Known Vulnerabilities for products from Mozilla
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Mozilla".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-75874 json | Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154 and Thunderbird 154. | Not Provided | 2026-08-18 | 2026-08-19 |
| CVE-2026-74990 json | Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed... | Not Provided | 2026-08-18 | 2026-08-19 |
| CVE-2026-74989 json | Internally found bugs present in Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security... | Not Provided | 2026-08-18 | 2026-08-20 |
| CVE-2026-74988 json | Internally found bugs present in Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corr... | Not Provided | 2026-08-18 | 2026-08-20 |
| CVE-2026-74987 json | Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed... | Not Provided | 2026-08-18 | 2026-08-19 |
| CVE-2026-74983 json | Mitigation bypass in the Data Loss Prevention component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Fir... | Not Provided | 2026-08-18 | 2026-08-19 |
| CVE-2026-74979 json | Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbi... | Not Provided | 2026-08-18 | 2026-08-20 |
| CVE-2026-74976 json | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, ... | Not Provided | 2026-08-18 | 2026-08-19 |
| CVE-2026-74974 json | Same-origin policy bypass in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.3... | Not Provided | 2026-08-18 | 2026-08-19 |
| CVE-2026-74973 json | Race condition, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Fi... | Not Provided | 2026-08-18 | 2026-08-19 |
| CVE-2026-74972 json | Information disclosure in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140... | Not Provided | 2026-08-18 | 2026-08-19 |
| CVE-2026-74971 json | Information disclosure in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 154, Firefox... | Not Provided | 2026-08-18 | 2026-08-19 |
| CVE-2026-74969 json | Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Fire... | Not Provided | 2026-08-18 | 2026-08-19 |
| CVE-2026-74968 json | Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Th... | Not Provided | 2026-08-18 | 2026-08-20 |
| CVE-2026-74967 json | Same-origin policy bypass in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 154, Firefox ESR 14... | Not Provided | 2026-08-18 | 2026-08-19 |
| CVE-2026-74965 json | Privilege escalation in the Shell Integration component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Fir... | Not Provided | 2026-08-18 | 2026-08-21 |
| CVE-2026-74964 json | Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.... | Not Provided | 2026-08-18 | 2026-08-19 |
| CVE-2026-74963 json | Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.... | Not Provided | 2026-08-18 | 2026-08-19 |
| CVE-2026-74962 json | Site isolation issue in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, F... | Not Provided | 2026-08-18 | 2026-08-19 |
| CVE-2026-74961 json | Side-channel in the Web Audio component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and... | Not Provided | 2026-08-18 | 2026-08-20 |
Known software with vulnerabilities from Mozilla
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Mozilla | Bleach | 0.1.2 |
| Application | Mozilla | Bonsai | - |
| Application | Mozilla | Bugzilla | - |
| Application | Mozilla | Camino | - |
| Application | Mozilla | Durian Web Application Server | - |
| Application | Mozilla | Firefox | - |
| Operating System | Mozilla | Firefoxos | 1.2 |
| Application | Mozilla | Firefox Esr | 10.0 |
| Application | Mozilla | Firefox Mobile | 1.0 |
| Operating System | Mozilla | Firefox Os | - |
| Application | Mozilla | Gecko | - |
| Application | Mozilla | Mozilla | - |
| Application | Mozilla | Mozilla Mail | - |
| Application | Mozilla | Mozilla Suite | - |
| Application | Mozilla | Mozjpeg | 0.0.90 |
| Application | Mozilla | Netscape Portable Runtime | 4.1.1 |
| Application | Mozilla | Network Security Services | - |
| Application | Mozilla | Nss | 3.1 |
| Application | Mozilla | Nunjucks | 0.1.0 |
| Application | Mozilla | Persona | 7.x-1.0 |