Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Mozilla — Vulnerabilities & Security Advisories 2187

Browse all 2187 CVE security advisories affecting Mozilla. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Mozilla operates as a non-profit organization primarily known for developing the Firefox web browser and maintaining the Gecko rendering engine. Its software portfolio serves millions of users globally, focusing on open-source web technologies and privacy-centric browsing solutions. Historically, the codebase has been susceptible to a wide array of vulnerabilities, including remote code execution, cross-site scripting, and memory corruption issues such as buffer overflows. These flaws often stem from complex JavaScript engines and network stack implementations. While Mozilla maintains a robust security response team and regularly issues patches, the sheer volume of recorded Common Vulnerabilities and Exposures highlights the challenges inherent in maintaining large-scale, cross-platform applications. The organization continues to prioritize security audits and community-driven bug bounty programs to mitigate risks associated with its extensive feature set and widespread adoption.

CVE ID Title CVSS Severity Published
CVE-2026-92014 Privilege escalation due to incorrect boundary conditions in the Graphics component — Firefox - - 2026-09-15
CVE-2026-92013 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component — Firefox - - 2026-09-15
CVE-2026-92012 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component — Firefox - - 2026-09-15
CVE-2026-92011 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component — Firefox - - 2026-09-15
CVE-2026-92010 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component — Firefox - - 2026-09-15
CVE-2026-92009 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component — Firefox - - 2026-09-15
CVE-2026-92008 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component — Firefox - - 2026-09-15
CVE-2026-92007 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component — Firefox - - 2026-09-15
CVE-2026-92006 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component — Firefox - - 2026-09-15
CVE-2026-92005 Use-after-free in the Audio/Video: Web Codecs component — Firefox - - 2026-09-15
CVE-2026-86853 Repeated external URL scheme launches could potentially cause a denial of service in Firefox for iOS — Firefox for iOS - - 2026-09-08
CVE-2026-84642 Allowed UNC hostnames for attachments interpreted as a regular expression — Thunderbird - - 2026-09-01
CVE-2026-84641 Information disclosure due to malicious IMAP server response — Thunderbird - - 2026-09-01
CVE-2026-84640 One byte overflow read in mail parser — Thunderbird - - 2026-09-01
CVE-2026-84639 Uninitialized memory in MIME parsing — Thunderbird - - 2026-09-01
CVE-2026-84637 Calendar invitation attachments could launch local executables — Thunderbird - - 2026-09-01
CVE-2026-84144 Internally found bugs fixed in Thunderbird 155 and Thunderbird ESR 153.2 — Firefox - - 2026-09-01
CVE-2026-84143 Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15 — Firefox - - 2026-09-01
CVE-2026-84142 Internally found bugs fixed in Thunderbird 155 — Firefox - - 2026-09-01
CVE-2026-84141 Integer overflow in the Graphics: ImageLib component — Firefox - - 2026-09-01
CVE-2026-84140 Site isolation issue in the DOM: Navigation component — Firefox - - 2026-09-01
CVE-2026-84139 Clickjacking issue in the DOM: Events component — Firefox - - 2026-09-01
CVE-2026-84138 Denial-of-service in the PDF Viewer component — Firefox - - 2026-09-01
CVE-2026-84137 Spoofing issue in the DOM: Core & HTML component — Firefox - - 2026-09-01
CVE-2026-84136 Other issue in the DOM: Navigation component — Firefox - - 2026-09-01
CVE-2026-84135 Other issue in Firefox Focus for Android — Firefox - - 2026-09-01
CVE-2026-84134 Other issue in the Profile Backup component — Firefox - - 2026-09-01
CVE-2026-84133 Site isolation issue in the DOM: Push Subscriptions component — Firefox - - 2026-09-01
CVE-2026-84132 Information disclosure in the Networking: HTTP component — Firefox - - 2026-09-01
CVE-2026-84130 Information disclosure in the Graphics: WebGPU component — Firefox - - 2026-09-01

This page lists every published CVE security advisory associated with Mozilla. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.