Mozilla Firefox vulnerabilities
3,702 known vulnerabilities affecting mozilla/firefox.
Total CVEs
3,702
CISA KEV
15
actively exploited
Public exploits
126
Exploited in wild
34
Severity breakdown
CRITICAL981HIGH1095MEDIUM1343LOW68UNKNOWN215
Vulnerabilities
Page 30 of 186
CVE-2026-100815P3HIGHCVSS 8.8fixed in 153.4.0≥ 154.0.0, < 157.0.02026-09-29
CVE-2026-100815 [HIGH] CWE-416 CVE-2026-100815: Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox
Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
nvdmozilla
CVE-2026-100825P3HIGHCVSS 8.8fixed in 153.4.0≥ 154.0.0, < 157.0.02026-09-29
CVE-2026-100825 [HIGH] CWE-416 CVE-2026-100825: Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
nvdmozilla
CVE-2026-92056P3HIGHCVSS 8.8fixed in 153.3.0≥ 154.0.0, < 156.0.02026-09-15
CVE-2026-92056 [HIGH] CWE-416 CVE-2026-92056: Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 156, Firefox
Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
nvdmozilla
CVE-2026-92058P3HIGHCVSS 8.8fixed in 153.3.0≥ 154.0.0, < 156.0.02026-09-15
CVE-2026-92058 [HIGH] CWE-416 CVE-2026-92058: Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 1
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
nvdmozilla
CVE-2026-92067P3HIGHCVSS 8.8fixed in 153.3.0≥ 154.0.0, < 156.0.02026-09-15
CVE-2026-92067 [HIGH] CWE-416 CVE-2026-92067: Use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 156, Firefox ES
Use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
nvdmozilla
CVE-2026-92049P3HIGHCVSS 8.8fixed in 153.3.0≥ 154.0.0, < 156.0.02026-09-15
CVE-2026-92049 [HIGH] CWE-416 CVE-2026-92049: Use-after-free in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox
Use-after-free in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
nvdmozilla
CVE-2026-92060P3HIGHCVSS 8.8fixed in 153.3.0≥ 154.0.0, < 156.0.02026-09-15
CVE-2026-92060 [HIGH] CWE-416 CVE-2026-92060: Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 156, F
Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
nvdmozilla
CVE-2026-92055P3HIGHCVSS 8.8fixed in 153.3.0≥ 154.0.0, < 156.0.02026-09-15
CVE-2026-92055 [HIGH] CWE-269 CVE-2026-92055: Privilege escalation in the DevTools component. This vulnerability was fixed in Firefox 156, Firefox
Privilege escalation in the DevTools component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
nvdmozilla
CVE-2026-100761P3HIGHCVSS 8.8fixed in 157.0.02026-09-29
CVE-2026-100761 [HIGH] CWE-416 CVE-2026-100761: Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was
Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
nvdmozilla
CVE-2026-100824P3HIGHCVSS 8.8fixed in 153.4.0≥ 154.0.0, < 157.0.02026-09-29
CVE-2026-100824 [HIGH] CWE-269 CVE-2026-100824: Privilege escalation in the Places component. This vulnerability was fixed in Firefox ESR 153.4, Thu
Privilege escalation in the Places component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
nvdmozilla
CVE-2026-92074P3HIGHCVSS 8.8fixed in 153.3.0≥ 154.0.0, < 156.0.02026-09-15
CVE-2026-92074 [HIGH] CWE-693 CVE-2026-92074: Mitigation bypass in the Popup Blocker component. This vulnerability was fixed in Firefox 156, Firef
Mitigation bypass in the Popup Blocker component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
nvdmozilla
CVE-2026-92076P3HIGHCVSS 8.8fixed in 153.3.0≥ 154.0.0, < 156.0.02026-09-15
CVE-2026-92076 [HIGH] CWE-119 CVE-2026-92076: Incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 1
Incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
nvdmozilla
CVE-2024-4771P3HIGHCVSS 8.6fixed in 126.0≥ unspecified, < 1262024-05-14
CVE-2024-4771 [HIGH] CWE-416 CVE-2024-4771: A memory allocation check was missing which would lead to a use-after-free if the allocation failed.
A memory allocation check was missing which would lead to a use-after-free if the allocation failed. This could have triggered a crash or potentially be leveraged to achieve code execution. This vulnerability affects Firefox < 126.
nvdosv
CVE-2012-3962P3CRITICALCVSS 9.3v10.0v10.0.1+133 more2012-08-29
CVE-2012-3962 [CRITICAL] CVE-2012-3962: Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ES
Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly iterate through the characters in a text run, which allows remote attackers to execute arbitrary code via a crafted document.
nvd
CVE-2026-8958P3HIGHCVSS 8.6fixed in 140.11.0fixed in 151.0.02026-05-19
CVE-2026-8958 [HIGH] CWE-668 CVE-2026-8958: Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerabi
Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
nvdmozilla
CVE-2012-1953P3CRITICALCVSS 9.3v4.0v4.0.1+20 more2012-07-18
CVE-2012-1953 [CRITICAL] CWE-119 CVE-2012-1953: The ElementAnimations::EnsureStyleRuleFor function in Mozilla Firefox 4.x through 13.0, Firefox ESR
The ElementAnimations::EnsureStyleRuleFor function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (buffer over-read, incorrect pointer dereference, and heap-based buffer overflow) or po
nvd
CVE-2005-0989P4MEDIUMCVSS 5.0PoCv1.0.1v1.0.22005-05-02
CVE-2005-0989 [MEDIUM] CVE-2005-0989: The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1
The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method.
nvd
CVE-2014-1513P3HIGHCVSS 8.8fixed in 28.0≥ 24.0, < 24.42014-03-19
CVE-2014-1513 [HIGH] CWE-787 CVE-2014-1513: TypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird befor
TypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not prevent a zero-length transition during use of an ArrayBuffer object, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based out-of-bounds write or read) via a crafted we
nvd
CVE-2012-5835P3CRITICALCVSS 10.0fixed in 10.0.11fixed in 17.02012-11-21
CVE-2012-5835 [CRITICAL] CWE-190 CVE-2012-5835: Integer overflow in the WebGL subsystem in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0
Integer overflow in the WebGL subsystem in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (invalid write operation) via crafted data.
nvd
CVE-2024-5688P3HIGHCVSS 8.1fixed in 115.12fixed in 127.0+1 more2024-06-11
CVE-2024-5688 [HIGH] CWE-416 CVE-2024-5688: If a garbage collection was triggered at the right time, a use-after-free could have occurred during
If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.
nvd