Vendor CVEs

Mozilla Corporation

All CVEs

3,778 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2026-8963	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	May 19, 2026	Spoofing issue in the Web Speech component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
CVE-2026-8960	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	May 19, 2026	Spoofing issue in WebExtensions. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
CVE-2026-8954	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	May 19, 2026	Incorrect boundary conditions, integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8949	Mozilla Corporation Firefox	Hig	0.49	7.5	0.01	May 19, 2026	Integer overflow in the Widget: Win32 component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8946	Mozilla Corporation Firefox	Hig	0.49	7.5	0.01	May 19, 2026	Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8945	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	May 19, 2026	Sandbox escape in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 151.
CVE-2026-7320	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	Apr 28, 2026	Information disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.
CVE-2026-6786	Mozilla Corporation Firefox	Hig	0.49	7.5	0.01	Apr 26, 2026	Memory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This…
CVE-2026-6785	Mozilla Corporation Firefox	Hig	0.49	7.5	0.01	Apr 26, 2026	Memory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary…
CVE-2026-6784	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	Apr 21, 2026	Memory safety bugs present in Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150 and…
CVE-2026-6782	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	Apr 21, 2026	Information disclosure in the IP Protection component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
CVE-2026-6781	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	Apr 21, 2026	Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
CVE-2026-6780	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	Apr 21, 2026	Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
CVE-2026-6773	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	Apr 21, 2026	Denial-of-service due to integer overflow in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
CVE-2026-6772	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	Apr 21, 2026	Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-6766	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	Apr 21, 2026	Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-6759	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	Apr 21, 2026	Use-after-free in the Widget: Cocoa component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-6758	Mozilla Corporation Firefox	Hig	0.49	7.5	0.01	Apr 21, 2026	Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
CVE-2026-6756	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	Apr 21, 2026	Mitigation bypass in Firefox for Android. This vulnerability was fixed in Firefox 150.
CVE-2026-6754	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	Apr 21, 2026	Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-6749	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	Apr 21, 2026	Information disclosure due to uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-6747	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	Apr 21, 2026	Use-after-free in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-6746	Mozilla Corporation Firefox	Hig	0.49	7.5	0.01	Apr 21, 2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-4727	Mozilla Corporation Firefox	Hig	0.49	7.5	0.01	Mar 24, 2026	Denial-of-service in the Libraries component in NSS. This vulnerability was fixed in Firefox 149 and Thunderbird 149.
CVE-2026-4726	Mozilla Corporation Firefox	Hig	0.49	7.5	0.01	Mar 24, 2026	Denial-of-service in the XML component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.
CVE-2026-4719	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	Mar 24, 2026	Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4714	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	Mar 24, 2026	Incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4713	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	Mar 24, 2026	Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4712	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	Mar 24, 2026	Information disclosure in the Widget: Cocoa component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4709	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	Mar 24, 2026	Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4708	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	Mar 24, 2026	Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4707	Mozilla Corporation Firefox	Hig	0.49	7.5	0.01	Mar 24, 2026	Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4706	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	Mar 24, 2026	Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4704	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	Mar 24, 2026	Denial-of-service in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4699	Mozilla Corporation Firefox	Hig	0.49	7.5	0.01	Mar 24, 2026	Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4697	Mozilla Corporation Firefox	Hig	0.49	7.5	0.01	Mar 24, 2026	Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4695	Mozilla Corporation Firefox	Hig	0.49	7.5	0.01	Mar 24, 2026	Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4694	Mozilla Corporation Firefox	Hig	0.49	7.5	0.01	Mar 24, 2026	Incorrect boundary conditions, integer overflow in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4693	Mozilla Corporation Firefox	Hig	0.49	7.5	0.01	Mar 24, 2026	Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4686	Mozilla Corporation Firefox	Hig	0.49	7.5	0.01	Mar 24, 2026	Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4685	Mozilla Corporation Firefox	Hig	0.49	7.5	0.01	Mar 24, 2026	Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4684	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	Mar 24, 2026	Race condition, use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-2803	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	Feb 24, 2026	Information disclosure, mitigation bypass in the Settings UI component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
CVE-2026-2801	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	Feb 24, 2026	Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
CVE-2026-2794	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	Feb 24, 2026	Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 148.
CVE-2026-2783	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	Feb 24, 2026	Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-0889	Mozilla Corporation Firefox	Hig	0.49	7.5	0.01	Jan 13, 2026	Denial-of-service in the DOM: Service Workers component. This vulnerability was fixed in Firefox 147 and Thunderbird 147.
CVE-2025-14327	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	Dec 9, 2025	Spoofing issue in the Downloads Panel component. This vulnerability was fixed in Firefox 146, Thunderbird 146, Firefox ESR 140.7, and Thunderbird 140.7.
CVE-2025-13025	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	Nov 11, 2025	Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145.
CVE-2025-13016	Mozilla Corporation Firefox	Hig	0.49	7.5	0.00	Nov 11, 2025	Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.

