Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Mozilla — Vulnerabilities & Security Advisories 2266

Browse all 2266 CVE security advisories affecting Mozilla. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Mozilla operates as a non-profit organization primarily known for developing the Firefox web browser and maintaining the Gecko rendering engine. Its software portfolio serves millions of users globally, focusing on open-source web technologies and privacy-centric browsing solutions. Historically, the codebase has been susceptible to a wide array of vulnerabilities, including remote code execution, cross-site scripting, and memory corruption issues such as buffer overflows. These flaws often stem from complex JavaScript engines and network stack implementations. While Mozilla maintains a robust security response team and regularly issues patches, the sheer volume of recorded Common Vulnerabilities and Exposures highlights the challenges inherent in maintaining large-scale, cross-platform applications. The organization continues to prioritize security audits and community-driven bug bounty programs to mitigate risks associated with its extensive feature set and widespread adoption.

CVE ID Title CVSS Severity Published
CVE-2026-74935 Privilege escalation in the DOM: Networking component — Firefox - - 2026-08-18
CVE-2026-74936 Use-after-free in the JavaScript: WebAssembly component — Firefox - - 2026-08-18
CVE-2026-74934 Site isolation issue in the Graphics: CanvasWebGL component — Firefox - - 2026-08-18
CVE-2026-18809 Information disclosure in Firefox for Android and Firefox Focus for Android — Firefox - - 2026-08-04
CVE-2026-14899 Off-by-one out of bounds read in MIME header parser for forwarding — Thunderbird - - 2026-07-22
CVE-2026-16361 Memory safety bugs fixed in Thunderbird ESR 140.13 — Firefox - - 2026-07-21
CVE-2026-16360 Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153 — Firefox - - 2026-07-21
CVE-2026-16412 Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 — Firefox - - 2026-07-21
CVE-2026-16410 JIT miscompilation in the JavaScript Engine: JIT component — Firefox - - 2026-07-21
CVE-2026-16411 Memory safety bugs fixed in Firefox 153 — Firefox - - 2026-07-21
CVE-2026-16409 Invalid pointer in the Security: PSM component — Firefox - - 2026-07-21
CVE-2026-16408 Integer overflow in the Audio/Video: Playback component — Firefox - - 2026-07-21
CVE-2026-16407 Mitigation bypass in the DOM: Service Workers component — Firefox - - 2026-07-21
CVE-2026-16406 Mitigation bypass in the Networking component — Firefox - - 2026-07-21
CVE-2026-16404 Spoofing issue in Firefox for Android — Firefox - - 2026-07-21
CVE-2026-16405 Information disclosure in the Networking: WebSockets component — Firefox - - 2026-07-21
CVE-2026-16403 Spoofing issue in the Address Bar component — Firefox - - 2026-07-21
CVE-2026-16402 Integer overflow in the Graphics: ImageLib component — Firefox - - 2026-07-21
CVE-2026-16401 Privilege escalation in the Data Loss Prevention component — Firefox - - 2026-07-21
CVE-2026-16400 Information disclosure in the DOM: Security component — Firefox - - 2026-07-21
CVE-2026-16398 Site isolation issue in the Graphics component — Firefox - - 2026-07-21
CVE-2026-16399 Site isolation issue in the DOM: Navigation component — Firefox - - 2026-07-21
CVE-2026-16397 Clickjacking issue in the WebExtensions component in Firefox for Android — Firefox - - 2026-07-21
CVE-2026-16396 Privilege escalation in WebExtensions — Firefox - - 2026-07-21
CVE-2026-16395 Integer overflow in the Audio/Video component — Firefox - - 2026-07-21
CVE-2026-16394 Mitigation bypass in the DOM: Security component — Firefox - - 2026-07-21
CVE-2026-16359 Incorrect boundary conditions in the Audio/Video: GMP component — Firefox - - 2026-07-21
CVE-2026-16393 Incorrect boundary conditions in the Graphics: WebGPU component — Firefox - - 2026-07-21
CVE-2026-16392 JIT miscompilation in the JavaScript Engine: JIT component — Firefox - - 2026-07-21
CVE-2026-16391 Information disclosure in the Storage: IndexedDB component — Firefox - - 2026-07-21

This page lists every published CVE security advisory associated with Mozilla. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.