mozilla Vulnerability Advisory Catalog

Total 3,294 security vulnerabilities recorded for mozilla software and firmware.

← Back to All Vendors
CVE-2026-2785 CRITICAL
Component: firefox

Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 1...

📅 2026-02-24
CVSS 9.8 Dossier →
CVE-2026-2784 CRITICAL
Component: firefox

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140...

📅 2026-02-24
CVSS 9.8 Dossier →
Component: firefox

Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140...

📅 2026-02-24
CVSS 7.5 Dossier →
CVE-2026-2782 CRITICAL
Component: firefox

Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140...

📅 2026-02-24
CVSS 9.8 Dossier →
CVE-2026-2781 CRITICAL
Component: firefox

Integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, Thunderbird 140.8...

📅 2026-02-24
CVSS 9.8 Dossier →
CVE-2026-2780 CRITICAL
Component: firefox

Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140...

📅 2026-02-24
CVSS 9.8 Dossier →
CVE-2026-2779 CRITICAL
Component: firefox

Incorrect boundary conditions in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and T...

📅 2026-02-24
CVSS 9.8 Dossier →
CVE-2026-2778 CRITICAL
Component: firefox

Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33...

📅 2026-02-24
CVSS 10.0 Dossier →
CVE-2026-2777 CRITICAL
Component: firefox

Privilege escalation in the Messaging System component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbir...

📅 2026-02-24
CVSS 9.8 Dossier →
CVE-2026-2776 CRITICAL
Component: firefox

Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability was fixed in Firefox 148, Fire...

📅 2026-02-24
CVSS 10.0 Dossier →
CVE-2026-2775 CRITICAL
Component: firefox

Mitigation bypass in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 1...

📅 2026-02-24
CVSS 9.8 Dossier →
CVE-2026-2774 CRITICAL
Component: firefox

Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, an...

📅 2026-02-24
CVSS 9.8 Dossier →
CVE-2026-2773 CRITICAL
Component: firefox

Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderb...

📅 2026-02-24
CVSS 9.8 Dossier →
CVE-2026-2772 CRITICAL
Component: firefox

Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird...

📅 2026-02-24
CVSS 9.8 Dossier →
CVE-2026-2771 CRITICAL
Component: firefox

Undefined behavior in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ...

📅 2026-02-24
CVSS 9.8 Dossier →
CVE-2026-2770 CRITICAL
Component: firefox

Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbir...

📅 2026-02-24
CVSS 9.8 Dossier →
Component: firefox

Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 14...

📅 2026-02-24
CVSS 8.8 Dossier →
CVE-2026-2768 CRITICAL
Component: firefox

Sandbox escape in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 1...

📅 2026-02-24
CVSS 10.0 Dossier →
CVE-2026-2767 CRITICAL
Component: firefox

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderb...

📅 2026-02-24
CVSS 9.8 Dossier →
CVE-2026-2766 CRITICAL
Component: firefox

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbi...

📅 2026-02-24
CVSS 9.8 Dossier →
CVE-2026-2765 CRITICAL
Component: firefox

Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 14...

📅 2026-02-24
CVSS 9.8 Dossier →
CVE-2026-2764 CRITICAL
Component: firefox

JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox E...

📅 2026-02-24
CVSS 9.8 Dossier →
CVE-2026-2763 CRITICAL
Component: firefox

Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148...

📅 2026-02-24
CVSS 9.8 Dossier →
CVE-2026-2762 CRITICAL
Component: firefox

Integer overflow in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and T...

📅 2026-02-24
CVSS 9.8 Dossier →
Page 13 of 138 (3,294 Total Records)