Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Mozilla — Vulnerabilities & Security Advisories 2266

Browse all 2266 CVE security advisories affecting Mozilla. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Mozilla operates as a non-profit organization primarily known for developing the Firefox web browser and maintaining the Gecko rendering engine. Its software portfolio serves millions of users globally, focusing on open-source web technologies and privacy-centric browsing solutions. Historically, the codebase has been susceptible to a wide array of vulnerabilities, including remote code execution, cross-site scripting, and memory corruption issues such as buffer overflows. These flaws often stem from complex JavaScript engines and network stack implementations. While Mozilla maintains a robust security response team and regularly issues patches, the sheer volume of recorded Common Vulnerabilities and Exposures highlights the challenges inherent in maintaining large-scale, cross-platform applications. The organization continues to prioritize security audits and community-driven bug bounty programs to mitigate risks associated with its extensive feature set and widespread adoption.

Found 1682 results / 2266 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-109749 Use-after-free in the JavaScript: WebAssembly component — Firefox - - 2026-10-13
CVE-2026-109751 Information disclosure in the Networking component — Firefox - - 2026-10-13
CVE-2026-109750 Site isolation issue in the DOM: Web Authentication component — Firefox - - 2026-10-13
CVE-2026-109746 Mitigation bypass in the DOM: Security component — Firefox - - 2026-10-13
CVE-2026-109748 Use-after-free in the JavaScript: WebAssembly component — Firefox - - 2026-10-13
CVE-2026-109747 Other issue in the Address Bar component — Firefox - - 2026-10-13
CVE-2026-109742 Information disclosure in the PDF Viewer component — Firefox - - 2026-10-13
CVE-2026-109745 Sandbox escape due to uninitialized memory in the DOM: Web Serial component — Firefox - - 2026-10-13
CVE-2026-109743 Privilege escalation in the Panning and Zooming component — Firefox - - 2026-10-13
CVE-2026-109744 Other issue in the DOM: File component — Firefox - - 2026-10-13
CVE-2026-109739 Privilege escalation in the WebExtensions component — Firefox - - 2026-10-13
CVE-2026-109740 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component — Firefox - - 2026-10-13
CVE-2026-109738 Use-after-free in the Audio/Video: Playback component — Firefox - - 2026-10-13
CVE-2026-109741 Use-after-free in the Storage: Bucket File System component — Firefox - - 2026-10-13
CVE-2026-109735 Use-after-free in the DOM: Animation component — Firefox - - 2026-10-13
CVE-2026-109731 Incorrect boundary conditions in the Graphics: Canvas2D component — Firefox - - 2026-10-13
CVE-2026-109736 Frame poisoning in the Layout component — Firefox - - 2026-10-13
CVE-2026-109737 Mitigation bypass in the Enterprise Policies component — Firefox - - 2026-10-13
CVE-2026-109734 Mitigation bypass in the DOM: Security component — Firefox - - 2026-10-13
CVE-2026-109720 JIT miscompilation in the JavaScript: WebAssembly component — Firefox - - 2026-10-13
CVE-2026-109723 Integer overflow in the Layout: Text and Fonts component — Firefox - - 2026-10-13
CVE-2026-109721 Incorrect boundary conditions in the JavaScript Engine: JIT component — Firefox - - 2026-10-13
CVE-2026-109724 Use-after-free in the DOM: Core & HTML component — Firefox - - 2026-10-13
CVE-2026-109714 Incorrect boundary conditions in the Layout component — Firefox - - 2026-10-13
CVE-2026-109711 Use-after-free in the Graphics: Canvas2D component — Firefox - - 2026-10-13
CVE-2026-109717 Use-after-free in the DOM: Bindings (WebIDL) component — Firefox - - 2026-10-13
CVE-2026-109709 Information disclosure, privilege escalation in the Security: Process Sandboxing component — Firefox - - 2026-10-13
CVE-2026-109713 Use-after-free in the Crash Reporting component — Firefox - - 2026-10-13
CVE-2026-109707 Sandbox escape due to use-after-free in the Networking component — Firefox - - 2026-10-13
CVE-2026-109704 Privilege escalation in the Application Update component — Firefox - - 2026-10-13

This page lists every published CVE security advisory associated with Mozilla. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.