Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Mozilla — Vulnerabilities & Security Advisories 2268

Browse all 2268 CVE security advisories affecting Mozilla. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Mozilla operates as a non-profit organization primarily known for developing the Firefox web browser and maintaining the Gecko rendering engine. Its software portfolio serves millions of users globally, focusing on open-source web technologies and privacy-centric browsing solutions. Historically, the codebase has been susceptible to a wide array of vulnerabilities, including remote code execution, cross-site scripting, and memory corruption issues such as buffer overflows. These flaws often stem from complex JavaScript engines and network stack implementations. While Mozilla maintains a robust security response team and regularly issues patches, the sheer volume of recorded Common Vulnerabilities and Exposures highlights the challenges inherent in maintaining large-scale, cross-platform applications. The organization continues to prioritize security audits and community-driven bug bounty programs to mitigate risks associated with its extensive feature set and widespread adoption.

Found 1682 results / 2268 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-84140 Site isolation issue in the DOM: Navigation component — Firefox - - 2026-09-01
CVE-2026-84139 Clickjacking issue in the DOM: Events component — Firefox - - 2026-09-01
CVE-2026-84138 Denial-of-service in the PDF Viewer component — Firefox - - 2026-09-01
CVE-2026-84137 Spoofing issue in the DOM: Core & HTML component — Firefox - - 2026-09-01
CVE-2026-84136 Other issue in the DOM: Navigation component — Firefox - - 2026-09-01
CVE-2026-84135 Other issue in Firefox Focus for Android — Firefox - - 2026-09-01
CVE-2026-84134 Other issue in the Profile Backup component — Firefox - - 2026-09-01
CVE-2026-84133 Site isolation issue in the DOM: Push Subscriptions component — Firefox - - 2026-09-01
CVE-2026-84132 Information disclosure in the Networking: HTTP component — Firefox - - 2026-09-01
CVE-2026-84130 Information disclosure in the Graphics: WebGPU component — Firefox - - 2026-09-01
CVE-2026-84129 Site isolation issue in the DOM: Navigation component — Firefox - - 2026-09-01
CVE-2026-84128 Privilege escalation in the WebDriver BiDi component — Firefox - - 2026-09-01
CVE-2026-84127 Information disclosure in the WebExtensions component in Firefox for Android — Firefox - - 2026-09-01
CVE-2026-84126 Incorrect boundary conditions in the Layout: Grid component — Firefox - - 2026-09-01
CVE-2026-84125 Use-after-free in the DOM: Core & HTML component — Firefox - - 2026-09-01
CVE-2026-84124 Use-after-free in the DOM: Core & HTML component — Firefox - - 2026-09-01
CVE-2026-84123 Privilege escalation due to use-after-free in the Graphics: WebGPU component — Firefox - - 2026-09-01
CVE-2026-84122 Use-after-free in the Audio/Video component — Firefox - - 2026-09-01
CVE-2026-84118 Use-after-free in the JavaScript: GC component — Firefox - - 2026-09-01
CVE-2026-84117 Privilege escalation in Firefox for Android — Firefox - - 2026-09-01
CVE-2026-84145 Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15 — Firefox - - 2026-09-01
CVE-2026-84131 Privilege escalation due to invalid pointer in the Graphics component — Firefox - - 2026-09-01
CVE-2026-84121 Sandbox escape due to use-after-free in the DOM: Security component — Firefox - - 2026-09-01
CVE-2026-84120 Use-after-free in the Audio/Video component — Firefox - - 2026-09-01
CVE-2026-84119 Sandbox escape due to use-after-free in the DOM: Navigation component — Firefox - - 2026-09-01
CVE-2026-74989 Internally found bugs fixed in Thunderbird 154 — Firefox - - 2026-08-18
CVE-2026-74988 Internally found bugs fixed in Thunderbird ESR 153.1 and Thunderbird 154 — Firefox - - 2026-08-18
CVE-2026-74982 Denial-of-service in the Widget component — Firefox - - 2026-08-18
CVE-2026-74984 Race condition in the JavaScript Engine component — Firefox - - 2026-08-18
CVE-2026-74986 Site isolation issue in the CSS Parsing and Computation component — Firefox - - 2026-08-18

This page lists every published CVE security advisory associated with Mozilla. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.