Known Vulnerabilities for products from Mozilla
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Mozilla".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-113812 json | Not Provided | 2026-10-20 | 2026-10-21 | |
| CVE-2026-106550 json | Not Provided | 2026-10-06 | 2026-10-07 | |
| CVE-2026-106016 json | Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1 and Thunderbird 158. | Not Provided | 2026-10-06 | 2026-10-13 |
| CVE-2026-103500 json | An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in siz... | Not Provided | 2026-09-30 | 2026-10-16 |
| CVE-2026-100832 json | Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Th... | Not Provided | 2026-09-29 | 2026-10-05 |
| CVE-2026-100831 json | Use-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbi... | Not Provided | 2026-09-29 | 2026-10-13 |
| CVE-2026-100830 json | Mitigation bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thund... | Not Provided | 2026-09-29 | 2026-10-13 |
| CVE-2026-100829 json | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunder... | Not Provided | 2026-09-29 | 2026-10-13 |
| CVE-2026-100828 json | Mitigation bypass in the Bookmarks & History component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, T... | Not Provided | 2026-09-29 | 2026-10-13 |
| CVE-2026-100826 json | Denial-of-service in the Storage: StorageManager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 15... | Not Provided | 2026-09-29 | 2026-10-13 |
| CVE-2026-100825 json | Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, T... | Not Provided | 2026-09-29 | 2026-10-13 |
| CVE-2026-100824 json | Privilege escalation in the Places component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird... | Not Provided | 2026-09-29 | 2026-10-13 |
| CVE-2026-100823 json | Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 157. | Not Provided | 2026-09-29 | 2026-10-05 |
| CVE-2026-100822 json | Spoofing issue in the Networking: HTTP component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunder... | Not Provided | 2026-09-29 | 2026-10-13 |
| CVE-2026-100821 json | Site isolation issue in the Panning and Zooming component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157... | Not Provided | 2026-09-29 | 2026-10-13 |
| CVE-2026-100820 json | Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunde... | Not Provided | 2026-09-29 | 2026-10-05 |
| CVE-2026-100819 json | Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4... | Not Provided | 2026-09-29 | 2026-10-05 |
| CVE-2026-100818 json | Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4, Thunder... | Not Provided | 2026-09-29 | 2026-10-05 |
| CVE-2026-100817 json | Other issue in the JavaScript: WebAssembly component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | Not Provided | 2026-09-29 | 2026-10-06 |
| CVE-2026-100816 json | Site isolation issue in the DOM: Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Th... | Not Provided | 2026-09-29 | 2026-10-05 |
Known software with vulnerabilities from Mozilla
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Mozilla | Bleach | 0.1.2 |
| Application | Mozilla | Bonsai | - |
| Application | Mozilla | Bugzilla | - |
| Application | Mozilla | Camino | - |
| Application | Mozilla | Durian Web Application Server | - |
| Application | Mozilla | Firefox | - |
| Operating System | Mozilla | Firefoxos | 1.2 |
| Application | Mozilla | Firefox Esr | 10.0 |
| Application | Mozilla | Firefox Mobile | 1.0 |
| Operating System | Mozilla | Firefox Os | - |
| Application | Mozilla | Gecko | - |
| Application | Mozilla | Mozilla | - |
| Application | Mozilla | Mozilla Mail | - |
| Application | Mozilla | Mozilla Suite | - |
| Application | Mozilla | Mozjpeg | 0.0.90 |
| Application | Mozilla | Netscape Portable Runtime | 4.1.1 |
| Application | Mozilla | Network Security Services | - |
| Application | Mozilla | Nss | 3.1 |
| Application | Mozilla | Nunjucks | 0.1.0 |
| Application | Mozilla | Persona | 7.x-1.0 |