mozilla Vulnerability Advisory Catalog

Total 3,294 security vulnerabilities recorded for mozilla software and firmware.

← Back to All Vendors
Component: firefox

Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 151 and Thunderbird 151....

📅 2026-05-19
CVSS 8.8 Dossier →
CVE-2026-8951 MEDIUM
Component: firefox

Spoofing issue in the Toolbar component in Firefox for Android. This vulnerability was fixed in Firefox 151....

📅 2026-05-19
CVSS 6.5 Dossier →
CVE-2026-8950 CRITICAL
Component: firefox

Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thu...

📅 2026-05-19
CVSS 9.3 Dossier →
Component: firefox

Integer overflow in the Widget: Win32 component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140...

📅 2026-05-19
CVSS 7.5 Dossier →
CVE-2026-8948 CRITICAL
Component: firefox

Same-origin policy bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 151 and Thunderbird 151....

📅 2026-05-19
CVSS 9.1 Dossier →
Component: firefox

Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbi...

📅 2026-05-19
CVSS 7.3 Dossier →
Component: firefox

Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 1...

📅 2026-05-19
CVSS 7.5 Dossier →
Component: firefox

Sandbox escape in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 151....

📅 2026-05-19
CVSS 7.5 Dossier →
CVE-2026-8401 CRITICAL
Component: firefox

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbi...

📅 2026-05-12
CVSS 9.8 Dossier →
CVE-2026-8391 MEDIUM
Component: firefox

Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbi...

📅 2026-05-12
CVSS 5.3 Dossier →
Component: firefox

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150.0.3....

📅 2026-05-12
CVSS 7.3 Dossier →
Component: firefox

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3....

📅 2026-05-12
CVSS 8.8 Dossier →
CVE-2026-8388 MEDIUM
Component: firefox

Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ES...

📅 2026-05-12
CVSS 6.5 Dossier →
CVE-2026-41512 CRITICAL
Component: 0din_scanner

ai-scanner is an AI model safety scanner built on NVIDIA garak. From version 1.0.0 to before version 1.4.1, there is a remote code execution vulnerabi...

📅 2026-05-08
CVSS 9.9 Dossier →
CVE-2026-8094 CRITICAL
Component: firefox

Other issue in the WebRTC component. This vulnerability was fixed in Firefox ESR 140.10.2 and Thunderbird 140.10.2....

📅 2026-05-07
CVSS 9.8 Dossier →
Component: firefox

Memory safety bugs present in Firefox 150.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of ...

📅 2026-05-07
CVSS 8.1 Dossier →
Component: firefox

Memory safety bugs present in Firefox ESR 115.35.1, Firefox ESR 140.10.1 and Firefox 150.0.1. Some of these bugs showed evidence of memory corruption ...

📅 2026-05-07
CVSS 8.1 Dossier →
CVE-2026-8091 CRITICAL
Component: firefox

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10...

📅 2026-05-07
CVSS 9.8 Dossier →
Component: firefox

Use-after-free in the DOM: Networking component. This vulnerability was fixed in Firefox 150.0.2, Firefox ESR 140.10.2, Firefox ESR 115.35.2, Thunderb...

📅 2026-05-07
CVSS 7.3 Dossier →
Component: firefox

Memory safety bugs present in Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some...

📅 2026-04-28
CVSS 7.3 Dossier →
Component: firefox

Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume...

📅 2026-04-28
CVSS 7.3 Dossier →
Component: firefox

Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume...

📅 2026-04-28
CVSS 7.3 Dossier →
CVE-2026-7321 CRITICAL
Component: firefox

Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Thunderbird 150,...

📅 2026-04-28
CVSS 9.6 Dossier →
Component: firefox

Information disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR...

📅 2026-04-28
CVSS 7.5 Dossier →
Page 7 of 138 (3,294 Total Records)