Known Vulnerabilities for products from Mozilla
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Mozilla".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-84642 json | The values of the mail.allowed_attachment_hostnames advanced config setting were used in a regular expression without escapin... | Not Provided | 2026-09-01 | 2026-09-03 |
| CVE-2026-84641 json | A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents... | Not Provided | 2026-09-01 | 2026-09-03 |
| CVE-2026-84640 json | A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in... | Not Provided | 2026-09-01 | 2026-09-03 |
| CVE-2026-84639 json | Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixe... | Not Provided | 2026-09-01 | 2026-09-03 |
| CVE-2026-84637 json | Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows, bypas... | Not Provided | 2026-09-01 | 2026-09-03 |
| CVE-2026-84145 json | Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed... | Not Provided | 2026-09-01 | 2026-09-03 |
| CVE-2026-84144 json | Internally found bugs present in Thunderbird 154 and Thunderbird ESR 153.1. Some of these bugs showed evidence of memory corr... | Not Provided | 2026-09-01 | 2026-09-03 |
| CVE-2026-84143 json | Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed... | Not Provided | 2026-09-01 | 2026-09-03 |
| CVE-2026-84142 json | Internally found bugs present in Thunderbird 154. Some of these bugs showed evidence of memory corruption or another security... | Not Provided | 2026-09-01 | 2026-09-03 |
| CVE-2026-84141 json | Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunder... | Not Provided | 2026-09-01 | 2026-09-03 |
| CVE-2026-84140 json | Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunde... | Not Provided | 2026-09-01 | 2026-09-03 |
| CVE-2026-84139 json | Clickjacking issue in the DOM: Events component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird ... | Not Provided | 2026-09-01 | 2026-09-03 |
| CVE-2026-84138 json | Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 155 and Thunderbird 155. | Not Provided | 2026-09-01 | 2026-09-03 |
| CVE-2026-84137 json | Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird... | Not Provided | 2026-09-01 | 2026-09-03 |
| CVE-2026-84136 json | Other issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155... | Not Provided | 2026-09-01 | 2026-09-03 |
| CVE-2026-84135 json | Other issue in Firefox Focus for Android. This vulnerability was fixed in Firefox 155. | Not Provided | 2026-09-01 | 2026-09-03 |
| CVE-2026-84134 json | Other issue in the Profile Backup component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155,... | Not Provided | 2026-09-01 | 2026-09-03 |
| CVE-2026-84133 json | Site isolation issue in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2... | Not Provided | 2026-09-01 | 2026-09-03 |
| CVE-2026-84132 json | Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thu... | Not Provided | 2026-09-01 | 2026-09-03 |
| CVE-2026-84131 json | Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155, Firefox E... | Not Provided | 2026-09-01 | 2026-09-03 |
Known software with vulnerabilities from Mozilla
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Mozilla | Bleach | 0.1.2 |
| Application | Mozilla | Bonsai | - |
| Application | Mozilla | Bugzilla | - |
| Application | Mozilla | Camino | - |
| Application | Mozilla | Durian Web Application Server | - |
| Application | Mozilla | Firefox | - |
| Operating System | Mozilla | Firefoxos | 1.2 |
| Application | Mozilla | Firefox Esr | 10.0 |
| Application | Mozilla | Firefox Mobile | 1.0 |
| Operating System | Mozilla | Firefox Os | - |
| Application | Mozilla | Gecko | - |
| Application | Mozilla | Mozilla | - |
| Application | Mozilla | Mozilla Mail | - |
| Application | Mozilla | Mozilla Suite | - |
| Application | Mozilla | Mozjpeg | 0.0.90 |
| Application | Mozilla | Netscape Portable Runtime | 4.1.1 |
| Application | Mozilla | Network Security Services | - |
| Application | Mozilla | Nss | 3.1 |
| Application | Mozilla | Nunjucks | 0.1.0 |
| Application | Mozilla | Persona | 7.x-1.0 |