CVE-2026-8963HigMay 19, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Spoofing issue in the Web Speech component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
CVE-2026-8960HigMay 19, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Spoofing issue in WebExtensions. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
CVE-2026-8954HigMay 19, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Incorrect boundary conditions, integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8949HigMay 19, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.01
Integer overflow in the Widget: Win32 component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8946HigMay 19, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.01
Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8945HigMay 19, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Sandbox escape in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 151.
CVE-2026-7320HigApr 28, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Information disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.
CVE-2026-6786HigApr 26, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.01
Memory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This…
CVE-2026-6785HigApr 26, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.01
Memory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary…
CVE-2026-6784HigApr 21, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Memory safety bugs present in Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150 and…
CVE-2026-6782HigApr 21, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Information disclosure in the IP Protection component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
CVE-2026-6781HigApr 21, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
CVE-2026-6780HigApr 21, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
CVE-2026-6773HigApr 21, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Denial-of-service due to integer overflow in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
CVE-2026-6772HigApr 21, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-6766HigApr 21, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-6759HigApr 21, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Use-after-free in the Widget: Cocoa component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-6758HigApr 21, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.01
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
CVE-2026-6756HigApr 21, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Mitigation bypass in Firefox for Android. This vulnerability was fixed in Firefox 150.
CVE-2026-6754HigApr 21, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-6749HigApr 21, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Information disclosure due to uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-6747HigApr 21, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Use-after-free in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-6746HigApr 21, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.01
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-4727HigMar 24, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.01
Denial-of-service in the Libraries component in NSS. This vulnerability was fixed in Firefox 149 and Thunderbird 149.
CVE-2026-4726HigMar 24, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.01
Denial-of-service in the XML component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.
CVE-2026-4719HigMar 24, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4714HigMar 24, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4713HigMar 24, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4712HigMar 24, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Information disclosure in the Widget: Cocoa component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4709HigMar 24, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4708HigMar 24, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4707HigMar 24, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.01
Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4706HigMar 24, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4704HigMar 24, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Denial-of-service in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4699HigMar 24, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.01
Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4697HigMar 24, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.01
Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4695HigMar 24, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.01
Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4694HigMar 24, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.01
Incorrect boundary conditions, integer overflow in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4693HigMar 24, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.01
Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4686HigMar 24, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.01
Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4685HigMar 24, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.01
Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4684HigMar 24, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Race condition, use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-2803HigFeb 24, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Information disclosure, mitigation bypass in the Settings UI component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
CVE-2026-2801HigFeb 24, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
CVE-2026-2794HigFeb 24, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 148.
CVE-2026-2783HigFeb 24, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-0889HigJan 13, 2026
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.01
Denial-of-service in the DOM: Service Workers component. This vulnerability was fixed in Firefox 147 and Thunderbird 147.
CVE-2025-14327HigDec 9, 2025
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Spoofing issue in the Downloads Panel component. This vulnerability was fixed in Firefox 146, Thunderbird 146, Firefox ESR 140.7, and Thunderbird 140.7.
CVE-2025-13025HigNov 11, 2025
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145.
CVE-2025-13016HigNov 11, 2025
Mozilla Corporation
Firefox
risk 0.49cvss 7.5epss 0.00
Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.

Page 23 of 76