Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Mozilla — Vulnerabilities & Security Advisories 2268

Browse all 2268 CVE security advisories affecting Mozilla. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Mozilla operates as a non-profit organization primarily known for developing the Firefox web browser and maintaining the Gecko rendering engine. Its software portfolio serves millions of users globally, focusing on open-source web technologies and privacy-centric browsing solutions. Historically, the codebase has been susceptible to a wide array of vulnerabilities, including remote code execution, cross-site scripting, and memory corruption issues such as buffer overflows. These flaws often stem from complex JavaScript engines and network stack implementations. While Mozilla maintains a robust security response team and regularly issues patches, the sheer volume of recorded Common Vulnerabilities and Exposures highlights the challenges inherent in maintaining large-scale, cross-platform applications. The organization continues to prioritize security audits and community-driven bug bounty programs to mitigate risks associated with its extensive feature set and widespread adoption.

Found 308 results / 2268 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-92239 Buffer overrun in IMAP — Thunderbird - - 2026-09-15
CVE-2026-92238 Ambiguous parsing of mail headers — Thunderbird - - 2026-09-15
CVE-2026-84642 Allowed UNC hostnames for attachments interpreted as a regular expression — Thunderbird - - 2026-09-01
CVE-2026-84641 Information disclosure due to malicious IMAP server response — Thunderbird - - 2026-09-01
CVE-2026-84640 One byte overflow read in mail parser — Thunderbird - - 2026-09-01
CVE-2026-84639 Uninitialized memory in MIME parsing — Thunderbird - - 2026-09-01
CVE-2026-84637 Calendar invitation attachments could launch local executables — Thunderbird - - 2026-09-01
CVE-2026-14899 Off-by-one out of bounds read in MIME header parser for forwarding — Thunderbird - - 2026-07-22
CVE-2026-57963 Chat UI manipulation by injection — Thunderbird - - 2026-07-01
CVE-2026-57962 Denial-of-service via malicious LDAP address-book server — Thunderbird - - 2026-07-01
CVE-2026-4371 Out of bounds read in IMAP parsing — Thunderbird 8.1 - 2026-03-24
CVE-2026-3889 Spoofing issue in Thunderbird — Thunderbird 4.3 - 2026-03-24
CVE-2026-0818 CSS-based exfiltration of the content from partially encrypted emails when allowing remote content — Thunderbird 6.5AI Medium AI 2026-01-28
CVE-2025-5986 Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links — Thunderbird 6.5AI Medium AI 2025-06-11
CVE-2025-5262 Mozilla Thunderbird 安全漏洞 — Thunderbird 9.8 - 2025-05-27
CVE-2025-3932 Tracking Links in Attachments Bypassed Remote Content Blocking — Thunderbird 4.3AI Medium AI 2025-05-14
CVE-2025-3909 JavaScript Execution via Spoofed PDF Attachment and file:/// Link — Thunderbird 6.1AI Medium AI 2025-05-14
CVE-2025-3875 Sender Spoofing via Malformed From Header in Thunderbird — Thunderbird 4.3AI Medium AI 2025-05-14
CVE-2025-3523 User Interface (UI) Misrepresentation of attachment URL — Thunderbird 7.4AI High AI 2025-04-15
CVE-2025-3522 Leak of hashed Window credentials via crafted attachment URL — Thunderbird 7.1AI High AI 2025-04-15
CVE-2025-2830 Information Disclosure of /tmp directory listing — Thunderbird 4.3AI Medium AI 2025-04-15
CVE-2025-26695 Downloading of OpenPGP keys from WKD used incorrect padding — Thunderbird 5.3 - 2025-03-10
CVE-2025-26696 Crafted email message incorrectly shown as being encrypted — Thunderbird 7.5 - 2025-03-10
CVE-2025-1015 Unsanitized address book fields — Thunderbird 6.1 - 2025-02-04
CVE-2025-0510 Address of e-mail sender can be spoofed by malicious email — Thunderbird 4.3 - 2025-02-04
CVE-2024-11159 Mozilla Thunderbird 安全漏洞 — Thunderbird 7.5AI High AI 2024-11-13
CVE-2024-8394 Mozilla Thunderbird 安全漏洞 — Thunderbird 7.5 - 2024-09-06
CVE-2024-1936 Mozilla Thunderbird 安全漏洞 — Thunderbird 6.5AI Medium AI 2024-03-04
CVE-2023-50761 Mozilla Thunderbird 安全漏洞 — Thunderbird 4.3AI Medium AI 2023-12-19
CVE-2023-50762 Mozilla Thunderbird 安全漏洞 — Thunderbird 6.5AI Medium AI 2023-12-19

This page lists every published CVE security advisory associated with Mozilla. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.