Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Mozilla — Vulnerabilities & Security Advisories 2268

Browse all 2268 CVE security advisories affecting Mozilla. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Mozilla operates as a non-profit organization primarily known for developing the Firefox web browser and maintaining the Gecko rendering engine. Its software portfolio serves millions of users globally, focusing on open-source web technologies and privacy-centric browsing solutions. Historically, the codebase has been susceptible to a wide array of vulnerabilities, including remote code execution, cross-site scripting, and memory corruption issues such as buffer overflows. These flaws often stem from complex JavaScript engines and network stack implementations. While Mozilla maintains a robust security response team and regularly issues patches, the sheer volume of recorded Common Vulnerabilities and Exposures highlights the challenges inherent in maintaining large-scale, cross-platform applications. The organization continues to prioritize security audits and community-driven bug bounty programs to mitigate risks associated with its extensive feature set and widespread adoption.

CVE ID Title CVSS Severity Published
CVE-2026-4710 Incorrect boundary conditions in the Audio/Video component — Firefox 9.1 - 2026-03-24
CVE-2026-4709 Incorrect boundary conditions in the Audio/Video: GMP component — Firefox 8.1 - 2026-03-24
CVE-2026-4708 Incorrect boundary conditions in the Graphics component — Firefox 9.1 - 2026-03-24
CVE-2026-4707 Incorrect boundary conditions in the Graphics: Canvas2D component — Firefox 9.1 - 2026-03-24
CVE-2026-4706 Incorrect boundary conditions in the Graphics: Canvas2D component — Firefox 9.1 - 2026-03-24
CVE-2026-4705 Undefined behavior in the WebRTC: Signaling component — Firefox 5.3 - 2026-03-24
CVE-2026-4724 Undefined behavior in the Audio/Video component — Firefox 9.1 - 2026-03-24
CVE-2026-4704 Denial-of-service in the WebRTC: Signaling component — Firefox 6.5 - 2026-03-24
CVE-2026-4723 Use-after-free in the JavaScript Engine component — Firefox 9.8 - 2026-03-24
CVE-2026-4702 JIT miscompilation in the JavaScript Engine component — Firefox 9.8 - 2026-03-24
CVE-2026-4722 Privilege escalation in the IPC component — Firefox 9.8 - 2026-03-24
CVE-2026-4701 Use-after-free in the JavaScript Engine component — Firefox 9.8 - 2026-03-24
CVE-2026-4700 Mitigation bypass in the Networking: HTTP component — Firefox 8.1 - 2026-03-24
CVE-2026-4699 Incorrect boundary conditions in the Layout: Text and Fonts component — Firefox 9.1 - 2026-03-24
CVE-2026-4698 JIT miscompilation in the JavaScript Engine: JIT component — Firefox 8.8 - 2026-03-24
CVE-2026-4697 Incorrect boundary conditions in the Audio/Video: Web Codecs component — Firefox 8.1 - 2026-03-24
CVE-2026-4696 Use-after-free in the Layout: Text and Fonts component — Firefox 9.8 - 2026-03-24
CVE-2026-4695 Incorrect boundary conditions in the Audio/Video: Web Codecs component — Firefox 8.1 - 2026-03-24
CVE-2026-4694 Incorrect boundary conditions, integer overflow in the Graphics component — Firefox 8.8 - 2026-03-24
CVE-2026-4693 Incorrect boundary conditions in the Audio/Video: Playback component — Firefox 8.1 - 2026-03-24
CVE-2026-4692 Sandbox escape in the Responsive Design Mode component — Firefox 10.0 - 2026-03-24
CVE-2026-4691 Use-after-free in the CSS Parsing and Computation component — Firefox 9.8 - 2026-03-24
CVE-2026-4690 Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component — Firefox 8.8 - 2026-03-24
CVE-2026-4688 Sandbox escape due to use-after-free in the Disability Access APIs component — Firefox 9.8 - 2026-03-24
CVE-2026-4689 Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component — Firefox 8.8 - 2026-03-24
CVE-2026-4686 Incorrect boundary conditions in the Graphics: Canvas2D component — Firefox 9.1 - 2026-03-24
CVE-2026-4687 Sandbox escape due to incorrect boundary conditions in the Telemetry component — Firefox 8.8 - 2026-03-24
CVE-2026-4685 Incorrect boundary conditions in the Graphics: Canvas2D component — Firefox 9.1 - 2026-03-24
CVE-2026-4684 Race condition, use-after-free in the Graphics: WebRender component — Firefox 8.1 - 2026-03-24
CVE-2026-3847 Memory safety bugs fixed in Firefox 148.0.2 — Firefox 8.8AI High AI 2026-03-10

This page lists every published CVE security advisory associated with Mozilla. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.