mozilla Vulnerability Advisory Catalog

Total 3,294 security vulnerabilities recorded for mozilla software and firmware.

← Back to All Vendors
CVE-2026-0879 CRITICAL
Component: firefox

Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefo...

📅 2026-01-13
CVSS 9.8 Dossier →
Component: firefox

Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 147, Firefox ESR 1...

📅 2026-01-13
CVSS 8.0 Dossier →
Component: firefox

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147,...

📅 2026-01-13
CVSS 8.1 Dossier →
Component: firefox

Memory safety bugs present in Firefox 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of thes...

📅 2025-12-18
CVSS 8.8 Dossier →
CVE-2025-14860 CRITICAL
Component: firefox

Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 146.0.1....

📅 2025-12-18
CVSS 9.8 Dossier →
Component: firefox

Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into sav...

📅 2025-12-18
CVSS 6.5 Dossier →
Component: firefox

Memory safety bugs present in Firefox ESR 140.5, Thunderbird ESR 140.5, Firefox 145 and Thunderbird 145. Some of these bugs showed evidence of memory ...

📅 2025-12-09
CVSS 8.1 Dossier →
Component: firefox

Memory safety bugs present in Firefox 145 and Thunderbird 145. Some of these bugs showed evidence of memory corruption and we presume that with enough...

📅 2025-12-09
CVSS 7.3 Dossier →
Component: firefox

Same-origin policy bypass in the Request Handling component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thund...

📅 2025-12-09
CVSS 6.5 Dossier →
CVE-2025-14330 CRITICAL
Component: firefox

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thund...

📅 2025-12-09
CVSS 9.8 Dossier →
Component: firefox

Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140...

📅 2025-12-09
CVSS 8.8 Dossier →
Component: firefox

Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140...

📅 2025-12-09
CVSS 8.8 Dossier →
Component: firefox

Spoofing issue in the Downloads Panel component. This vulnerability was fixed in Firefox 146, Thunderbird 146, Firefox ESR 140.7, and Thunderbird 140....

📅 2025-12-09
CVSS 7.5 Dossier →
CVE-2025-14326 CRITICAL
Component: firefox

Use-after-free in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 146 and Thunderbird 146....

📅 2025-12-09
CVSS 9.8 Dossier →
Component: firefox

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thund...

📅 2025-12-09
CVSS 7.3 Dossier →
CVE-2025-14324 CRITICAL
Component: firefox

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunde...

📅 2025-12-09
CVSS 9.8 Dossier →
Component: firefox

Privilege escalation in the DOM: Notifications component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderb...

📅 2025-12-09
CVSS 8.8 Dossier →
Component: firefox

Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 146, Firefox ESR 1...

📅 2025-12-09
CVSS 8.0 Dossier →
CVE-2025-14321 CRITICAL
Component: firefox

Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 14...

📅 2025-12-09
CVSS 9.8 Dossier →
Component: rhino

Rhino is an open-source implementation of JavaScript written entirely in Java. Prior to 1.8.1, 1.7.15.1, and 1.7.14.1, when an application passed an a...

📅 2025-12-03
CVSS 7.5 Dossier →
Component: firefox

Memory safety bugs present in Firefox 144 and Thunderbird 144. Some of these bugs showed evidence of memory corruption and we presume that with enough...

📅 2025-11-11
CVSS 8.1 Dossier →
CVE-2025-13026 CRITICAL
Component: firefox

Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145...

📅 2025-11-11
CVSS 9.8 Dossier →
Component: firefox

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145....

📅 2025-11-11
CVSS 7.5 Dossier →
CVE-2025-13024 CRITICAL
Component: firefox

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 145 and Thunderbird 145....

📅 2025-11-11
CVSS 9.8 Dossier →
Page 15 of 138 (3,294 Total Records)