mozilla Vulnerability Advisory Catalog

Total 3,294 security vulnerabilities recorded for mozilla software and firmware.

← Back to All Vendors
CVE-2026-3889 MEDIUM
Component: thunderbird

Spoofing issue in Thunderbird. This vulnerability was fixed in Thunderbird 149 and Thunderbird 140.9....

📅 2026-03-24
CVSS 6.5 Dossier →
CVE-2026-4729 CRITICAL
Component: firefox

Memory safety bugs present in Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough...

📅 2026-03-24
CVSS 9.8 Dossier →
CVE-2026-4728 MEDIUM
Component: firefox

Spoofing issue in the Privacy: Anti-Tracking component. This vulnerability was fixed in Firefox 149 and Thunderbird 149....

📅 2026-03-24
CVSS 6.5 Dossier →
Component: firefox

Denial-of-service in the Libraries component in NSS. This vulnerability was fixed in Firefox 149 and Thunderbird 149....

📅 2026-03-24
CVSS 7.5 Dossier →
Component: firefox

Denial-of-service in the XML component. This vulnerability was fixed in Firefox 149 and Thunderbird 149....

📅 2026-03-24
CVSS 7.5 Dossier →
CVE-2026-4725 CRITICAL
Component: firefox

Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149 and Thunderbird 149....

📅 2026-03-24
CVSS 10.0 Dossier →
CVE-2026-4724 CRITICAL
Component: firefox

Undefined behavior in the Audio/Video component. This vulnerability was fixed in Firefox 149 and Thunderbird 149....

📅 2026-03-24
CVSS 9.1 Dossier →
CVE-2026-4723 CRITICAL
Component: firefox

Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 149 and Thunderbird 149....

📅 2026-03-24
CVSS 9.8 Dossier →
Component: firefox

Privilege escalation in the IPC component. This vulnerability was fixed in Firefox 149 and Thunderbird 149....

📅 2026-03-24
CVSS 8.8 Dossier →
CVE-2026-4721 CRITICAL
Component: firefox

Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed...

📅 2026-03-24
CVSS 9.8 Dossier →
CVE-2026-4720 CRITICAL
Component: firefox

Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory ...

📅 2026-03-24
CVSS 9.8 Dossier →
Component: firefox

Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Th...

📅 2026-03-24
CVSS 7.5 Dossier →
Component: firefox

Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbir...

📅 2026-03-24
CVSS 8.1 Dossier →
CVE-2026-4717 CRITICAL
Component: firefox

Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140...

📅 2026-03-24
CVSS 9.8 Dossier →
CVE-2026-4716 CRITICAL
Component: firefox

Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9...

📅 2026-03-24
CVSS 9.1 Dossier →
CVE-2026-4715 CRITICAL
Component: firefox

Uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunder...

📅 2026-03-24
CVSS 9.1 Dossier →
Component: firefox

Incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thund...

📅 2026-03-24
CVSS 7.5 Dossier →
Component: firefox

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderb...

📅 2026-03-24
CVSS 7.5 Dossier →
Component: firefox

Information disclosure in the Widget: Cocoa component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbir...

📅 2026-03-24
CVSS 7.5 Dossier →
CVE-2026-4711 CRITICAL
Component: firefox

Use-after-free in the Widget: Cocoa component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9....

📅 2026-03-24
CVSS 9.8 Dossier →
CVE-2026-4710 CRITICAL
Component: firefox

Incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thund...

📅 2026-03-24
CVSS 9.8 Dossier →
Component: firefox

Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, T...

📅 2026-03-24
CVSS 7.5 Dossier →
Component: firefox

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderb...

📅 2026-03-24
CVSS 7.5 Dossier →
Component: firefox

Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9,...

📅 2026-03-24
CVSS 7.5 Dossier →
Page 10 of 138 (3,294 Total Records)