目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1359 CNY

100%
コーヒーを一杯おごる

Mozilla 厂商漏洞列表 / CVE 中文分析 2453

Mozilla 厂商相关 2453 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Mozilla 致力于开发开源互联网工具，核心产品 Firefox 浏览器及 Thunderbird 邮件客户端广泛用于全球用户。其历史漏洞多集中于内存安全缺陷，如缓冲区溢出导致的远程代码执行（RCE），以及跨站脚本（XSS）和权限提升问题。值得关注的是，Mozilla 积极推行零信任架构与增强型隐私保护特性，并定期发布安全更新以修复高危风险，持续维护开源生态的安全性与透明度。

上位製品 Mozilla: Firefox Thunderbird Firefox ESR Firefox for iOS Firefox for Android Focus for iOS Thunderbird ESR nss WebThings Gateway Mozilla Bleach Hubs Cloud Mozilla VPN rhino neqo Mozilla VPN 2.28.0 thin-vec Focus Convict Nunjucks sccache Node-convict common-voice Mozilla VPN 2.16.1 hawk geckodriver PollBot Mozilla VPN iOS 1.0.7 Firefox for Bugzilla Network Security Services (NSS)
CVE ID タイトル CVSS 深刻度 公開日
CVE-2026-120572 Incorrect boundary conditions in the Layout: Block and Inline component — Firefox - - 2026-11-03
CVE-2026-118179 Request forgery via news: links — Thunderbird - - 2026-10-27
CVE-2026-118180 Matrix homeserver could redirect the chat session to a local file or network share — Thunderbird - - 2026-10-27
CVE-2026-118178 RSS feed could redirect its subscription to a local file or network share — Thunderbird - - 2026-10-27
CVE-2026-118177 Calendar discovery accepted local file and remote network share locations — Thunderbird - - 2026-10-27
CVE-2026-118176 Bypass of remote UNC path restriction in mailbox: URLs — Thunderbird - - 2026-10-27
CVE-2026-118175 Content of other messages could be included when replying to a crafted message — Thunderbird - - 2026-10-27
CVE-2026-118174 Displaying a message could load an attacker-chosen URL through an OpenPGP key attachment — Thunderbird - - 2026-10-27
CVE-2026-118026 Invalid pointer in the JavaScript: GC component — Firefox - - 2026-10-27
CVE-2026-118027 Frame poisoning in the Layout component — Firefox - - 2026-10-27
CVE-2026-118025 Other issue in the SVG component — Firefox - - 2026-10-27
CVE-2026-118023 Sandbox escape due to use-after-free in the Graphics: WebRender component — Firefox - - 2026-10-27
CVE-2026-118024 Use-after-free in the Graphics: Text component — Firefox - - 2026-10-27
CVE-2026-118022 Sandbox escape due to use-after-free in the Disability Access APIs component — Firefox - - 2026-10-27
CVE-2026-118020 Use-after-free in the Layout component — Firefox - - 2026-10-27
CVE-2026-118021 Sandbox escape due to use-after-free in the XPCOM component — Firefox - - 2026-10-27
CVE-2026-118017 Use-after-free in the SVG component — Firefox - - 2026-10-27
CVE-2026-118018 Spoofing issue in the Downloads component in Firefox for Android — Firefox - - 2026-10-27
CVE-2026-118019 Race condition, use-after-free in the DOM: File component — Firefox - - 2026-10-27
CVE-2026-118016 Use-after-free in the DOM: Core & HTML component — Firefox - - 2026-10-27
CVE-2026-118015 Use-after-free in the DOM: Core & HTML component — Firefox - - 2026-10-27
CVE-2026-118012 Use-after-free in the DOM: Animation component — Firefox - - 2026-10-27
CVE-2026-118013 Use-after-free in the Layout: Images, Video, and HTML Frames component — Firefox - - 2026-10-27
CVE-2026-118014 Use-after-free in the JavaScript Engine: JIT component — Firefox - - 2026-10-27
CVE-2026-118010 Use-after-free in the Disability Access APIs component — Firefox - - 2026-10-27
CVE-2026-118011 Frame poisoning in the CSS Parsing and Computation component — Firefox - - 2026-10-27
CVE-2026-118009 Integer overflow, use-after-free in the Graphics: Text component — Firefox - - 2026-10-27
CVE-2026-118008 Privilege escalation in the DOM: Navigation component — Firefox - - 2026-10-27
CVE-2026-118007 Use-after-free in the JavaScript: GC component — Firefox - - 2026-10-27
CVE-2026-118006 Privilege escalation due to use-after-free in the WebRTC: Signaling component — Firefox - - 2026-10-27

本页汇总了 Mozilla 厂商截至目前公开的全部 2453 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。