CVE Program partner

mozilla

Mozilla Corporation

API
CVEs, 365 days7082,962 all time, 96 rejected
Quality33%median 99%
CVSS by the CNA0%share of records
CWE0%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA96%lower is better
OrganisationMozilla Corporation
RoleCNA
TypeVendor, Open Source
Reports tomitre
ScopeMozilla issues only.
Advisorieshttps://www.mozilla.org/en-US/security/advisories/

Latest CVEs · RSS

  • CVE-2026-110249 2026-10-13
    A malicious, compromised, or MITM-controlled Exchange server can return a single well-formed SOAP response containing an element with enough attributes to keep
  • CVE-2026-110247 2026-10-13
    Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow checks. On a sufficiently large message the growth guard could
  • CVE-2026-109783 2026-10-13
    Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5.
  • CVE-2026-109782 2026-10-13
    Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5.
  • CVE-2026-109781 2026-10-13
    Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
  • CVE-2026-109780 2026-10-13
    Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
  • CVE-2026-109779 2026-10-13
    Race condition in the Networking: DNS component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
  • CVE-2026-109778 2026-10-13
    Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
  • CVE-2026-109777 2026-10-13
    Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153
  • CVE-2026-109776 2026-10-13
    Race condition in the XPCOM component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
  • CVE-2026-109775 2026-10-13
    Denial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
  • CVE-2026-109774 2026-10-13
    Invalid pointer, undefined behavior in the DOM: Notifications component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
  • CVE-2026-109773 2026-10-13
    Denial-of-service in the Sync component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
  • CVE-2026-109772 2026-10-13
    Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
  • CVE-2026-109771 2026-10-13
    Information disclosure in the WebRTC: Networking component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
  • CVE-2026-109770 2026-10-13
    Spoofing issue in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
  • CVE-2026-109769 2026-10-13
    Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
  • CVE-2026-109768 2026-10-13
    Denial-of-service in the Site Reports component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
  • CVE-2026-109767 2026-10-13
    Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
  • CVE-2026-109766 2026-10-13
    Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
  • CVE-2026-109765 2026-10-13
    Race condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird
  • CVE-2026-109764 2026-10-13
    Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
  • CVE-2026-109763 2026-10-13
    Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
  • CVE-2026-109762 2026-10-13
    Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
  • CVE-2026-109761 2026-10-13
    Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

All CVE Program partners