← Back

Mozilla

mozilla

3,720 CVEs • 44 products

Products (44)

Click to collapse
Toggle
Firefox
firefox
3,269 CVEs
Thunderbird
thunderbird
1,867 CVEs
Seamonkey
seamonkey
704 CVEs
Firefox Esr
firefox_esr
488 CVEs
Thunderbird Esr
thunderbird_esr
228 CVEs
Bugzilla
bugzilla
145 CVEs
Mozilla
mozilla
108 CVEs
Firefox Mobile
firefox_mobile
82 CVEs
Network Security Services
network_security_services
50 CVEs
Mozilla Suite
mozilla_suite
27 CVEs
Firefox Focus
firefox_focus
20 CVEs
Focus
focus
16 CVEs
Firefox Os
firefox_os
14 CVEs
Nss
nss
6 CVEs
Bleach
bleach
5 CVEs
Bonsai
bonsai
4 CVEs
Camino
camino
4 CVEs
Vpn
vpn
4 CVEs
Netscape Portable Runtime
netscape_portable_runtime
3 CVEs
Convict
convict
3 CVEs
Nunjucks
nunjucks
2 CVEs
Mozjpeg
mozjpeg
2 CVEs
Webthings Gateway
webthings_gateway
2 CVEs
Pollbot
pollbot
2 CVEs
Geckodriver
geckodriver
2 CVEs
Gecko
gecko
1 CVE
Durian Web Application Server
durian_web_application_server
1 CVE
Geckb
geckb
1 CVE
Libxul
libxul
1 CVE
Zamboni
zamboni
1 CVE
Firefoxos
firefoxos
1 CVE
Persona
persona
1 CVE
Hubs Cloud Reticulum
hubs_cloud_reticulum
1 CVE
Hubs Cloud
hubs_cloud
1 CVE
Mozilla Vpn
mozilla_vpn
1 CVE
Nss Esr
nss_esr
1 CVE
Hawk
hawk
1 CVE
Common Voice
common_voice
1 CVE
Sccache
sccache
1 CVE
Neqo
neqo
1 CVE
Rhino
rhino
1 CVE
0din Scanner
0din_scanner
1 CVE
Thin Vec
thin-vec
1 CVE
Klar
klar
1 CVE

CVEs (3,720)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-74966
1Mozilla
2Firefox
Thunderbird
Aug 25, 2026
Aug 18, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74965
1Mozilla
2Firefox
Thunderbird
Aug 21, 2026
Aug 18, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Privilege escalation in the Shell Integration component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74964
1Mozilla
2Firefox
Thunderbird
Aug 19, 2026
Aug 18, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74963
1Mozilla
2Firefox
Thunderbird
Aug 19, 2026
Aug 18, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74962
1Mozilla
2Firefox
Thunderbird
Aug 19, 2026
Aug 18, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Site isolation issue in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74961
1Mozilla
2Firefox
Thunderbird
Aug 20, 2026
Aug 18, 2026
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Side-channel in the Web Audio component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74960
1Mozilla
2Firefox
Thunderbird
Aug 24, 2026
Aug 18, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Site isolation issue in the WebExtensions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74959
1Mozilla
2Firefox
Thunderbird
Aug 24, 2026
Aug 18, 2026
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Mitigation bypass in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74958
1Mozilla
2Firefox
Thunderbird
Aug 19, 2026
Aug 18, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Information disclosure in the WebRTC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74957
1Mozilla
2Firefox
Thunderbird
Aug 24, 2026
Aug 18, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Mitigation bypass in the Safe Browsing component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74956
1Mozilla
2Firefox
Thunderbird
Aug 19, 2026
Aug 18, 2026
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Same-origin policy bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74955
1Mozilla
2Firefox
Thunderbird
Aug 21, 2026
Aug 18, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74954
1Mozilla
2Firefox
Thunderbird
Aug 19, 2026
Aug 18, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Information disclosure due to side-channel in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74953
1Mozilla
2Firefox
Thunderbird
Aug 21, 2026
Aug 18, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Privilege escalation in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74952
1Mozilla
2Firefox
Thunderbird
Sep 1, 2026
Aug 18, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 154, Thunderbird 154, Firefox ESR 153.2, and Thunderbird 153.2.
CVE-2026-74951
1Mozilla
1Firefox Mobile
Aug 19, 2026
Aug 18, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Clickjacking issue in Firefox for Android. This vulnerability was fixed in Firefox 154.
CVE-2026-74950
1Mozilla
2Firefox
Thunderbird
Aug 21, 2026
Aug 18, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Privilege escalation in the Downloads API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74949
1Mozilla
2Firefox
Thunderbird
Sep 1, 2026
Aug 18, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153...Show more
Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.Show less
CVE-2026-74948
1Mozilla
2Firefox
Thunderbird
Aug 24, 2026
Aug 18, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Information disclosure in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74947
1Mozilla
2Firefox
Thunderbird
Aug 21, 2026
Aug 18, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.