← Back

Mozilla

mozilla

3,934 CVEs • 44 products

Products (44)

Click to collapse
Toggle
Firefox
firefox
3,473 CVEs
Thunderbird
thunderbird
2,068 CVEs
Seamonkey
seamonkey
704 CVEs
Firefox Esr
firefox_esr
487 CVEs
Thunderbird Esr
thunderbird_esr
228 CVEs
Bugzilla
bugzilla
145 CVEs
Mozilla
mozilla
108 CVEs
Firefox Mobile
firefox_mobile
87 CVEs
Network Security Services
network_security_services
50 CVEs
Mozilla Suite
mozilla_suite
27 CVEs
Firefox Focus
firefox_focus
20 CVEs
Focus
focus
16 CVEs
Firefox Os
firefox_os
14 CVEs
Nss
nss
6 CVEs
Bleach
bleach
5 CVEs
Bonsai
bonsai
4 CVEs
Camino
camino
4 CVEs
Vpn
vpn
4 CVEs
Netscape Portable Runtime
netscape_portable_runtime
3 CVEs
Convict
convict
3 CVEs
Nunjucks
nunjucks
2 CVEs
Mozjpeg
mozjpeg
2 CVEs
Webthings Gateway
webthings_gateway
2 CVEs
Pollbot
pollbot
2 CVEs
Geckodriver
geckodriver
2 CVEs
Gecko
gecko
1 CVE
Durian Web Application Server
durian_web_application_server
1 CVE
Geckb
geckb
1 CVE
Libxul
libxul
1 CVE
Zamboni
zamboni
1 CVE
Firefoxos
firefoxos
1 CVE
Persona
persona
1 CVE
Hubs Cloud Reticulum
hubs_cloud_reticulum
1 CVE
Hubs Cloud
hubs_cloud
1 CVE
Mozilla Vpn
mozilla_vpn
1 CVE
Nss Esr
nss_esr
1 CVE
Hawk
hawk
1 CVE
Common Voice
common_voice
1 CVE
Sccache
sccache
1 CVE
Neqo
neqo
1 CVE
Rhino
rhino
1 CVE
0din Scanner
0din_scanner
1 CVE
Thin Vec
thin-vec
1 CVE
Klar
klar
1 CVE

CVEs (3,934)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-100774
1Mozilla
2Firefox
Thunderbird
Oct 6, 2026
Sep 29, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100773
1Mozilla
2Firefox
Thunderbird
Oct 6, 2026
Sep 29, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100772
1Mozilla
2Firefox
Thunderbird
Oct 6, 2026
Sep 29, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.
CVE-2026-100771
1Mozilla
2Firefox
Thunderbird
Oct 6, 2026
Sep 29, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Undefined behavior in the DOM: Streams component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100770
1Mozilla
2Firefox
Thunderbird
Oct 6, 2026
Sep 29, 2026
N/A· v4
9.6 CRITICAL· v3
N/A· v2
Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, an...Show more
Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.Show less
CVE-2026-100769
1Mozilla
2Firefox
Thunderbird
Oct 6, 2026
Sep 29, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.
CVE-2026-100768
1Mozilla
2Firefox
Thunderbird
Oct 6, 2026
Sep 29, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
CVE-2026-100767
1Mozilla
2Firefox
Thunderbird
Oct 6, 2026
Sep 29, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use-after-free in the Networking: Cache component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100766
1Mozilla
2Firefox
Thunderbird
Oct 13, 2026
Sep 29, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Information disclosure in the Networking: JAR component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100765
1Mozilla
2Firefox
Thunderbird
Oct 13, 2026
Sep 29, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100764
1Mozilla
2Firefox
Thunderbird
Oct 13, 2026
Sep 29, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
CVE-2026-100763
1Mozilla
2Firefox
Thunderbird
Oct 13, 2026
Sep 29, 2026
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
CVE-2026-100762
1Mozilla
2Firefox
Thunderbird
Oct 13, 2026
Sep 29, 2026
N/A· v4
9.6 CRITICAL· v3
N/A· v2
Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, an...Show more
Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.Show less
CVE-2026-100761
1Mozilla
2Firefox
Thunderbird
Oct 13, 2026
Sep 29, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
CVE-2026-100760
1Mozilla
2Firefox
Thunderbird
Oct 13, 2026
Sep 29, 2026
N/A· v4
9.6 CRITICAL· v3
N/A· v2
Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100759
1Mozilla
2Firefox
Thunderbird
Oct 13, 2026
Sep 29, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Uninitialized memory in the Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 14...Show more
Uninitialized memory in the Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.Show less
CVE-2026-100758
1Mozilla
2Firefox
Thunderbird
Oct 13, 2026
Sep 29, 2026
N/A· v4
9.6 CRITICAL· v3
N/A· v2
Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100757
1Mozilla
2Firefox
Thunderbird
Oct 13, 2026
Sep 29, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use-after-free in the Widget component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100756
1Mozilla
2Firefox
Thunderbird
Oct 6, 2026
Sep 29, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefo...Show more
Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.Show less
CVE-2026-92240
1Mozilla
1Thunderbird
Sep 24, 2026
Sep 15, 2026
N/A· v4
9.1 CRITICAL· v3
N/A· v2
A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged '* ID' response, crashing Thunderbird. The affected parsing path is reachable before authenticat...Show more
A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged '* ID' response, crashing Thunderbird. The affected parsing path is reachable before authentication. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.Show less