FI
Browser
Firefox
On CISA KEVExploited in the wildRansomware-linked
3,445
CVEs
15
On KEV
10.0
Max CVSS
77
New 30D
Severity mix
Critical 489High 10Medium 1Low 0
Watch
Add Firefox to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-5257 | 9.8 | Sep 22 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4 and Thunderbird < 45.4 allow remote attackers to cause a… Affected: through 48.0.2; 45.1.0; 45.1.1; 45.2.0; 45.3.0 |
| CVE-2016-5256 | 9.8 | Sep 22 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0 allow remote attackers to cause a denial of service (memory corruption and application… Affected: through 48.0.2 |
| CVE-2016-5254 | 9.8 | Aug 5 | Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows attackers to execute arbitrary code… Affected: through 47.0.1; 45.1.0; 45.1.1; 45.2.0; 45.3.0 |
| CVE-2016-0718 | 9.8 | May 26 | Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow Affected: before 48.0 |
| CVE-2016-1962 | 9.8 | Mar 13 | Use-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to… Affected: through 44.0.2; 38.0; 38.0.1; 38.0.5; 38.1.0; 38.1.1; +8 more |
| CVE-2016-1946 | 9.8 | Jan 31 | The MoofParser::Metadata function in binding/MoofParser.cpp in libstagefright in Mozilla Firefox before 44.0 does not limit the size of read operations, which might allow remote… Affected: through 43.0.4 |
| CVE-2016-1944 | 9.8 | Jan 31 | The Buffer11::NativeBuffer11::map function in ANGLE, as used in Mozilla Firefox before 44.0, might allow remote attackers to cause a denial of service (memory corruption) or… Affected: 43.0.4 |
| CVE-2016-1930 | 9.8 | Jan 31 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allow remote attackers to cause a denial of service… Affected: through 43.0.4; 38.0; 38.1.0; 38.2.0; 38.3.0; 38.4.0; +1 more |
| CVE-2015-7182 | 9.8 | Nov 5 | Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR… Affected: 38.0; 38.0.1; 38.0.5; 38.1.0; 38.1.1; 38.2.0; +3 more |
| CVE-2014-1532 | 9.8 | Apr 30 | Use-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul.so in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird… Affected: before 29.0; 24.0 before 24.5 |
| CVE-2014-1524 | 9.8 | Apr 30 | The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 does not… Affected: before 29.0; 24.0 before 24.5 |
| CVE-2014-1514 | 9.8 | Mar 19 | vmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not validate the length of the… Affected: before 28.0; 24.0 before 24.4 |
| CVE-2014-1511 | 9.8 | Mar 19 | Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via unspecified… Affected: before 28.0; 24.0 before 24.4 |
| CVE-2014-1510 | 9.8 | Mar 19 | The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute… Affected: before 28.0; 24.0 before 24.4 |
| CVE-2014-1493 | 9.8 | Mar 19 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow… Affected: before 28.0; 24.0 before 24.4 |
| CVE-2014-1486 | 9.8 | Feb 6 | Use-after-free vulnerability in the imgRequestProxy function in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24… Affected: before 27.0; 24.0 before 24.3 |
| CVE-2014-1477 | 9.8 | Feb 6 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow… Affected: before 27.0; 24.0 before 24.3 |
| CVE-2013-6671 | 9.8 | Dec 11 | The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers… Affected: before 26.0; 24.0 before 24.2 |
| CVE-2013-5618 | 9.8 | Dec 11 | Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor component in Mozilla Firefox before 26.0, Firefox ESR 24.x… Affected: before 26.0; 24.0 before 24.2 |
| CVE-2013-5616 | 9.8 | Dec 11 | Use-after-free vulnerability in the nsEventListenerManager::HandleEventSubType function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and… Affected: before 26.0; 24.0 before 24.2 |
| CVE-2013-5615 | 9.8 | Dec 11 | The JavaScript implementation in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 does not properly enforce certain… Affected: before 26.0; 24.0 before 24.2 |
| CVE-2013-5613 | 9.8 | Dec 11 | Use-after-free vulnerability in the PresShell::DispatchSynthMouseMove function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey… Affected: before 26.0; 24.0 before 24.2 |
| CVE-2013-5609 | 9.8 | Dec 11 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allow… Affected: before 26.0; 24.0 before 24.2 |
| CVE-2010-1205 | 9.8 | Jun 30 | Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG… Affected: before 3.5.11; 3.5.12 before 3.6.7 |
| CVE-2026-100829 | 9.6 | Sep 29 | Mitigation bypass in the DOM: Security component Affected: before 153.4.0; 154.0.0 before 157.0.0 |
