Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Mozilla — Vulnerabilities & Security Advisories 2268

Browse all 2268 CVE security advisories affecting Mozilla. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Mozilla operates as a non-profit organization primarily known for developing the Firefox web browser and maintaining the Gecko rendering engine. Its software portfolio serves millions of users globally, focusing on open-source web technologies and privacy-centric browsing solutions. Historically, the codebase has been susceptible to a wide array of vulnerabilities, including remote code execution, cross-site scripting, and memory corruption issues such as buffer overflows. These flaws often stem from complex JavaScript engines and network stack implementations. While Mozilla maintains a robust security response team and regularly issues patches, the sheer volume of recorded Common Vulnerabilities and Exposures highlights the challenges inherent in maintaining large-scale, cross-platform applications. The organization continues to prioritize security audits and community-driven bug bounty programs to mitigate risks associated with its extensive feature set and widespread adoption.

CVE ID Title CVSS Severity Published
CVE-2025-1009 Use-after-free in XSLT — Firefox 9.8 - 2025-02-04
CVE-2025-23109 Address bar spoofing on iOS using long hostnames — Firefox for iOS 4.3 - 2025-01-11
CVE-2025-23108 Firefox Mobile iOS Full Address Bar Spoof Using Open in New Tab and Javascript URI — Firefox for iOS 4.3 - 2025-01-11
CVE-2025-0247 Memory safety bugs fixed in Firefox 134 and Thunderbird 134 — Firefox 9.8 - 2025-01-07
CVE-2025-0243 Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6 — Firefox 9.8 - 2025-01-07
CVE-2025-0241 Memory corruption when using JavaScript Text Segmentation — Firefox 8.8 - 2025-01-07
CVE-2025-0240 Compartment mismatch when parsing JavaScript JSON module — Firefox 8.8 - 2025-01-07
CVE-2025-0242 Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6 — Firefox 9.8 - 2025-01-07
CVE-2025-0238 Use-after-free when breaking lines in text — Firefox 8.8 - 2025-01-07
CVE-2025-0237 WebChannel APIs susceptible to confused deputy attack — Firefox 8.8 - 2025-01-07
CVE-2025-0246 Address bar spoofing using an invalid protocol scheme on Firefox for Android — Firefox 5.3 - 2025-01-07
CVE-2025-0239 Alt-Svc ALPN validation failure when redirected — Firefox 7.1 - 2025-01-07
CVE-2025-0244 Address bar spoofing using an invalid protocol scheme on Firefox for Android — Firefox 4.3 - 2025-01-07
CVE-2025-0245 Lock screen setting bypass in Firefox Focus for Android — Firefox 9.1 - 2025-01-07
CVE-2024-53976 Mozilla Firefox 安全漏洞 — Firefox for iOS - - AI 2024-11-26
CVE-2024-53975 Mozilla Firefox 安全漏洞 — Firefox for iOS 7.5AI High AI 2024-11-26
CVE-2024-11699 Mozilla Firefox 安全漏洞 — Firefox 9.8 - 2024-11-26
CVE-2024-11706 Mozilla Firefox 安全漏洞 — Firefox 6.5 - 2024-11-26
CVE-2024-11708 Mozilla Firefox 安全漏洞 — Firefox 6.8 - 2024-11-26
CVE-2024-11705 Mozilla Firefox 安全漏洞 — Firefox 6.5 - 2024-11-26
CVE-2024-11698 Mozilla Firefox 安全漏洞 — Firefox 5.3 - 2024-11-26
CVE-2024-11697 Mozilla Firefox 安全漏洞 — Firefox 8.8 - 2024-11-26
CVE-2024-11704 Mozilla Firefox 安全漏洞 — Firefox 8.8 - 2024-11-26
CVE-2024-11703 Mozilla Firefox 安全漏洞 — Firefox 6.5 - 2024-11-26
CVE-2024-11696 Mozilla Firefox 安全漏洞 — Firefox 5.4 - 2024-11-26
CVE-2024-11693 Mozilla Firefox 安全漏洞 — Firefox 8.1 - 2024-11-26
CVE-2024-11694 Mozilla Firefox 安全漏洞 — Firefox 6.1 - 2024-11-26
CVE-2024-11695 Mozilla Firefox 安全漏洞 — Firefox 4.3 - 2024-11-26
CVE-2024-11692 Mozilla Firefox 安全漏洞 — Firefox 3.1 - 2024-11-26
CVE-2024-11702 Mozilla Firefox 安全漏洞 — Firefox 6.5 - 2024-11-26

This page lists every published CVE security advisory associated with Mozilla. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.