
N/A· v2
Sandbox escape in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2767
1Mozilla
2Firefox
Thunderbird
Jun 17, 2026
Feb 24, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2766
1Mozilla
2Firefox
Thunderbird
Jun 17, 2026
Feb 24, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2765
1Mozilla
2Firefox
Thunderbird
Jun 17, 2026
Feb 24, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2764
1Mozilla
2Firefox
Thunderbird
Jun 17, 2026
Feb 24, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.