Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Mozilla — Vulnerabilities & Security Advisories 2268

Browse all 2268 CVE security advisories affecting Mozilla. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Mozilla operates as a non-profit organization primarily known for developing the Firefox web browser and maintaining the Gecko rendering engine. Its software portfolio serves millions of users globally, focusing on open-source web technologies and privacy-centric browsing solutions. Historically, the codebase has been susceptible to a wide array of vulnerabilities, including remote code execution, cross-site scripting, and memory corruption issues such as buffer overflows. These flaws often stem from complex JavaScript engines and network stack implementations. While Mozilla maintains a robust security response team and regularly issues patches, the sheer volume of recorded Common Vulnerabilities and Exposures highlights the challenges inherent in maintaining large-scale, cross-platform applications. The organization continues to prioritize security audits and community-driven bug bounty programs to mitigate risks associated with its extensive feature set and widespread adoption.

CVE ID Title CVSS Severity Published
CVE-2026-12290 Memory safety bug fixed in Firefox 152 — Firefox - - 2026-06-16
CVE-2026-12289 Privilege escalation in the Graphics: WebRender component — Firefox - - 2026-06-16
CVE-2026-11799 UXSS in Focus for iOS / Klar Webkit navigation — Focus for iOS - - 2026-06-09
CVE-2026-10702 JIT miscompilation in the JavaScript Engine: JIT component — Firefox - - 2026-06-02
CVE-2026-10701 Incorrect boundary conditions in the Graphics: Text component — Firefox - - 2026-06-02
CVE-2026-9309 Arbitrary JavaScript execution in internal pages via Reader View JSON-LD injection — Firefox for iOS - - 2026-06-01
CVE-2026-9308 Arbitrary JavaScript execution in Reader View due to wrong HTML replacement order — Firefox for iOS - - 2026-06-01
CVE-2026-9078 Firefox iOS RTL Domain Rendering Issue in Link Preview — Firefox for iOS - - 2026-05-25
CVE-2026-8706 Sensitive user data could be leaked to other applications through Reader mode — Firefox for iOS - - 2026-05-19
CVE-2026-8975 Memory safety bugs fixed in Firefox ESR 115.36, Firefox ESR 140.11 and Firefox 151 — Firefox - - 2026-05-19
CVE-2026-8974 Memory safety bugs fixed in Firefox ESR 140.11 and Firefox 151 — Firefox - - 2026-05-19
CVE-2026-8973 Memory safety bugs fixed in Firefox 151 — Firefox - - 2026-05-19
CVE-2026-8972 Privilege escalation in the WebRTC: Audio/Video component — Firefox - - 2026-05-19
CVE-2026-8971 Same-origin policy bypass in the Networking: JAR component — Firefox - - 2026-05-19
CVE-2026-8970 Privilege escalation in the Security component — Firefox - - 2026-05-19
CVE-2026-8969 Mitigation bypass in the DOM: Security component — Firefox - - 2026-05-19
CVE-2026-8968 Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component — Firefox - - 2026-05-19
CVE-2026-8967 Information disclosure in the Graphics: WebGPU component — Firefox - - 2026-05-19
CVE-2026-8966 Information disclosure in the IP Protection component — Firefox - - 2026-05-19
CVE-2026-8965 Information disclosure in the DOM: Security component — Firefox - - 2026-05-19
CVE-2026-8964 Spoofing issue in the Popup Blocker component — Firefox - - 2026-05-19
CVE-2026-8963 Spoofing issue in the Web Speech component — Firefox - - 2026-05-19
CVE-2026-8962 Mitigation bypass in the DOM: Security component — Firefox - - 2026-05-19
CVE-2026-8961 Spoofing issue in the Form Autofill component — Firefox - - 2026-05-19
CVE-2026-8960 Spoofing issue in WebExtensions — Firefox - - 2026-05-19
CVE-2026-8959 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component — Firefox - - 2026-05-19
CVE-2026-8958 Information disclosure, sandbox escape in the Security: Process Sandboxing component — Firefox - - 2026-05-19
CVE-2026-8957 Privilege escalation in the Enterprise Policies component — Firefox - - 2026-05-19
CVE-2026-8956 Integer overflow in the Networking: JAR component — Firefox - - 2026-05-19
CVE-2026-8955 Privilege escalation in the DOM: Workers component — Firefox - - 2026-05-19

This page lists every published CVE security advisory associated with Mozilla. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.