mozilla Vulnerability Advisory Catalog

Total 3,294 security vulnerabilities recorded for mozilla software and firmware.

← Back to All Vendors
Component: firefox

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12....

📅 2026-06-16
CVSS 5.3 Dossier →
Component: firefox

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12....

📅 2026-06-16
CVSS 7.5 Dossier →
CVE-2026-12304 CRITICAL
Component: firefox

Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and ...

📅 2026-06-16
CVSS 9.1 Dossier →
Component: firefox

Information disclosure due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Thunder...

📅 2026-06-16
CVSS 4.3 Dossier →
Component: firefox

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152...

📅 2026-06-16
CVSS 6.5 Dossier →
Component: firefox

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152....

📅 2026-06-16
CVSS 5.3 Dossier →
Component: firefox

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152....

📅 2026-06-16
CVSS 5.3 Dossier →
Component: firefox

JIT miscompilation in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird...

📅 2026-06-16
CVSS 5.4 Dossier →
Component: firefox

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12....

📅 2026-06-16
CVSS 5.4 Dossier →
CVE-2026-12297 CRITICAL
Component: firefox

Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Fire...

📅 2026-06-16
CVSS 9.6 Dossier →
CVE-2026-12296 CRITICAL
Component: firefox

Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Th...

📅 2026-06-16
CVSS 9.6 Dossier →
CVE-2026-12295 CRITICAL
Component: firefox

Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152,...

📅 2026-06-16
CVSS 9.6 Dossier →
CVE-2026-12294 CRITICAL
Component: firefox

Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, an...

📅 2026-06-16
CVSS 9.6 Dossier →
CVE-2026-12293 CRITICAL
Component: firefox

Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Thunderbird 152....

📅 2026-06-16
CVSS 9.8 Dossier →
Component: firefox

Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunde...

📅 2026-06-16
CVSS 8.1 Dossier →
Component: firefox

Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152...

📅 2026-06-16
CVSS 8.8 Dossier →
Component: firefox

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thun...

📅 2026-06-16
CVSS 8.1 Dossier →
Component: firefox

Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunde...

📅 2026-06-16
CVSS 8.8 Dossier →
Component: focus

UXSS in Focus for iOS / Klar Webkit navigation. This vulnerability was fixed in Focus for iOS 151.3.1 and Klar for iOS 151.3.1....

📅 2026-06-09
CVSS 7.5 Dossier →
Component: firefox

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 151.0.3....

📅 2026-06-02
CVSS 4.3 Dossier →
Component: firefox

Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 151.0.3....

📅 2026-06-02
CVSS 7.5 Dossier →
CVE-2026-9309 MEDIUM
Component: firefox

Firefox for iOS Reader View did not properly escape HTML tags in JSON-LD metadata. A malicious page could inject markup that changed Reader View behav...

📅 2026-06-01
CVSS 5.4 Dossier →
CVE-2026-9308 MEDIUM
Component: firefox

Firefox for iOS Reader View replaced page content in its HTML template before replacing other internal placeholders. A malicious page could include a ...

📅 2026-06-01
CVSS 5.4 Dossier →
CVE-2026-9078 MEDIUM
Component: firefox

Firefox for iOS displayed specially crafted right-to-left (RTL) and internationalized domain names (IDNs) incorrectly in link preview UI surfaces. A c...

📅 2026-05-25
CVSS 5.4 Dossier →
Page 5 of 138 (3,294 Total Records)