Mozilla Firefox vulnerabilities
3,702 known vulnerabilities affecting mozilla/firefox.
Total CVEs
3,702
CISA KEV
15
actively exploited
Public exploits
126
Exploited in wild
34
Severity breakdown
CRITICAL981HIGH1095MEDIUM1343LOW68UNKNOWN215
Vulnerabilities
Page 20 of 186
CVE-2016-2814P3HIGHCVSS 8.8≤ 45.0.2v38.0+15 more2016-04-30
CVE-2016-2814 [HIGH] CWE-119 CVE-2016-2814: Heap-based buffer overflow in the stagefright::SampleTable::parseSampleCencInfo function in libstage
Heap-based buffer overflow in the stagefright::SampleTable::parseSampleCencInfo function in libstagefright in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allows remote attackers to execute arbitrary code via crafted CENC offsets that lead to mismanagement of the sizes table.
nvd
CVE-2024-11693P3CRITICALCVSS 9.8fixed in 128.5.0fixed in 133.0+1 more2024-11-26
CVE-2024-11693 [CRITICAL] CVE-2024-11693: The executable file warning was not presented when downloading .library-ms files. *Note: This issu
The executable file warning was not presented when downloading .library-ms files.
*Note: This issue only affected Windows operating systems. Other operating systems are unaffected.* This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.
nvd
CVE-2025-49709P3CRITICALCVSS 9.8fixed in 139.0.42025-06-11
CVE-2025-49709 [CRITICAL] CWE-787 CVE-2025-49709: Certain canvas operations could have lead to memory corruption. This vulnerability was fixed in Fire
Certain canvas operations could have lead to memory corruption. This vulnerability was fixed in Firefox 139.0.4.
nvd
CVE-2026-4723P3CRITICALCVSS 9.8fixed in 149.02026-03-24
CVE-2026-4723 [CRITICAL] CWE-416 CVE-2026-4723: Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 149 and T
Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.
nvd
CVE-2025-1016P3CRITICALCVSS 9.8fixed in 115.20.0fixed in 135.0+1 more2025-02-04
CVE-2025-1016 [CRITICAL] CWE-787 CVE-2025-1016: Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, T
Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 135, Firefo
nvd
CVE-2025-0242P3MEDIUMCVSS 6.5≤ 115.19.0fixed in 134.0+1 more2025-01-07
CVE-2025-0242 [MEDIUM] CWE-787 CVE-2025-0242: Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5, T
Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5, Thunderbird 115.18, and Thunderbird 128.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 134, Firefox
nvd
CVE-2016-2811P3HIGHCVSS 8.8≤ 45.0.22016-04-30
CVE-2016-2811 [HIGH] CVE-2016-2811: Use-after-free vulnerability in the ServiceWorkerInfo class in the Service Worker subsystem in Mozil
Use-after-free vulnerability in the ServiceWorkerInfo class in the Service Worker subsystem in Mozilla Firefox before 46.0 allows remote attackers to execute arbitrary code via vectors related to the BeginReading method.
nvdosv
CVE-2026-2781P3CRITICALCVSS 9.8fixed in 140.8.0fixed in 148.02026-02-24
CVE-2026-2781 [CRITICAL] CWE-190 CVE-2026-2781: Integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 148, Fir
Integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, Thunderbird 140.8, and Firefox ESR 115.35.
nvd
CVE-2026-84141P3CRITICALCVSS 9.8fixed in 153.2.0≥ 154.0.0, < 155.0.02026-09-01
CVE-2026-84141 [CRITICAL] CWE-190 CVE-2026-84141: Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 155, F
Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
nvdmozilla
CVE-2026-2795P3CRITICALCVSS 9.8fixed in 148.02026-02-24
CVE-2026-2795 [CRITICAL] CWE-416 CVE-2026-2795: Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thun
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
nvd
CVE-2016-1931P3CRITICALCVSS 10.0≤ 43.0.42016-01-31
CVE-2016-1931 [CRITICAL] CWE-119 CVE-2016-1931: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 allow remo
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to uninitialized memory encountered during brotli data compression, and other vectors.
nvdosv
CVE-2009-3985P4MEDIUMCVSS 6.8PoC≤ 3.0.15v0.1+97 more2009-12-17
CVE-2009-3985 [MEDIUM] CVE-2009-3985: Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote atta
Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to associate spoofed content with an invalid URL by setting document.location to this URL, and then writing arbitrary web script or HTML to the associated blank document, a related issue to CVE-2009-2654.
nvd
CVE-2026-12295P3CRITICALCVSS 9.6fixed in 115.37.0fixed in 152.0.0+1 more2026-06-16
CVE-2026-12295 [CRITICAL] CWE-693 CVE-2026-12295: Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefo
Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
nvdmozilla
CVE-2026-12294P3CRITICALCVSS 9.6fixed in 115.37.0fixed in 152.0.0+1 more2026-06-16
CVE-2026-12294 [CRITICAL] CWE-693 CVE-2026-12294: Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152, Firefox E
Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
nvdmozilla
CVE-2026-109780P3UNKNOWNfixed in Firefox 158
CVE-2026-109780 Mozilla Foundation Security Advisory 2026-106: CVE-2026-109780
Mozilla Foundation Security Advisory 2026-106
CVE: CVE-2026-109780
Product: Firefox
Impact: low
Fixed in: Firefox 158
mozilla
CVE-2026-100786P3CRITICALCVSS 9.6fixed in 115.42.0≥ 116.0, < 140.17.0+2 more2026-09-29
CVE-2026-100786 [CRITICAL] CWE-416 CVE-2026-100786: Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Fire
Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
nvdmozilla
CVE-2026-100762P3CRITICALCVSS 9.6fixed in 115.42.0≥ 116.0.0, < 140.17.0+2 more2026-09-29
CVE-2026-100762 [CRITICAL] CWE-416 CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was
Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
nvdmozilla
CVE-2026-100778P3CRITICALCVSS 9.6≥ 115.0.1, < 115.42.0≥ 140.0.0, < 140.17.0+2 more2026-09-29
CVE-2026-100778 [CRITICAL] CWE-416 CVE-2026-100778: Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed
Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
nvdmozilla
CVE-2026-100770P3CRITICALCVSS 9.6≥ 115.0, < 115.42.0≥ 140.0.0, < 140.17.0+2 more2026-09-29
CVE-2026-100770 [CRITICAL] CWE-416 CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was
Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
nvdmozilla
CVE-2026-84119P3CRITICALCVSS 9.6fixed in 115.40.0≥ 116.0, < 140.15.0+2 more2026-09-01
CVE-2026-84119 [CRITICAL] CWE-416 CVE-2026-84119: Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed
Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
nvdmozilla