Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Mozilla — Vulnerabilities & Security Advisories 2185

Browse all 2185 CVE security advisories affecting Mozilla. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Mozilla operates as a non-profit organization primarily known for developing the Firefox web browser and maintaining the Gecko rendering engine. Its software portfolio serves millions of users globally, focusing on open-source web technologies and privacy-centric browsing solutions. Historically, the codebase has been susceptible to a wide array of vulnerabilities, including remote code execution, cross-site scripting, and memory corruption issues such as buffer overflows. These flaws often stem from complex JavaScript engines and network stack implementations. While Mozilla maintains a robust security response team and regularly issues patches, the sheer volume of recorded Common Vulnerabilities and Exposures highlights the challenges inherent in maintaining large-scale, cross-platform applications. The organization continues to prioritize security audits and community-driven bug bounty programs to mitigate risks associated with its extensive feature set and widespread adoption.

Found 56 results / 2185 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-86853 Repeated external URL scheme launches could potentially cause a denial of service in Firefox for iOS — Firefox for iOS - - 2026-09-08
CVE-2026-81267 Stalled popup navigation could allow address bar origin spoofing in Firefox for iOS — Firefox for iOS - - 2026-08-31
CVE-2026-14906 Malicious webpage titles could allow overwriting of bundled PDF resources when saving webpages as PDFs in Firefox for iOS — Firefox for iOS - - 2026-07-13
CVE-2026-13356 Interrupted navigation could allow address bar origin spoofing in Firefox for iOS — Firefox for iOS - - 2026-07-06
CVE-2026-53900 Cookie injection was possible when opening a PDF link — Firefox for iOS - - 2026-06-16
CVE-2026-53899 Cross-origin cookies could be leaked when opening a PDF link — Firefox for iOS - - 2026-06-16
CVE-2026-9309 Arbitrary JavaScript execution in internal pages via Reader View JSON-LD injection — Firefox for iOS - - 2026-06-01
CVE-2026-9308 Arbitrary JavaScript execution in Reader View due to wrong HTML replacement order — Firefox for iOS - - 2026-06-01
CVE-2026-9078 Firefox iOS RTL Domain Rendering Issue in Link Preview — Firefox for iOS - - 2026-05-25
CVE-2026-8706 Sensitive user data could be leaked to other applications through Reader mode — Firefox for iOS - - 2026-05-19
CVE-2026-2634 Spoofed web content presented under trusted domains using scripted navigation on Firefox iOS — Firefox for iOS 6.5 - 2026-02-24
CVE-2026-2032 Interrupted page loads in new tabs could allow website spoofing under trusted domains in Firefox iOS — Firefox for iOS 6.5AI Medium AI 2026-02-16
CVE-2025-14744 Filename spoofing via Unicode Right-to-Left Override in Firefox for iOS — Firefox for iOS 4.3AI Medium AI 2025-12-18
CVE-2025-10859 Data stored in cookies for non-HTML content while browsing Incognito could be viewed after closing private tabs — Firefox for iOS 6.5AI Medium AI 2025-09-30
CVE-2025-55029 Malicious scripts could spam popups for denial of service attacks — Firefox for iOS 6.5 - 2025-08-19
CVE-2025-55031 Passkey phishing within Bluetooth range — Firefox for iOS 7.3 - 2025-08-19
CVE-2025-55028 JavaScript alerts could impede UI interaction or allow denial of service attacks — Firefox for iOS 6.5 - 2025-08-19
CVE-2025-55030 Content-Disposition headers incorrectly ignored for some MIME types — Firefox for iOS 6.1 - 2025-08-19
CVE-2025-54144 Internal Firefox open-text URL scheme allowed loading of arbitrary URLs — Firefox for iOS 6.5 - 2025-08-19
CVE-2025-54145 Scanning a malicious URL utilizing Firefox's open-text scheme with the QR code scanner could load arbitrary websites — Firefox for iOS 8.1 - 2025-08-19
CVE-2025-54143 Sandboxed iframes could allow local downloads despite sandbox restrictions — Firefox for iOS 9.3 - 2025-08-19
CVE-2025-5020 Links using non-HTTP schemes opened from other apps such as Safari could have allowed spoofing of website addresses — Firefox for iOS 6.5AI Medium AI 2025-05-21
CVE-2025-27425 QR code user confirmation bypass with invalid protocol — Firefox for iOS 4.3 - 2025-03-04
CVE-2025-27424 Firefox Mobile iOS Address Bar Spoof Using Server-Side Redirect to non-http Scheme — Firefox for iOS 4.3 - 2025-03-04
CVE-2025-27426 Firefox Mobile iOS Full Address Bar Spoof Using Server-Side Redirect to internal error page — Firefox for iOS 4.7 - 2025-03-04
CVE-2025-23109 Address bar spoofing on iOS using long hostnames — Firefox for iOS 4.3 - 2025-01-11
CVE-2025-23108 Firefox Mobile iOS Full Address Bar Spoof Using Open in New Tab and Javascript URI — Firefox for iOS 4.3 - 2025-01-11
CVE-2024-53976 Mozilla Firefox 安全漏洞 — Firefox for iOS - - AI 2024-11-26
CVE-2024-53975 Mozilla Firefox 安全漏洞 — Firefox for iOS 7.5AI High AI 2024-11-26
CVE-2024-10004 Mozilla Firefox 安全漏洞 — Firefox for iOS - - 2024-10-15

This page lists every published CVE security advisory associated with Mozilla. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.