Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Mozilla — Vulnerabilities & Security Advisories 2266

Browse all 2266 CVE security advisories affecting Mozilla. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Mozilla operates as a non-profit organization primarily known for developing the Firefox web browser and maintaining the Gecko rendering engine. Its software portfolio serves millions of users globally, focusing on open-source web technologies and privacy-centric browsing solutions. Historically, the codebase has been susceptible to a wide array of vulnerabilities, including remote code execution, cross-site scripting, and memory corruption issues such as buffer overflows. These flaws often stem from complex JavaScript engines and network stack implementations. While Mozilla maintains a robust security response team and regularly issues patches, the sheer volume of recorded Common Vulnerabilities and Exposures highlights the challenges inherent in maintaining large-scale, cross-platform applications. The organization continues to prioritize security audits and community-driven bug bounty programs to mitigate risks associated with its extensive feature set and widespread adoption.

Found 1682 results / 2266 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-100771 Undefined behavior in the DOM: Streams component — Firefox - - 2026-09-29
CVE-2026-100770 Sandbox escape due to use-after-free in the DOM: Content Processes component — Firefox - - 2026-09-29
CVE-2026-100766 Information disclosure in the Networking: JAR component — Firefox - - 2026-09-29
CVE-2026-100767 Use-after-free in the Networking: Cache component — Firefox - - 2026-09-29
CVE-2026-100765 Use-after-free in the JavaScript: WebAssembly component — Firefox - - 2026-09-29
CVE-2026-100762 Sandbox escape due to use-after-free in the DOM: Content Processes component — Firefox - - 2026-09-29
CVE-2026-100760 Sandbox escape in the Security: Process Sandboxing component — Firefox - - 2026-09-29
CVE-2026-100759 Uninitialized memory in the Storage: Quota Manager component — Firefox - - 2026-09-29
CVE-2026-100758 Sandbox escape in the DOM: Navigation component — Firefox - - 2026-09-29
CVE-2026-100757 Use-after-free in the Widget component — Firefox - - 2026-09-29
CVE-2026-100756 Incorrect boundary conditions in the Audio/Video: Playback component — Firefox - - 2026-09-29
CVE-2026-92079 Mitigation bypass in the Widget: Win32 component — Firefox - - 2026-09-15
CVE-2026-92078 Denial-of-service in the Security component — Firefox - - 2026-09-15
CVE-2026-92077 Denial-of-service in the SVG component — Firefox - - 2026-09-15
CVE-2026-92076 Incorrect boundary conditions in the Networking component — Firefox - - 2026-09-15
CVE-2026-92075 Mitigation bypass in the Networking component — Firefox - - 2026-09-15
CVE-2026-92074 Mitigation bypass in the Popup Blocker component — Firefox - - 2026-09-15
CVE-2026-92073 Privilege escalation in the Enterprise Policies component — Firefox - - 2026-09-15
CVE-2026-92072 Incorrect boundary conditions in the Safe Browsing component — Firefox - - 2026-09-15
CVE-2026-92071 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component — Firefox - - 2026-09-15
CVE-2026-92070 Information disclosure in the Networking component — Firefox - - 2026-09-15
CVE-2026-92069 Spoofing issue in the DOM: Navigation component — Firefox - - 2026-09-15
CVE-2026-92068 Site isolation issue in the Reader Mode component — Firefox - - 2026-09-15
CVE-2026-92067 Use-after-free in the Widget: Gtk component — Firefox - - 2026-09-15
CVE-2026-92066 Sandbox escape in the Profile Backup component — Firefox - - 2026-09-15
CVE-2026-92065 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component — Firefox - - 2026-09-15
CVE-2026-92064 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component — Firefox - - 2026-09-15
CVE-2026-92063 Denial-of-service in the Audio/Video component — Firefox - - 2026-09-15
CVE-2026-92062 Privilege escalation in the Session Restore component — Firefox - - 2026-09-15
CVE-2026-92061 Incorrect boundary conditions in the Security: Process Sandboxing component — Firefox - - 2026-09-15

This page lists every published CVE security advisory associated with Mozilla. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.