Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Mozilla — Vulnerabilities & Security Advisories 2185

Browse all 2185 CVE security advisories affecting Mozilla. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Mozilla operates as a non-profit organization primarily known for developing the Firefox web browser and maintaining the Gecko rendering engine. Its software portfolio serves millions of users globally, focusing on open-source web technologies and privacy-centric browsing solutions. Historically, the codebase has been susceptible to a wide array of vulnerabilities, including remote code execution, cross-site scripting, and memory corruption issues such as buffer overflows. These flaws often stem from complex JavaScript engines and network stack implementations. While Mozilla maintains a robust security response team and regularly issues patches, the sheer volume of recorded Common Vulnerabilities and Exposures highlights the challenges inherent in maintaining large-scale, cross-platform applications. The organization continues to prioritize security audits and community-driven bug bounty programs to mitigate risks associated with its extensive feature set and widespread adoption.

CVE ID Title CVSS Severity Published
CVE-2026-92042 Race condition in the DOM: Content Processes component — Firefox - - 2026-09-15
CVE-2026-92041 Mitigation bypass in the DOM: Networking component — Firefox - - 2026-09-15
CVE-2026-92040 Use-after-free in the JavaScript: WebAssembly component — Firefox - - 2026-09-15
CVE-2026-92039 Mitigation bypass in the DOM: Notifications component — Firefox - - 2026-09-15
CVE-2026-92038 Mitigation bypass in the Remote Settings Client component — Firefox - - 2026-09-15
CVE-2026-92037 Incorrect boundary conditions in the DOM: Animation component — Firefox - - 2026-09-15
CVE-2026-92036 Incorrect boundary conditions in the Networking: HTTP component — Firefox - - 2026-09-15
CVE-2026-92035 Sandbox escape due to incorrect boundary conditions in the Graphics component — Firefox - - 2026-09-15
CVE-2026-92034 Site isolation issue in the Graphics component — Firefox - - 2026-09-15
CVE-2026-92033 Privilege escalation in Firefox for Android — Firefox - - 2026-09-15
CVE-2026-92032 Sandbox escape due to invalid pointer in the Graphics component — Firefox - - 2026-09-15
CVE-2026-92031 Information disclosure in the Graphics: ImageLib component — Firefox - - 2026-09-15
CVE-2026-92030 Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component — Firefox - - 2026-09-15
CVE-2026-92029 Use-after-free in the SVG component — Firefox - - 2026-09-15
CVE-2026-92028 Use-after-free in the DOM: Core & HTML component — Firefox - - 2026-09-15
CVE-2026-92027 Use-after-free in the DOM: Streams component — Firefox - - 2026-09-15
CVE-2026-92026 Use-after-free in the Networking component — Firefox - - 2026-09-15
CVE-2026-92025 Use-after-free in the DOM: Navigation component — Firefox - - 2026-09-15
CVE-2026-92024 Use-after-free in the SVG component — Firefox - - 2026-09-15
CVE-2026-92023 Use-after-free in the XML component — Firefox - - 2026-09-15
CVE-2026-92022 Use-after-free in the DOM: HTML Parser component — Firefox - - 2026-09-15
CVE-2026-92021 Use-after-free in the JavaScript Engine: JIT component — Firefox - - 2026-09-15
CVE-2026-92020 Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component — Firefox - - 2026-09-15
CVE-2026-92019 Mitigation bypass in the Remote Settings Client component — Firefox - - 2026-09-15
CVE-2026-92018 Sandbox escape in the DOM: Core & HTML component — Firefox - - 2026-09-15
CVE-2026-92017 Privilege escalation in the DOM: Service Workers component — Firefox - - 2026-09-15
CVE-2026-92016 Use-after-free in the Disability Access APIs component — Firefox - - 2026-09-15
CVE-2026-92015 Privilege escalation in the WebExtensions component — Firefox - - 2026-09-15
CVE-2026-92014 Privilege escalation due to incorrect boundary conditions in the Graphics component — Firefox - - 2026-09-15
CVE-2026-92013 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component — Firefox - - 2026-09-15

This page lists every published CVE security advisory associated with Mozilla. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.