← Back

Mozilla

mozilla

3,934 CVEs • 44 products

Products (44)

Click to collapse
Toggle
Firefox
firefox
3,473 CVEs
Thunderbird
thunderbird
2,068 CVEs
Seamonkey
seamonkey
704 CVEs
Firefox Esr
firefox_esr
487 CVEs
Thunderbird Esr
thunderbird_esr
228 CVEs
Bugzilla
bugzilla
145 CVEs
Mozilla
mozilla
108 CVEs
Firefox Mobile
firefox_mobile
87 CVEs
Network Security Services
network_security_services
50 CVEs
Mozilla Suite
mozilla_suite
27 CVEs
Firefox Focus
firefox_focus
20 CVEs
Focus
focus
16 CVEs
Firefox Os
firefox_os
14 CVEs
Nss
nss
6 CVEs
Bleach
bleach
5 CVEs
Bonsai
bonsai
4 CVEs
Camino
camino
4 CVEs
Vpn
vpn
4 CVEs
Netscape Portable Runtime
netscape_portable_runtime
3 CVEs
Convict
convict
3 CVEs
Nunjucks
nunjucks
2 CVEs
Mozjpeg
mozjpeg
2 CVEs
Webthings Gateway
webthings_gateway
2 CVEs
Pollbot
pollbot
2 CVEs
Geckodriver
geckodriver
2 CVEs
Gecko
gecko
1 CVE
Durian Web Application Server
durian_web_application_server
1 CVE
Geckb
geckb
1 CVE
Libxul
libxul
1 CVE
Zamboni
zamboni
1 CVE
Firefoxos
firefoxos
1 CVE
Persona
persona
1 CVE
Hubs Cloud Reticulum
hubs_cloud_reticulum
1 CVE
Hubs Cloud
hubs_cloud
1 CVE
Mozilla Vpn
mozilla_vpn
1 CVE
Nss Esr
nss_esr
1 CVE
Hawk
hawk
1 CVE
Common Voice
common_voice
1 CVE
Sccache
sccache
1 CVE
Neqo
neqo
1 CVE
Rhino
rhino
1 CVE
0din Scanner
0din_scanner
1 CVE
Thin Vec
thin-vec
1 CVE
Klar
klar
1 CVE

CVEs (3,934)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-92239
1Mozilla
1Thunderbird
Sep 24, 2026
Sep 15, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92238
1Mozilla
1Thunderbird
Sep 24, 2026
Sep 15, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92079
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Mitigation bypass in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92078
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Denial-of-service in the Security component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92077
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Denial-of-service in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92076
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92075
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92074
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Mitigation bypass in the Popup Blocker component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92073
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92072
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
8.0 HIGH· v3
N/A· v2
Incorrect boundary conditions in the Safe Browsing component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92071
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
9.6 CRITICAL· v3
N/A· v2
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92070
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Information disclosure in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92069
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Spoofing issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92068
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Site isolation issue in the Reader Mode component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92067
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92066
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92065
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92064
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92063
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Denial-of-service in the Audio/Video component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92062
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Privilege escalation in the Session Restore component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.