Known Vulnerabilities for products from Mozilla
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Mozilla".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-41512 json | ai-scanner is an AI model safety scanner built on NVIDIA garak. From version 1.0.0 to before version 1.4.1, there is a remote... | Not Provided | 2026-05-08 | 2026-05-11 |
| CVE-2026-41431 json | Not Provided | 2026-05-11 | 2026-05-11 | |
| CVE-2026-24869 json | Use-after-free in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 147.0.2. | Not Provided | 2026-01-27 | 2026-04-13 |
| CVE-2026-24868 json | Mitigation bypass in the Privacy: Anti-Tracking component. This vulnerability was fixed in Firefox 147.0.2. | Not Provided | 2026-01-27 | 2026-04-13 |
| CVE-2026-9309 json | Firefox for iOS Reader View did not properly escape HTML tags in JSON-LD metadata. A malicious page could inject markup that ... | Not Provided | 2026-06-01 | 2026-06-03 |
| CVE-2026-9308 json | Firefox for iOS Reader View replaced page content in its HTML template before replacing other internal placeholders. A malici... | Not Provided | 2026-06-01 | 2026-06-03 |
| CVE-2026-9078 json | Firefox for iOS displayed specially crafted right-to-left (RTL) and internationalized domain names (IDNs) incorrectly in link... | Not Provided | 2026-05-25 | 2026-05-28 |
| CVE-2026-8975 json | Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of m... | Not Provided | 2026-05-19 | 2026-05-26 |
| CVE-2026-8974 json | Memory safety bugs present in Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and... | Not Provided | 2026-05-19 | 2026-05-26 |
| CVE-2026-8973 json | Memory safety bugs present in Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with e... | Not Provided | 2026-05-19 | 2026-05-26 |
| CVE-2026-8972 json | Privilege escalation in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. | Not Provided | 2026-05-19 | 2026-05-20 |
| CVE-2026-8971 json | Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. | Not Provided | 2026-05-19 | 2026-05-20 |
| CVE-2026-8970 json | Privilege escalation in the Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird ... | Not Provided | 2026-05-19 | 2026-05-20 |
| CVE-2026-8969 json | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. | Not Provided | 2026-05-19 | 2026-05-20 |
| CVE-2026-8968 json | Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 15... | Not Provided | 2026-05-19 | 2026-05-20 |
| CVE-2026-8967 json | Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. | Not Provided | 2026-05-19 | 2026-05-20 |
| CVE-2026-8966 json | Information disclosure in the IP Protection component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. | Not Provided | 2026-05-19 | 2026-05-20 |
| CVE-2026-8965 json | Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. | Not Provided | 2026-05-19 | 2026-05-20 |
| CVE-2026-8964 json | Spoofing issue in the Popup Blocker component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. | Not Provided | 2026-05-19 | 2026-05-20 |
| CVE-2026-8963 json | Spoofing issue in the Web Speech component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. | Not Provided | 2026-05-19 | 2026-05-20 |
Known software with vulnerabilities from Mozilla
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Mozilla | Bleach | 0.1.2 |
| Application | Mozilla | Bonsai | - |
| Application | Mozilla | Bugzilla | - |
| Application | Mozilla | Camino | - |
| Application | Mozilla | Durian Web Application Server | - |
| Application | Mozilla | Firefox | - |
| Operating System | Mozilla | Firefoxos | 1.2 |
| Application | Mozilla | Firefox Esr | 10.0 |
| Application | Mozilla | Firefox Mobile | 1.0 |
| Operating System | Mozilla | Firefox Os | - |
| Application | Mozilla | Gecko | - |
| Application | Mozilla | Mozilla | - |
| Application | Mozilla | Mozilla Mail | - |
| Application | Mozilla | Mozilla Suite | - |
| Application | Mozilla | Mozjpeg | 0.0.90 |
| Application | Mozilla | Netscape Portable Runtime | 4.1.1 |
| Application | Mozilla | Network Security Services | - |
| Application | Mozilla | Nss | 3.1 |
| Application | Mozilla | Nunjucks | 0.1.0 |
| Application | Mozilla | Persona | 7.x-1.0 |