Known Vulnerabilities for products from Mozilla
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Mozilla".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-41512 json | ai-scanner is an AI model safety scanner built on NVIDIA garak. From version 1.0.0 to before version 1.4.1, there is a remote... | Not Provided | 2026-05-08 | 2026-05-11 |
| CVE-2026-41431 json | Not Provided | 2026-05-11 | 2026-05-11 | |
| CVE-2026-24869 json | Use-after-free in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 147.0.2. | Not Provided | 2026-01-27 | 2026-04-13 |
| CVE-2026-24868 json | Mitigation bypass in the Privacy: Anti-Tracking component. This vulnerability was fixed in Firefox 147.0.2. | Not Provided | 2026-01-27 | 2026-04-13 |
| CVE-2026-8391 json | Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150.0.3. | Not Provided | 2026-05-12 | 2026-05-13 |
| CVE-2026-8390 json | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150.0.3. | Not Provided | 2026-05-12 | 2026-05-14 |
| CVE-2026-8389 json | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3. | Not Provided | 2026-05-12 | 2026-05-13 |
| CVE-2026-8388 json | Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3. | Not Provided | 2026-05-12 | 2026-05-12 |
| CVE-2026-8094 json | Other issue in the WebRTC component. This vulnerability was fixed in Firefox ESR 140.10.2 and Thunderbird 140.10.2. | Not Provided | 2026-05-07 | 2026-05-11 |
| CVE-2026-8093 json | Memory safety bugs present in Thunderbird 150.0.1. Some of these bugs showed evidence of memory corruption and we presume tha... | Not Provided | 2026-05-07 | 2026-05-11 |
| CVE-2026-8092 json | Memory safety bugs present in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1. Some of these bugs showed evidence of memory ... | Not Provided | 2026-05-07 | 2026-05-11 |
| CVE-2026-8091 json | Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150, Thunderbir... | Not Provided | 2026-05-07 | 2026-05-11 |
| CVE-2026-8090 json | Use-after-free in the DOM: Networking component. This vulnerability was fixed in Firefox 150.0.2, Firefox ESR 140.10.2, Firef... | Not Provided | 2026-05-07 | 2026-05-08 |
| CVE-2026-7324 json | Memory safety bugs present in Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume tha... | Not Provided | 2026-04-28 | 2026-05-01 |
| CVE-2026-7323 json | Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory ... | Not Provided | 2026-04-28 | 2026-04-30 |
| CVE-2026-7322 json | Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory ... | Not Provided | 2026-04-28 | 2026-05-01 |
| CVE-2026-7321 json | Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Fire... | Not Provided | 2026-04-28 | 2026-05-01 |
| CVE-2026-7320 json | Information disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Fir... | Not Provided | 2026-04-28 | 2026-05-01 |
| CVE-2026-6786 json | Memory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs s... | Not Provided | 2026-04-26 | 2026-04-28 |
| CVE-2026-6785 json | Memory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. ... | Not Provided | 2026-04-26 | 2026-04-28 |
Known software with vulnerabilities from Mozilla
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Mozilla | Bleach | 0.1.2 |
| Application | Mozilla | Bonsai | - |
| Application | Mozilla | Bugzilla | - |
| Application | Mozilla | Camino | - |
| Application | Mozilla | Durian Web Application Server | - |
| Application | Mozilla | Firefox | - |
| Operating System | Mozilla | Firefoxos | 1.2 |
| Application | Mozilla | Firefox Esr | 10.0 |
| Application | Mozilla | Firefox Mobile | 1.0 |
| Operating System | Mozilla | Firefox Os | - |
| Application | Mozilla | Gecko | - |
| Application | Mozilla | Mozilla | - |
| Application | Mozilla | Mozilla Mail | - |
| Application | Mozilla | Mozilla Suite | - |
| Application | Mozilla | Mozjpeg | 0.0.90 |
| Application | Mozilla | Netscape Portable Runtime | 4.1.1 |
| Application | Mozilla | Network Security Services | - |
| Application | Mozilla | Nss | 3.1 |
| Application | Mozilla | Nunjucks | 0.1.0 |
| Application | Mozilla | Persona | 7.x-1.0 |