mozilla Vulnerability Advisory Catalog

Total 3,294 security vulnerabilities recorded for mozilla software and firmware.

← Back to All Vendors
CVE-2026-8706 MEDIUM
Component: firefox

Firefox for iOS hosted Reader mode on an unauthenticated local web server, allowing another application on the same device to request arbitrary URLs a...

📅 2026-05-19
CVSS 6.5 Dossier →
Component: firefox

Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we p...

📅 2026-05-19
CVSS 8.8 Dossier →
Component: firefox

Memory safety bugs present in Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with eno...

📅 2026-05-19
CVSS 8.8 Dossier →
Component: firefox

Memory safety bugs present in Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of thes...

📅 2026-05-19
CVSS 8.8 Dossier →
Component: firefox

Privilege escalation in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 151 and Thunderbird 151....

📅 2026-05-19
CVSS 8.8 Dossier →
CVE-2026-8971 MEDIUM
Component: firefox

Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 151 and Thunderbird 151....

📅 2026-05-19
CVSS 6.5 Dossier →
Component: firefox

Privilege escalation in the Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140....

📅 2026-05-19
CVSS 8.8 Dossier →
Component: firefox

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151....

📅 2026-05-19
CVSS 8.1 Dossier →
Component: firefox

Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Th...

📅 2026-05-19
CVSS 7.5 Dossier →
Component: firefox

Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 151 and Thunderbird 151....

📅 2026-05-19
CVSS 7.5 Dossier →
Component: firefox

Information disclosure in the IP Protection component. This vulnerability was fixed in Firefox 151 and Thunderbird 151....

📅 2026-05-19
CVSS 7.5 Dossier →
Component: firefox

Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151....

📅 2026-05-19
CVSS 7.5 Dossier →
Component: firefox

Spoofing issue in the Popup Blocker component. This vulnerability was fixed in Firefox 151 and Thunderbird 151....

📅 2026-05-19
CVSS 7.5 Dossier →
Component: firefox

Spoofing issue in the Web Speech component. This vulnerability was fixed in Firefox 151 and Thunderbird 151....

📅 2026-05-19
CVSS 7.5 Dossier →
Component: firefox

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 14...

📅 2026-05-19
CVSS 8.1 Dossier →
CVE-2026-8961 MEDIUM
Component: firefox

Spoofing issue in the Form Autofill component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.1...

📅 2026-05-19
CVSS 6.5 Dossier →
Component: firefox

Spoofing issue in WebExtensions. This vulnerability was fixed in Firefox 151 and Thunderbird 151....

📅 2026-05-19
CVSS 7.5 Dossier →
CVE-2026-8959 CRITICAL
Component: firefox

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, T...

📅 2026-05-19
CVSS 9.6 Dossier →
Component: firefox

Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11,...

📅 2026-05-19
CVSS 8.6 Dossier →
Component: firefox

Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thund...

📅 2026-05-19
CVSS 8.8 Dossier →
CVE-2026-8956 CRITICAL
Component: firefox

Integer overflow in the Networking: JAR component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 1...

📅 2026-05-19
CVSS 9.8 Dossier →
Component: firefox

Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird ...

📅 2026-05-19
CVSS 8.8 Dossier →
Component: firefox

Incorrect boundary conditions, integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunder...

📅 2026-05-19
CVSS 7.5 Dossier →
CVE-2026-8953 CRITICAL
Component: firefox

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox...

📅 2026-05-19
CVSS 9.6 Dossier →
Page 6 of 138 (3,294 Total Records)