← Back

Mozilla

mozilla

3,720 CVEs • 44 products

Products (44)

Click to collapse
Toggle
Firefox
firefox
3,269 CVEs
Thunderbird
thunderbird
1,867 CVEs
Seamonkey
seamonkey
704 CVEs
Firefox Esr
firefox_esr
488 CVEs
Thunderbird Esr
thunderbird_esr
228 CVEs
Bugzilla
bugzilla
145 CVEs
Mozilla
mozilla
108 CVEs
Firefox Mobile
firefox_mobile
82 CVEs
Network Security Services
network_security_services
50 CVEs
Mozilla Suite
mozilla_suite
27 CVEs
Firefox Focus
firefox_focus
20 CVEs
Focus
focus
16 CVEs
Firefox Os
firefox_os
14 CVEs
Nss
nss
6 CVEs
Bleach
bleach
5 CVEs
Bonsai
bonsai
4 CVEs
Camino
camino
4 CVEs
Vpn
vpn
4 CVEs
Netscape Portable Runtime
netscape_portable_runtime
3 CVEs
Convict
convict
3 CVEs
Nunjucks
nunjucks
2 CVEs
Mozjpeg
mozjpeg
2 CVEs
Webthings Gateway
webthings_gateway
2 CVEs
Pollbot
pollbot
2 CVEs
Geckodriver
geckodriver
2 CVEs
Gecko
gecko
1 CVE
Durian Web Application Server
durian_web_application_server
1 CVE
Geckb
geckb
1 CVE
Libxul
libxul
1 CVE
Zamboni
zamboni
1 CVE
Firefoxos
firefoxos
1 CVE
Persona
persona
1 CVE
Hubs Cloud Reticulum
hubs_cloud_reticulum
1 CVE
Hubs Cloud
hubs_cloud
1 CVE
Mozilla Vpn
mozilla_vpn
1 CVE
Nss Esr
nss_esr
1 CVE
Hawk
hawk
1 CVE
Common Voice
common_voice
1 CVE
Sccache
sccache
1 CVE
Neqo
neqo
1 CVE
Rhino
rhino
1 CVE
0din Scanner
0din_scanner
1 CVE
Thin Vec
thin-vec
1 CVE
Klar
klar
1 CVE

CVEs (3,720)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-74986
1Mozilla
2Firefox
Thunderbird
Aug 25, 2026
Aug 18, 2026
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Site isolation issue in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74985
1Mozilla
2Firefox
Thunderbird
Aug 25, 2026
Aug 18, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74984
1Mozilla
2Firefox
Thunderbird
Aug 25, 2026
Aug 18, 2026
N/A· v4
6.8 MEDIUM· v3
N/A· v2
Race condition in the JavaScript Engine component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74983
1Mozilla
2Firefox
Thunderbird
Aug 19, 2026
Aug 18, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Mitigation bypass in the Data Loss Prevention component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74982
1Mozilla
2Firefox
Thunderbird
Aug 25, 2026
Aug 18, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Denial-of-service in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74981
1Mozilla
2Firefox
Thunderbird
Aug 25, 2026
Aug 18, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Site isolation issue in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74980
1Mozilla
1Firefox Mobile
Aug 25, 2026
Aug 18, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Clickjacking issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.
CVE-2026-74979
1Mozilla
2Firefox
Thunderbird
Aug 20, 2026
Aug 18, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74978
1Mozilla
2Firefox
Thunderbird
Aug 25, 2026
Aug 18, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Clickjacking issue in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74977
1Mozilla
2Firefox
Thunderbird
Aug 25, 2026
Aug 18, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74976
1Mozilla
2Firefox
Thunderbird
Aug 19, 2026
Aug 18, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74975
1Mozilla
1Firefox Mobile
Aug 25, 2026
Aug 18, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.
CVE-2026-74974
1Mozilla
2Firefox
Thunderbird
Aug 19, 2026
Aug 18, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Same-origin policy bypass in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird...Show more
Same-origin policy bypass in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.Show less
CVE-2026-74973
1Mozilla
2Firefox
Thunderbird
Aug 19, 2026
Aug 18, 2026
N/A· v4
4.2 MEDIUM· v3
N/A· v2
Race condition, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...Show more
Race condition, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.Show less
CVE-2026-74972
1Mozilla
2Firefox
Thunderbird
Aug 19, 2026
Aug 18, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Information disclosure in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74971
1Mozilla
2Firefox
Thunderbird
Aug 19, 2026
Aug 18, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Information disclosure in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74970
1Mozilla
2Firefox
Thunderbird
Aug 25, 2026
Aug 18, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74969
1Mozilla
2Firefox
Thunderbird
Aug 19, 2026
Aug 18, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74968
1Mozilla
2Firefox
Thunderbird
Aug 20, 2026
Aug 18, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74967
1Mozilla
2Firefox
Thunderbird
Aug 19, 2026
Aug 18, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Same-origin policy bypass in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.