Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Mozilla — Vulnerabilities & Security Advisories 2185

Browse all 2185 CVE security advisories affecting Mozilla. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Mozilla operates as a non-profit organization primarily known for developing the Firefox web browser and maintaining the Gecko rendering engine. Its software portfolio serves millions of users globally, focusing on open-source web technologies and privacy-centric browsing solutions. Historically, the codebase has been susceptible to a wide array of vulnerabilities, including remote code execution, cross-site scripting, and memory corruption issues such as buffer overflows. These flaws often stem from complex JavaScript engines and network stack implementations. While Mozilla maintains a robust security response team and regularly issues patches, the sheer volume of recorded Common Vulnerabilities and Exposures highlights the challenges inherent in maintaining large-scale, cross-platform applications. The organization continues to prioritize security audits and community-driven bug bounty programs to mitigate risks associated with its extensive feature set and widespread adoption.

CVE ID Title CVSS Severity Published
CVE-2026-100805 Race condition, use-after-free in the Audio/Video component — Thunderbird - - 2026-09-29
CVE-2026-100803 Same-origin policy bypass in the WebExtensions component — Firefox - - 2026-09-29
CVE-2026-100802 Uninitialized memory in the Graphics: WebGPU component — Thunderbird - - 2026-09-29
CVE-2026-100800 Sandbox escape due to use-after-free in the Disability Access APIs component — Firefox - - 2026-09-29
CVE-2026-100801 Privilege escalation in the DLL Services component — Thunderbird - - 2026-09-29
CVE-2026-100799 Uninitialized memory in the Graphics: WebGPU component — Thunderbird - - 2026-09-29
CVE-2026-100797 Privilege escalation due to use-after-free in the Graphics: WebRender component — Firefox - - 2026-09-29
CVE-2026-100798 Cryptography misuse in Storage: Quota Manager component — Firefox - - 2026-09-29
CVE-2026-100795 Denial-of-service in the Networking component — Thunderbird - - 2026-09-29
CVE-2026-100796 Use-after-free in the JavaScript: WebAssembly component — Thunderbird - - 2026-09-29
CVE-2026-96869 Information disclosure in the Networking component — Thunderbird - - 2026-09-29
CVE-2026-100794 Sandbox escape due to incorrect boundary conditions in the Internationalization component — Thunderbird - - 2026-09-29
CVE-2026-100793 JIT miscompilation in the JavaScript Engine component — Thunderbird - - 2026-09-29
CVE-2026-100792 JIT miscompilation in the JavaScript: WebAssembly component — Thunderbird - - 2026-09-29
CVE-2026-100791 Use-after-free in the DOM: Core & HTML component — Firefox - - 2026-09-29
CVE-2026-100790 Use-after-free in the XSLT component — Firefox - - 2026-09-29
CVE-2026-100789 Use-after-free in the Graphics: Canvas2D component — Firefox - - 2026-09-29
CVE-2026-100787 Sandbox escape in the XUL component — Firefox - - 2026-09-29
CVE-2026-100788 Invalid pointer in the JavaScript: WebAssembly component — Thunderbird - - 2026-09-29
CVE-2026-100785 Use-after-free in the DOM: Core & HTML component — Firefox - - 2026-09-29
CVE-2026-100786 Sandbox escape due to use-after-free in the Graphics component — Firefox - - 2026-09-29
CVE-2026-100784 Use-after-free in the Layout: Text and Fonts component — Firefox - - 2026-09-29
CVE-2026-100782 Privilege escalation due to incorrect boundary conditions in the Graphics component — Firefox - - 2026-09-29
CVE-2026-100783 Uninitialized memory in the Audio/Video component — Firefox - - 2026-09-29
CVE-2026-100780 Use-after-free in the DOM: Core & HTML component — Firefox - - 2026-09-29
CVE-2026-100781 Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component — Firefox - - 2026-09-29
CVE-2026-100778 Sandbox escape due to use-after-free in the DOM: Core & HTML component — Firefox - - 2026-09-29
CVE-2026-100779 Use-after-free in the XSLT component — Firefox - - 2026-09-29
CVE-2026-100777 Use-after-free in the Graphics: Canvas2D component — Firefox - - 2026-09-29
CVE-2026-100776 Use-after-free in the JavaScript: WebAssembly component — Thunderbird - - 2026-09-29

This page lists every published CVE security advisory associated with Mozilla. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.