Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Mozilla — Vulnerabilities & Security Advisories 2266

Browse all 2266 CVE security advisories affecting Mozilla. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Mozilla operates as a non-profit organization primarily known for developing the Firefox web browser and maintaining the Gecko rendering engine. Its software portfolio serves millions of users globally, focusing on open-source web technologies and privacy-centric browsing solutions. Historically, the codebase has been susceptible to a wide array of vulnerabilities, including remote code execution, cross-site scripting, and memory corruption issues such as buffer overflows. These flaws often stem from complex JavaScript engines and network stack implementations. While Mozilla maintains a robust security response team and regularly issues patches, the sheer volume of recorded Common Vulnerabilities and Exposures highlights the challenges inherent in maintaining large-scale, cross-platform applications. The organization continues to prioritize security audits and community-driven bug bounty programs to mitigate risks associated with its extensive feature set and widespread adoption.

CVE ID Title CVSS Severity Published
CVE-2026-12318 Incorrect boundary conditions in the Libraries component in NSS — Firefox - - 2026-06-16
CVE-2026-12317 Memory safety bug fixed in Firefox 152 — Firefox - - 2026-06-16
CVE-2026-12316 Mitigation bypass in the DOM: Security component — Firefox - - 2026-06-16
CVE-2026-12315 Mitigation bypass in the DOM: Security component — Firefox - - 2026-06-16
CVE-2026-12314 Memory safety bug fixed in Firefox 152 — Firefox - - 2026-06-16
CVE-2026-12313 Information disclosure, sandbox escape in the Security: Process Sandboxing component — Firefox - - 2026-06-16
CVE-2026-12312 Memory safety bug fixed in Firefox 152 — Firefox - - 2026-06-16
CVE-2026-12311 Information disclosure, sandbox escape in the Security: Process Sandboxing component — Firefox - - 2026-06-16
CVE-2026-12310 Memory safety bug fixed in Firefox 152 — Firefox - - 2026-06-16
CVE-2026-12309 Memory safety bug fixed in Firefox 152 — Firefox - - 2026-06-16
CVE-2026-12308 Memory safety bug fixed in Firefox 152 — Firefox - - 2026-06-16
CVE-2026-12307 Memory safety bug fixed in Firefox 152 — Firefox - - 2026-06-16
CVE-2026-12306 Memory safety bug fixed in Firefox 152 — Firefox - - 2026-06-16
CVE-2026-12305 Memory safety bug fixed in Firefox 152 — Firefox - - 2026-06-16
CVE-2026-12304 Same-origin policy bypass in the Networking: Cookies component — Firefox - - 2026-06-16
CVE-2026-12303 Information disclosure due to incorrect boundary conditions in the Graphics: WebGPU component — Firefox - - 2026-06-16
CVE-2026-12302 Mitigation bypass in the DOM: Security component — Firefox - - 2026-06-16
CVE-2026-12301 Memory safety bug fixed in Firefox 152 — Firefox - - 2026-06-16
CVE-2026-12300 Memory safety bug fixed in Firefox 152 — Firefox - - 2026-06-16
CVE-2026-12299 JIT miscompilation in the DOM: Core & HTML component — Firefox - - 2026-06-16
CVE-2026-12298 Memory safety bug fixed in Firefox 152 — Firefox - - 2026-06-16
CVE-2026-12297 Sandbox escape due to incorrect boundary conditions in the Networking component — Firefox - - 2026-06-16
CVE-2026-12296 Sandbox escape in the Security: Process Sandboxing component — Firefox - - 2026-06-16
CVE-2026-12295 Sandbox escape in the DOM: Navigation component — Firefox - - 2026-06-16
CVE-2026-12294 Sandbox escape in the DOM: Workers component — Firefox - - 2026-06-16
CVE-2026-12293 Use-after-free in the Graphics: WebGPU component — Firefox - - 2026-06-16
CVE-2026-12292 Incorrect boundary conditions in the Web Audio component — Firefox - - 2026-06-16
CVE-2026-12291 Use-after-free in the Networking: HTTP component — Firefox - - 2026-06-16
CVE-2026-12290 Memory safety bug fixed in Firefox 152 — Firefox - - 2026-06-16
CVE-2026-12289 Privilege escalation in the Graphics: WebRender component — Firefox - - 2026-06-16

This page lists every published CVE security advisory associated with Mozilla. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.