Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Mozilla — Vulnerabilities & Security Advisories 2266

Browse all 2266 CVE security advisories affecting Mozilla. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Mozilla operates as a non-profit organization primarily known for developing the Firefox web browser and maintaining the Gecko rendering engine. Its software portfolio serves millions of users globally, focusing on open-source web technologies and privacy-centric browsing solutions. Historically, the codebase has been susceptible to a wide array of vulnerabilities, including remote code execution, cross-site scripting, and memory corruption issues such as buffer overflows. These flaws often stem from complex JavaScript engines and network stack implementations. While Mozilla maintains a robust security response team and regularly issues patches, the sheer volume of recorded Common Vulnerabilities and Exposures highlights the challenges inherent in maintaining large-scale, cross-platform applications. The organization continues to prioritize security audits and community-driven bug bounty programs to mitigate risks associated with its extensive feature set and widespread adoption.

CVE ID Title CVSS Severity Published
CVE-2026-74947 Privilege escalation due to invalid pointer in the Graphics component — Firefox - - 2026-08-18
CVE-2026-75874 Sandbox escape in the Remote Settings Client component — Firefox - - 2026-08-18
CVE-2026-74983 Mitigation bypass in the Data Loss Prevention component — Firefox - - 2026-08-18
CVE-2026-74990 Internally found bugs fixed in Thunderbird ESR 140.14, Thunderbird ESR 153.1 and Thunderbird 154 — Firefox - - 2026-08-18
CVE-2026-74987 Internally found bugs fixed in Thunderbird ESR 140.14, Thunderbird ESR 153.1 and Thunderbird 154 — Firefox - - 2026-08-18
CVE-2026-74972 Information disclosure in the DOM: Push Subscriptions component — Firefox - - 2026-08-18
CVE-2026-74974 Same-origin policy bypass in the Graphics: ImageLib component — Firefox - - 2026-08-18
CVE-2026-74973 Race condition, use-after-free in the Graphics component — Firefox - - 2026-08-18
CVE-2026-74976 JIT miscompilation in the JavaScript Engine: JIT component — Firefox - - 2026-08-18
CVE-2026-74967 Same-origin policy bypass in the Audio/Video: Playback component — Firefox - - 2026-08-18
CVE-2026-74965 Privilege escalation in the Shell Integration component — Firefox - - 2026-08-18
CVE-2026-74969 Use-after-free in the Layout: Text and Fonts component — Firefox - - 2026-08-18
CVE-2026-74971 Information disclosure in the DOM: UI Events & Focus Handling component — Firefox - - 2026-08-18
CVE-2026-74964 Integer overflow in the Graphics component — Firefox - - 2026-08-18
CVE-2026-74962 Site isolation issue in the Networking: Cookies component — Firefox - - 2026-08-18
CVE-2026-74963 Same-origin policy bypass in the Networking: Cookies component — Firefox - - 2026-08-18
CVE-2026-74960 Site isolation issue in the WebExtensions component — Firefox - - 2026-08-18
CVE-2026-74949 Privilege escalation due to use-after-free in the Graphics: Canvas2D component — Firefox - - 2026-08-18
CVE-2026-74957 Mitigation bypass in the Safe Browsing component — Firefox - - 2026-08-18
CVE-2026-74953 Privilege escalation in the Networking: Cookies component — Firefox - - 2026-08-18
CVE-2026-74959 Mitigation bypass in the Storage: Cache API component — Firefox - - 2026-08-18
CVE-2026-74948 Information disclosure in the Graphics component — Firefox - - 2026-08-18
CVE-2026-74944 Use-after-free in the DOM: Core & HTML component — Firefox - - 2026-08-18
CVE-2026-74946 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component — Firefox - - 2026-08-18
CVE-2026-74945 Information disclosure in the Graphics: Text component — Firefox - - 2026-08-18
CVE-2026-74941 Privilege escalation in the Graphics: CanvasWebGL component — Firefox - - 2026-08-18
CVE-2026-74942 Privilege escalation in the Remote Settings Client component — Firefox - - 2026-08-18
CVE-2026-74943 Use-after-free in the Graphics: ImageLib component — Firefox - - 2026-08-18
CVE-2026-74939 Privilege escalation in the DOM: Navigation component — Firefox - - 2026-08-18
CVE-2026-74936 Use-after-free in the JavaScript: WebAssembly component — Firefox - - 2026-08-18

This page lists every published CVE security advisory associated with Mozilla. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.