Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Mozilla — Vulnerabilities & Security Advisories 2268

Browse all 2268 CVE security advisories affecting Mozilla. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Mozilla operates as a non-profit organization primarily known for developing the Firefox web browser and maintaining the Gecko rendering engine. Its software portfolio serves millions of users globally, focusing on open-source web technologies and privacy-centric browsing solutions. Historically, the codebase has been susceptible to a wide array of vulnerabilities, including remote code execution, cross-site scripting, and memory corruption issues such as buffer overflows. These flaws often stem from complex JavaScript engines and network stack implementations. While Mozilla maintains a robust security response team and regularly issues patches, the sheer volume of recorded Common Vulnerabilities and Exposures highlights the challenges inherent in maintaining large-scale, cross-platform applications. The organization continues to prioritize security audits and community-driven bug bounty programs to mitigate risks associated with its extensive feature set and widespread adoption.

CVE ID Title CVSS Severity Published
CVE-2026-6751 Uninitialized memory in the Audio/Video: Web Codecs component — Firefox 9.1AI Critical AI 2026-04-21
CVE-2026-6750 Privilege escalation in the Graphics: WebRender component — Firefox 9.8AI Critical AI 2026-04-21
CVE-2026-6749 Information disclosure due to uninitialized memory in the Graphics: Canvas2D component — Firefox 7.5AI High AI 2026-04-21
CVE-2026-6748 Uninitialized memory in the Audio/Video: Web Codecs component — Firefox 9.1AI Critical AI 2026-04-21
CVE-2026-6747 Use-after-free in the WebRTC component — Firefox 9.8AI Critical AI 2026-04-21
CVE-2026-6746 Use-after-free in the DOM: Core & HTML component — Firefox 9.8AI Critical AI 2026-04-21
CVE-2026-6654 Use-After-Free and Double-Free in IntoIter::drop when element drop panics — thin-vec 7.5AI High AI 2026-04-20
CVE-2026-5735 Memory safety bugs fixed in Firefox 149.0.2 and Thunderbird 149.0.2 — Firefox 9.8 - 2026-04-07
CVE-2026-5734 Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 — Firefox 9.8 - 2026-04-07
CVE-2026-5733 Incorrect boundary conditions in the Graphics: WebGPU component — Firefox 8.1AI High AI 2026-04-07
CVE-2026-5732 Incorrect boundary conditions, integer overflow in the Graphics: Text component — Firefox 8.8AI High AI 2026-04-07
CVE-2026-5731 Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 — Firefox 8.8AI High AI 2026-04-07
CVE-2026-4371 Out of bounds read in IMAP parsing — Thunderbird 8.1 - 2026-03-24
CVE-2026-3889 Spoofing issue in Thunderbird — Thunderbird 4.3 - 2026-03-24
CVE-2026-4729 Memory safety bugs fixed in Firefox 149 and Thunderbird 149 — Firefox 9.8 - 2026-03-24
CVE-2026-4721 Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 — Firefox 9.8 - 2026-03-24
CVE-2026-4720 Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 — Firefox 9.8 - 2026-03-24
CVE-2026-4719 Incorrect boundary conditions in the Graphics: Text component — Firefox 9.1 - 2026-03-24
CVE-2026-4718 Undefined behavior in the WebRTC: Signaling component — Firefox 5.3 - 2026-03-24
CVE-2026-4728 Spoofing issue in the Privacy: Anti-Tracking component — Firefox 4.3 - 2026-03-24
CVE-2026-4727 Denial-of-service in the Libraries component in NSS — Firefox 7.5 - 2026-03-24
CVE-2026-4726 Denial-of-service in the XML component — Firefox 7.5 - 2026-03-24
CVE-2026-4717 Privilege escalation in the Netmonitor component — Firefox 9.8 - 2026-03-24
CVE-2026-4715 Uninitialized memory in the Graphics: Canvas2D component — Firefox 8.8 - 2026-03-24
CVE-2026-4716 Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component — Firefox 6.5 - 2026-03-24
CVE-2026-4713 Incorrect boundary conditions in the Graphics component — Firefox 9.1 - 2026-03-24
CVE-2026-4714 Incorrect boundary conditions in the Audio/Video component — Firefox 9.1 - 2026-03-24
CVE-2026-4712 Information disclosure in the Widget: Cocoa component — Firefox 7.5 - 2026-03-24
CVE-2026-4725 Sandbox escape due to use-after-free in the Graphics: Canvas2D component — Firefox 10.0 - 2026-03-24
CVE-2026-4710 Incorrect boundary conditions in the Audio/Video component — Firefox 9.1 - 2026-03-24

This page lists every published CVE security advisory associated with Mozilla. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.