mozilla Vulnerability Advisory Catalog

Total 3,294 security vulnerabilities recorded for mozilla software and firmware.

← Back to All Vendors
Component: firefox

Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android. This vulnerability was fixed in Firefox 148.0.2....

📅 2026-03-10
CVSS 8.8 Dossier →
CVE-2026-2919 MEDIUM
Component: firefox_focus

Malicious scripts could display attacker-controlled web content under spoofed domains in Focus for iOS by stalling a _self navigation to an invalid po...

📅 2026-03-09
CVSS 4.3 Dossier →
CVE-2026-2807 CRITICAL
Component: firefox

Memory safety bugs present in Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough...

📅 2026-02-24
CVSS 9.8 Dossier →
CVE-2026-2806 CRITICAL
Component: firefox

Uninitialized memory in the Graphics: Text component. This vulnerability was fixed in Firefox 148 and Thunderbird 148....

📅 2026-02-24
CVSS 9.1 Dossier →
CVE-2026-2805 CRITICAL
Component: firefox

Invalid pointer in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148....

📅 2026-02-24
CVSS 9.8 Dossier →
CVE-2026-2804 MEDIUM
Component: firefox

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148....

📅 2026-02-24
CVSS 5.4 Dossier →
Component: firefox

Information disclosure, mitigation bypass in the Settings UI component. This vulnerability was fixed in Firefox 148 and Thunderbird 148....

📅 2026-02-24
CVSS 7.5 Dossier →
CVE-2026-2802 MEDIUM
Component: firefox

Race condition in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148....

📅 2026-02-24
CVSS 4.2 Dossier →
Component: firefox

Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148....

📅 2026-02-24
CVSS 7.5 Dossier →
CVE-2026-2800 CRITICAL
Component: firefox

Spoofing issue in the WebAuthn component in Firefox for Android. This vulnerability was fixed in Firefox 148 and Thunderbird 148....

📅 2026-02-24
CVSS 9.8 Dossier →
CVE-2026-2799 CRITICAL
Component: firefox

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148....

📅 2026-02-24
CVSS 9.8 Dossier →
Component: firefox

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148....

📅 2026-02-24
CVSS 8.8 Dossier →
CVE-2026-2797 CRITICAL
Component: firefox

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148....

📅 2026-02-24
CVSS 9.8 Dossier →
CVE-2026-2796 CRITICAL
Component: firefox

JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148....

📅 2026-02-24
CVSS 9.8 Dossier →
CVE-2026-2795 CRITICAL
Component: firefox

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148....

📅 2026-02-24
CVSS 9.8 Dossier →
Component: firefox

Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 148....

📅 2026-02-24
CVSS 7.5 Dossier →
CVE-2026-2793 CRITICAL
Component: firefox

Memory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed...

📅 2026-02-24
CVSS 9.8 Dossier →
CVE-2026-2792 CRITICAL
Component: firefox

Memory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory ...

📅 2026-02-24
CVSS 9.8 Dossier →
CVE-2026-2791 CRITICAL
Component: firefox

Mitigation bypass in the Networking: Cache component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird...

📅 2026-02-24
CVSS 9.8 Dossier →
CVE-2026-2790 CRITICAL
Component: firefox

Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thund...

📅 2026-02-24
CVSS 9.8 Dossier →
CVE-2026-2789 CRITICAL
Component: firefox

Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 14...

📅 2026-02-24
CVSS 9.8 Dossier →
CVE-2026-2788 CRITICAL
Component: firefox

Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, T...

📅 2026-02-24
CVSS 9.8 Dossier →
CVE-2026-2787 CRITICAL
Component: firefox

Use-after-free in the DOM: Window and Location component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderb...

📅 2026-02-24
CVSS 9.8 Dossier →
CVE-2026-2786 CRITICAL
Component: firefox

Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 14...

📅 2026-02-24
CVSS 9.8 Dossier →
Page 12 of 138 (3,294 Total Records)