← Back

Mozilla

mozilla

3,619 CVEs • 44 products

Products (44)

Click to collapse
Toggle
Firefox
firefox
3,181 CVEs
Thunderbird
thunderbird
1,773 CVEs
Seamonkey
seamonkey
704 CVEs
Firefox Esr
firefox_esr
488 CVEs
Thunderbird Esr
thunderbird_esr
228 CVEs
Bugzilla
bugzilla
145 CVEs
Mozilla
mozilla
108 CVEs
Network Security Services
network_security_services
50 CVEs
Mozilla Suite
mozilla_suite
27 CVEs
Firefox Mobile
firefox_mobile
23 CVEs
Firefox Focus
firefox_focus
20 CVEs
Focus
focus
16 CVEs
Firefox Os
firefox_os
14 CVEs
Nss
nss
6 CVEs
Bleach
bleach
5 CVEs
Bonsai
bonsai
4 CVEs
Camino
camino
4 CVEs
Vpn
vpn
4 CVEs
Netscape Portable Runtime
netscape_portable_runtime
3 CVEs
Convict
convict
3 CVEs
Nunjucks
nunjucks
2 CVEs
Mozjpeg
mozjpeg
2 CVEs
Webthings Gateway
webthings_gateway
2 CVEs
Pollbot
pollbot
2 CVEs
Geckodriver
geckodriver
2 CVEs
Gecko
gecko
1 CVE
Durian Web Application Server
durian_web_application_server
1 CVE
Geckb
geckb
1 CVE
Libxul
libxul
1 CVE
Zamboni
zamboni
1 CVE
Firefoxos
firefoxos
1 CVE
Persona
persona
1 CVE
Hubs Cloud Reticulum
hubs_cloud_reticulum
1 CVE
Hubs Cloud
hubs_cloud
1 CVE
Mozilla Vpn
mozilla_vpn
1 CVE
Nss Esr
nss_esr
1 CVE
Hawk
hawk
1 CVE
Common Voice
common_voice
1 CVE
Sccache
sccache
1 CVE
Neqo
neqo
1 CVE
Rhino
rhino
1 CVE
0din Scanner
0din_scanner
1 CVE
Thin Vec
thin-vec
1 CVE
Klar
klar
1 CVE

CVEs (3,619)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-8973
1Mozilla
2Firefox
Thunderbird
Jul 23, 2026
May 19, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory safety bugs present in Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability...Show more
Memory safety bugs present in Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 151 and Thunderbird 151.Show less
CVE-2026-8972
1Mozilla
2Firefox
Thunderbird
Jul 23, 2026
May 19, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Privilege escalation in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
CVE-2026-8971
1Mozilla
2Firefox
Thunderbird
Jul 23, 2026
May 19, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
CVE-2026-8970
1Mozilla
2Firefox
Thunderbird
Jul 23, 2026
May 19, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Privilege escalation in the Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8969
1Mozilla
2Firefox
Thunderbird
Jul 23, 2026
May 19, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
CVE-2026-8968
1Mozilla
2Firefox
Thunderbird
Jul 23, 2026
May 19, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8967
1Mozilla
2Firefox
Thunderbird
Jul 23, 2026
May 19, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
CVE-2026-8966
1Mozilla
2Firefox
Thunderbird
Jul 23, 2026
May 19, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Information disclosure in the IP Protection component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
CVE-2026-8965
1Mozilla
2Firefox
Thunderbird
Jul 23, 2026
May 19, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
CVE-2026-8964
1Mozilla
2Firefox
Thunderbird
Jul 23, 2026
May 19, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Spoofing issue in the Popup Blocker component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
CVE-2026-8963
1Mozilla
2Firefox
Thunderbird
Jul 23, 2026
May 19, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Spoofing issue in the Web Speech component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
CVE-2026-8962
1Mozilla
2Firefox
Thunderbird
Jul 23, 2026
May 19, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8961
1Mozilla
2Firefox
Thunderbird
Jul 23, 2026
May 19, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Spoofing issue in the Form Autofill component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8960
1Mozilla
2Firefox
Thunderbird
Jun 17, 2026
May 19, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Spoofing issue in WebExtensions. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
CVE-2026-8959
1Mozilla
2Firefox
Thunderbird
Jun 17, 2026
May 19, 2026
N/A· v4
9.6 CRITICAL· v3
N/A· v2
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8958
1Mozilla
2Firefox
Thunderbird
Jun 17, 2026
May 19, 2026
N/A· v4
8.6 HIGH· v3
N/A· v2
Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8957
1Mozilla
2Firefox
Thunderbird
Jun 17, 2026
May 19, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8956
1Mozilla
2Firefox
Thunderbird
Jun 17, 2026
May 19, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Integer overflow in the Networking: JAR component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8955
1Mozilla
2Firefox
Thunderbird
Jun 17, 2026
May 19, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8954
1Mozilla
2Firefox
Thunderbird
Jun 17, 2026
May 19, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Incorrect boundary conditions, integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.