Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Mozilla — Vulnerabilities & Security Advisories 2266

Browse all 2266 CVE security advisories affecting Mozilla. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Mozilla operates as a non-profit organization primarily known for developing the Firefox web browser and maintaining the Gecko rendering engine. Its software portfolio serves millions of users globally, focusing on open-source web technologies and privacy-centric browsing solutions. Historically, the codebase has been susceptible to a wide array of vulnerabilities, including remote code execution, cross-site scripting, and memory corruption issues such as buffer overflows. These flaws often stem from complex JavaScript engines and network stack implementations. While Mozilla maintains a robust security response team and regularly issues patches, the sheer volume of recorded Common Vulnerabilities and Exposures highlights the challenges inherent in maintaining large-scale, cross-platform applications. The organization continues to prioritize security audits and community-driven bug bounty programs to mitigate risks associated with its extensive feature set and widespread adoption.

CVE ID Title CVSS Severity Published
CVE-2026-16366 Privilege escalation in the DOM: Navigation component — Firefox - - 2026-07-21
CVE-2026-16365 Privilege escalation in the DOM: Workers component — Firefox - - 2026-07-21
CVE-2026-16364 Incorrect boundary conditions in the Audio/Video: Playback component — Firefox - - 2026-07-21
CVE-2026-16363 JIT miscompilation in the JavaScript: WebAssembly component — Firefox - - 2026-07-21
CVE-2026-16352 Sandbox escape due to use-after-free in the Disability Access APIs component — Firefox - - 2026-07-21
CVE-2026-16351 Sandbox escape due to use-after-free in the DOM: Navigation component — Firefox - - 2026-07-21
CVE-2026-16362 Use-after-free in the WebRTC: Audio/Video component — Firefox - - 2026-07-21
CVE-2026-16350 Incorrect boundary conditions in the Audio/Video: cubeb component — Firefox - - 2026-07-21
CVE-2026-16349 Same-origin policy bypass in the DOM: Navigation component — Firefox - - 2026-07-21
CVE-2026-15719 Site isolation issue in the DOM: Navigation component — Firefox - - 2026-07-14
CVE-2026-15718 Invalid pointer in the JavaScript: WebAssembly component — Firefox - - 2026-07-14
CVE-2026-14906 Malicious webpage titles could allow overwriting of bundled PDF resources when saving webpages as PDFs in Firefox for iOS — Firefox for iOS - - 2026-07-13
CVE-2026-13356 Interrupted navigation could allow address bar origin spoofing in Firefox for iOS — Firefox for iOS - - 2026-07-06
CVE-2026-57963 Chat UI manipulation by injection — Thunderbird - - 2026-07-01
CVE-2026-57962 Denial-of-service via malicious LDAP address-book server — Thunderbird - - 2026-07-01
CVE-2026-14241 Memory safety bugs fixed in Firefox 152.0.4 — Firefox - - 2026-06-30
CVE-2026-53900 Cookie injection was possible when opening a PDF link — Firefox for iOS - - 2026-06-16
CVE-2026-53899 Cross-origin cookies could be leaked when opening a PDF link — Firefox for iOS - - 2026-06-16
CVE-2026-12330 Incorrect boundary conditions in the Internationalization component — Firefox - - 2026-06-16
CVE-2026-12329 Memory safety bug fixed in Thunderbird ESR 140.12 — Firefox - - 2026-06-16
CVE-2026-12328 Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 — Firefox - - 2026-06-16
CVE-2026-12327 Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 — Firefox - - 2026-06-16
CVE-2026-12326 Memory safety bugs fixed in Firefox 152 and Thunderbird 152 — Firefox - - 2026-06-16
CVE-2026-12325 Denial-of-service in the Graphics: ImageLib component — Firefox - - 2026-06-16
CVE-2026-12324 Incorrect boundary conditions in the Graphics: CanvasWebGL component — Firefox - - 2026-06-16
CVE-2026-12323 Spoofing issue in the DOM: Core & HTML component — Firefox - - 2026-06-16
CVE-2026-12322 Clickjacking issue in the Widget: Gtk component — Firefox - - 2026-06-16
CVE-2026-12321 JIT miscompilation in the JavaScript: WebAssembly component — Firefox - - 2026-06-16
CVE-2026-12320 Information disclosure in the Password Manager component — Firefox - - 2026-06-16
CVE-2026-12319 Denial-of-service in the Audio/Video: Playback component — Firefox - - 2026-06-16

This page lists every published CVE security advisory associated with Mozilla. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.