Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Mozilla — Vulnerabilities & Security Advisories 2266

Browse all 2266 CVE security advisories affecting Mozilla. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Mozilla operates as a non-profit organization primarily known for developing the Firefox web browser and maintaining the Gecko rendering engine. Its software portfolio serves millions of users globally, focusing on open-source web technologies and privacy-centric browsing solutions. Historically, the codebase has been susceptible to a wide array of vulnerabilities, including remote code execution, cross-site scripting, and memory corruption issues such as buffer overflows. These flaws often stem from complex JavaScript engines and network stack implementations. While Mozilla maintains a robust security response team and regularly issues patches, the sheer volume of recorded Common Vulnerabilities and Exposures highlights the challenges inherent in maintaining large-scale, cross-platform applications. The organization continues to prioritize security audits and community-driven bug bounty programs to mitigate risks associated with its extensive feature set and widespread adoption.

Found 1682 results / 2266 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-109707 Sandbox escape due to use-after-free in the Networking component — Firefox - - 2026-10-13
CVE-2026-109708 Sandbox escape due to incorrect boundary conditions in the Networking component — Firefox - - 2026-10-13
CVE-2026-109732 Use-after-free in the DOM: Streams component — Firefox - - 2026-10-13
CVE-2026-109729 Use-after-free in the JavaScript Engine: JIT component — Firefox - - 2026-10-13
CVE-2026-109733 JIT miscompilation in the JavaScript Engine: JIT component — Firefox - - 2026-10-13
CVE-2026-109730 Integer overflow in the Graphics component — Firefox - - 2026-10-13
CVE-2026-109753 Incorrect boundary conditions in the Layout component — Firefox - - 2026-10-13
CVE-2026-109727 Use-after-free in the Audio/Video component — Firefox - - 2026-10-13
CVE-2026-109725 Use-after-free in the DOM: Core & HTML component — Firefox - - 2026-10-13
CVE-2026-109728 Use-after-free in the DOM: Animation component — Firefox - - 2026-10-13
CVE-2026-109726 Use-after-free in the SVG component — Firefox - - 2026-10-13
CVE-2026-109716 Incorrect boundary conditions in the JavaScript Engine component — Firefox - - 2026-10-13
CVE-2026-109722 JIT miscompilation in the JavaScript Engine: JIT component — Firefox - - 2026-10-13
CVE-2026-109718 Use-after-free in the XML component — Firefox - - 2026-10-13
CVE-2026-109719 Race condition, use-after-free in the Graphics: CanvasWebGL component — Firefox - - 2026-10-13
CVE-2026-109710 Use-after-free in the Graphics: Text component — Firefox - - 2026-10-13
CVE-2026-109706 Use-after-free in the Storage: IndexedDB component — Firefox - - 2026-10-13
CVE-2026-109715 Incorrect boundary conditions in the JavaScript Engine component — Firefox - - 2026-10-13
CVE-2026-109712 Sandbox escape due to uninitialized memory in the Graphics component — Firefox - - 2026-10-13
CVE-2026-106016 Mitigation bypass in the File Handling component — Firefox - - 2026-10-06
CVE-2026-100832 Use-after-free in the Graphics: Canvas2D component — Firefox - - 2026-09-29
CVE-2026-100830 Mitigation bypass in the DOM: Navigation component — Firefox - - 2026-09-29
CVE-2026-100831 Use-after-free in the DOM: UI Events & Focus Handling component — Firefox - - 2026-09-29
CVE-2026-100828 Mitigation bypass in the Bookmarks & History component — Firefox - - 2026-09-29
CVE-2026-100829 Mitigation bypass in the DOM: Security component — Firefox - - 2026-09-29
CVE-2026-100825 Use-after-free in the JavaScript Engine: JIT component — Firefox - - 2026-09-29
CVE-2026-100826 Denial-of-service in the Storage: StorageManager component — Firefox - - 2026-09-29
CVE-2026-100824 Privilege escalation in the Places component — Firefox - - 2026-09-29
CVE-2026-100823 Spoofing issue in the Downloads component in Firefox for Android — Firefox - - 2026-09-29
CVE-2026-100822 Spoofing issue in the Networking: HTTP component — Firefox - - 2026-09-29

This page lists every published CVE security advisory associated with Mozilla. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.