| CVE-2026-100828 | 9.6 | Sep 29 | Mitigation bypass in the Bookmarks & History component Affected: before 153.4.0; 154.0.0 before 157.0.0 |
| CVE-2026-100819 | 9.6 | Sep 29 | Sandbox escape due to incorrect boundary conditions in the XPCOM component Affected: before 115.42.0; 116.0 before 140.17.0; 141.0 before 153.4.0; 154.0.0 before 157.0.0 |
| CVE-2026-100818 | 9.6 | Sep 29 | Sandbox escape due to use-after-free in the Widget: Gtk component Affected: before 140.17.0; 141.0 before 153.4.0; 154.0.0 before 157.0.0 |
| CVE-2026-100811 | 9.6 | Sep 29 | Sandbox escape due to use-after-free in the DOM: Core & HTML component Affected: before 140.17.0; 141.0 before 153.4.0; 154.0.0 before 157.0.0 |
| CVE-2026-100804 | 9.6 | Sep 29 | Sandbox escape due to use-after-free in the Preferences: Backend component Affected: before 157.0.0 |
| CVE-2026-100800 | 9.6 | Sep 29 | Sandbox escape due to use-after-free in the Disability Access APIs component Affected: before 153.4.0; 154.0.0 before 157.0.0 |
| CVE-2026-100794 | 9.6 | Sep 29 | Sandbox escape due to incorrect boundary conditions in the Internationalization component Affected: before 140.17.0; 141.0 before 153.4.0; 154.0.0 before 157.0.0 |
| CVE-2026-100787 | 9.6 | Sep 29 | Sandbox escape in the XUL component Affected: before 153.4.0; 154.0.0 before 157.0.0 |
| CVE-2026-100786 | 9.6 | Sep 29 | Sandbox escape due to use-after-free in the Graphics component Affected: before 115.42.0; 116.0 before 140.17.0; 141.0 before 153.4.0; 154.0.0 before 157.0.0 |
| CVE-2026-100781 | 9.6 | Sep 29 | Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component Affected: before 157.0.0; 115.1.0 before 115.42.0; 140.0 before 140.17.0; 153.0 before 153.4.0 |
| CVE-2026-100778 | 9.6 | Sep 29 | Sandbox escape due to use-after-free in the DOM: Core & HTML component Affected: 115.0.1 before 115.42.0; 140.0.0 before 140.17.0; 153.0 before 153.4.0; 154.0.0 before 157.0.0 |
| CVE-2026-100775 | 9.6 | Sep 29 | Sandbox escape in the Graphics component Affected: 115.0.1 before 115.42.0; 140.0.0 before 140.17.0; 153.0.0 before 153.4.0; 154.0.0 before 157.0.0 |
| CVE-2026-100770 | 9.6 | Sep 29 | Sandbox escape due to use-after-free in the DOM: Content Processes component Affected: 115.0 before 115.42.0; 140.0.0 before 140.17.0; 153.0.0 before 153.4.0; 154.0.0 before 157.0.0 |
| CVE-2026-100762 | 9.6 | Sep 29 | Sandbox escape due to use-after-free in the DOM: Content Processes component Affected: before 115.42.0; 116.0.0 before 140.17.0; 141.0.0 before 153.4.0; 154.0.0 before 157.0.0 |
| CVE-2026-100760 | 9.6 | Sep 29 | Sandbox escape in the Security: Process Sandboxing component Affected: before 153.4.0; 154.0.0 before 157.0.0 |
| CVE-2026-100758 | 9.6 | Sep 29 | Sandbox escape in the DOM: Navigation component Affected: before 115.42.0; 116.0.0 before 140.17.0; 141.0.0 before 153.4.0; 154.0.0 before 157.0.0 |
| CVE-2026-92071 | 9.6 | Sep 15 | Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component Affected: before 153.3.0; 154.0.0 before 156.0.0 |
| CVE-2026-92045 | 9.6 | Sep 15 | Sandbox escape due to incorrect boundary conditions in the WebRTC component Affected: before 153.3.0; 154.0.0 before 156.0.0 |
| CVE-2026-92035 | 9.6 | Sep 15 | Sandbox escape due to incorrect boundary conditions in the Graphics component Affected: before 115.42.0; 116.0 before 140.17.0; 141.0 before 153.3.0; 154.0.0 before 156.0.0 |
| CVE-2026-92032 | 9.6 | Sep 15 | Sandbox escape due to invalid pointer in the Graphics component Affected: before 140.16.0; 141.0 before 153.3.0; 154.0.0 before 156.0.0 |
| CVE-2026-92018 | 9.6 | Sep 15 | Sandbox escape in the DOM: Core & HTML component Affected: before 115.41.0; 116.0 before 140.16.0; 141.0 before 153.3.0; 154.0.0 before 156.0.0 |
| CVE-2026-84121 | 9.6 | Sep 1 | Sandbox escape due to use-after-free in the DOM: Security component Affected: before 115.40.0; 116.0 before 140.15.0; 141.0.0 before 153.2.0; 154.0.0 before 155.0.0 |
| CVE-2026-84119 | 9.6 | Sep 1 | Sandbox escape due to use-after-free in the DOM: Navigation component Affected: before 115.40.0; 116.0 before 140.15.0; 141.0.0 before 153.2.0; 154.0.0 before 155.0.0 |
| CVE-2026-12297 | 9.6 | Jun 16 | Sandbox escape due to incorrect boundary conditions in the Networking component Affected: before 115.37.0; before 152.0.0; 128.0 before 140.12.0 |
| CVE-2026-12296 | 9.6 | Jun 16 | Sandbox escape in the Security: Process Sandboxing component Affected: before 140.12.0; before 152.0.0 |
The 500 most important CVEs for this product (exploited first, then by severity)