Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Mozilla — Vulnerabilities & Security Advisories 2268

Browse all 2268 CVE security advisories affecting Mozilla. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Mozilla operates as a non-profit organization primarily known for developing the Firefox web browser and maintaining the Gecko rendering engine. Its software portfolio serves millions of users globally, focusing on open-source web technologies and privacy-centric browsing solutions. Historically, the codebase has been susceptible to a wide array of vulnerabilities, including remote code execution, cross-site scripting, and memory corruption issues such as buffer overflows. These flaws often stem from complex JavaScript engines and network stack implementations. While Mozilla maintains a robust security response team and regularly issues patches, the sheer volume of recorded Common Vulnerabilities and Exposures highlights the challenges inherent in maintaining large-scale, cross-platform applications. The organization continues to prioritize security audits and community-driven bug bounty programs to mitigate risks associated with its extensive feature set and widespread adoption.

CVE ID Title CVSS Severity Published
CVE-2026-2782 Privilege escalation in the Netmonitor component — Firefox 9.8 - 2026-02-24
CVE-2026-2780 Privilege escalation in the Netmonitor component — Firefox 9.8 - 2026-02-24
CVE-2026-2779 Incorrect boundary conditions in the Networking: JAR component — Firefox 8.1 - 2026-02-24
CVE-2026-2778 Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component — Firefox 9.1 - 2026-02-24
CVE-2026-2777 Privilege escalation in the Messaging System component — Firefox 8.8 - 2026-02-24
CVE-2026-2775 Mitigation bypass in the DOM: HTML Parser component — Firefox 7.1 - 2026-02-24
CVE-2026-2776 Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software — Firefox 8.1 - 2026-02-24
CVE-2026-2774 Integer overflow in the Audio/Video component — Firefox 8.8 - 2026-02-24
CVE-2026-2773 Incorrect boundary conditions in the Web Audio component — Firefox 9.1 - 2026-02-24
CVE-2026-2771 Undefined behavior in the DOM: Core & HTML component — Firefox 8.2 - 2026-02-24
CVE-2026-2772 Use-after-free in the Audio/Video: Playback component — Firefox 9.8 - 2026-02-24
CVE-2026-2770 Use-after-free in the DOM: Bindings (WebIDL) component — Firefox 9.8 - 2026-02-24
CVE-2026-2769 Use-after-free in the Storage: IndexedDB component — Firefox 9.8AI Critical AI 2026-02-24
CVE-2026-2767 Use-after-free in the JavaScript: WebAssembly component — Firefox 9.8 - 2026-02-24
CVE-2026-2768 Sandbox escape in the Storage: IndexedDB component — Firefox 10.0 - 2026-02-24
CVE-2026-2766 Use-after-free in the JavaScript Engine: JIT component — Firefox 9.8 - 2026-02-24
CVE-2026-2765 Use-after-free in the JavaScript Engine component — Firefox 9.8 - 2026-02-24
CVE-2026-2763 Use-after-free in the JavaScript Engine component — Firefox 9.8 - 2026-02-24
CVE-2026-2764 JIT miscompilation, use-after-free in the JavaScript Engine: JIT component — Firefox 8.8 - 2026-02-24
CVE-2026-2762 Integer overflow in the JavaScript: Standard Library component — Firefox 8.8 - 2026-02-24
CVE-2026-2761 Sandbox escape in the Graphics: WebRender component — Firefox 9.8 - 2026-02-24
CVE-2026-2760 Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component — Firefox 9.8 - 2026-02-24
CVE-2026-2759 Incorrect boundary conditions in the Graphics: ImageLib component — Firefox 9.1 - 2026-02-24
CVE-2026-2758 Use-after-free in the JavaScript: GC component — Firefox 9.8 - 2026-02-24
CVE-2026-2757 Incorrect boundary conditions in the WebRTC: Audio/Video component — Firefox 6.5 - 2026-02-24
CVE-2026-2447 Heap buffer overflow in libvpx — Firefox 8.8AI High AI 2026-02-16
CVE-2026-2032 Interrupted page loads in new tabs could allow website spoofing under trusted domains in Firefox iOS — Firefox for iOS 6.5AI Medium AI 2026-02-16
CVE-2026-0818 CSS-based exfiltration of the content from partially encrypted emails when allowing remote content — Thunderbird 6.5AI Medium AI 2026-01-28
CVE-2026-24869 Use-after-free in the Layout: Scrolling and Overflow component — Firefox 8.1AI High AI 2026-01-27
CVE-2026-24868 Mitigation bypass in the Privacy: Anti-Tracking component — Firefox 6.5AI Medium AI 2026-01-27

This page lists every published CVE security advisory associated with Mozilla. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.