MO
Vendor
Mozilla
7,496
CVEs
58
On KEV
156
New 30D
Products
FI10.0
Firefox
Browser
3,445 CVEs15 on KEV77 new
TH10.0
Thunderbird
Mozilla
2,073 CVEs14 on KEV77 new
FM9.8
Firefox Mobile
Mozilla
87 CVEs2 on KEV1 new
FE10.0
Firefox ESR
Mozilla
506 CVEs9 on KEV0 new
NO7.5
Node-convict
Mozilla
1 CVEs0 on KEV1 new
FA10.0
Firefox and Thunderbird
Mozilla
6 CVEs6 on KEV0 new
TE9.8
Thunderbird Esr
Mozilla
228 CVEs2 on KEV0 new
FF9.8
Firefox Focus
Mozilla
20 CVEs2 on KEV0 new
FO9.6
Focus
Mozilla
18 CVEs2 on KEV0 new
FF9.6
Firefox for Android
Mozilla
2 CVEs2 on KEV0 new
SE9.8
Seamonkey
Mozilla
704 CVEs1 on KEV0 new
FO8.8
Firefox OS
Mozilla
14 CVEs1 on KEV0 new
FF7.5
Firefox, Firefox ESR, and Thunderbird
Mozilla
1 CVEs1 on KEV0 new
MP9.8
Multiple Products
Mozilla
1 CVEs1 on KEV0 new
BU8.8
Bugzilla
Mozilla
145 CVEs0 on KEV0 new
MO9.8
Mozilla
Mozilla
108 CVEs0 on KEV0 new
NS9.8
Network Security Services
Mozilla
50 CVEs0 on KEV0 new
MS–
Mozilla Suite
Mozilla
27 CVEs0 on KEV0 new
NS9.8
nss
Mozilla
7 CVEs0 on KEV0 new
BL9.8
Bleach
Mozilla
5 CVEs0 on KEV0 new
BO–
Bonsai
Mozilla
4 CVEs0 on KEV0 new
CA–
Camino
Mozilla
4 CVEs0 on KEV0 new
VP7.8
Vpn
Mozilla
4 CVEs0 on KEV0 new
CO9.8
Convict
Mozilla
3 CVEs0 on KEV0 new
NP8.6
Netscape Portable Runtime
Mozilla
3 CVEs0 on KEV0 new
GE8.8
Geckodriver
Mozilla
2 CVEs0 on KEV0 new
MO8.1
Mozjpeg
Mozilla
2 CVEs0 on KEV0 new
NU6.1
Nunjucks
Mozilla
2 CVEs0 on KEV0 new
PO6.1
Pollbot
Mozilla
2 CVEs0 on KEV0 new
WG6.1
Webthings Gateway
Mozilla
2 CVEs0 on KEV0 new
0S9.9
0din Scanner
Mozilla
1 CVEs0 on KEV0 new
CV6.1
Common Voice
Mozilla
1 CVEs0 on KEV0 new
DW–
Durian Web Application Server
Mozilla
1 CVEs0 on KEV0 new
FI–
Firefoxos
Mozilla
1 CVEs0 on KEV0 new
FF4.7
Focus for iOS
Mozilla
1 CVEs0 on KEV0 new
GE–
Geckb
Mozilla
1 CVEs0 on KEV0 new
GE–
Gecko
Mozilla
1 CVEs0 on KEV0 new
HA7.5
Hawk
Mozilla
1 CVEs0 on KEV0 new
HC6.1
Hubs Cloud
Mozilla
1 CVEs0 on KEV0 new
HC9.8
Hubs Cloud Reticulum
Mozilla
1 CVEs0 on KEV0 new
KL7.5
Klar
Mozilla
1 CVEs0 on KEV0 new
LI–
Libxul
Mozilla
1 CVEs0 on KEV0 new
MV9.8
Mozilla Vpn
Mozilla
1 CVEs0 on KEV0 new
NE6.5
Neqo
Mozilla
1 CVEs0 on KEV0 new
NE9.8
Nss Esr
Mozilla
1 CVEs0 on KEV0 new
PE8.8
Persona
Mozilla
1 CVEs0 on KEV0 new
RH7.5
Rhino
Mozilla
1 CVEs0 on KEV0 new
SC7.8
Sccache
Mozilla
1 CVEs0 on KEV0 new
TH5.1
Thin-vec
Mozilla
1 CVEs0 on KEV0 new
ZA7.4
Zamboni
Mozilla
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-106550 | NO Node-convict Mozilla | 7.5 | Oct 6 | Mozilla's Node-convict (version 6.2.2 and later) is vulnerable to a Denial of Service vulnerability caused by incomplete prototype‑pollution protections in config.set() |
| CVE-2026-106016 | FI Firefox Mozilla | 9.8 | Oct 6 | Mitigation bypass in the File Handling component |
| CVE-2026-103500 | TH Thunderbird Mozilla | 6.1 | Sep 30 | Heap buffer overflow opening large email |
| CVE-2026-100832 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the Graphics: Canvas2D component |
| CVE-2026-100831 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the DOM: UI Events & Focus Handling component |
| CVE-2026-100830 | FI Firefox Mozilla | 8.1 | Sep 29 | Mitigation bypass in the DOM: Navigation component |
| CVE-2026-100829 | FI Firefox Mozilla | 9.6 | Sep 29 | Mitigation bypass in the DOM: Security component |
| CVE-2026-100828 | FI Firefox Mozilla | 9.6 | Sep 29 | Mitigation bypass in the Bookmarks & History component |
| CVE-2026-100826 | FI Firefox Mozilla | 6.5 | Sep 29 | Denial-of-service in the Storage: StorageManager component |
| CVE-2026-100825 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the JavaScript Engine: JIT component |
| CVE-2026-100824 | FI Firefox Mozilla | 8.8 | Sep 29 | Privilege escalation in the Places component |
| CVE-2026-100823 | FM Firefox Mobile Mozilla | 5.4 | Sep 29 | Spoofing issue in the Downloads component in Firefox for Android |
| CVE-2026-100822 | FI Firefox Mozilla | 5.4 | Sep 29 | Spoofing issue in the Networking: HTTP component |
| CVE-2026-100821 | FI Firefox Mozilla | 4.7 | Sep 29 | Site isolation issue in the Panning and Zooming component |
| CVE-2026-100820 | FI Firefox Mozilla | 8.8 | Sep 29 | Privilege escalation in the Address Bar component |
| CVE-2026-100819 | FI Firefox Mozilla | 9.6 | Sep 29 | Sandbox escape due to incorrect boundary conditions in the XPCOM component |
| CVE-2026-100818 | FI Firefox Mozilla | 9.6 | Sep 29 | Sandbox escape due to use-after-free in the Widget: Gtk component |
| CVE-2026-100817 | FI Firefox Mozilla | 5.4 | Sep 29 | Other issue in the JavaScript: WebAssembly component |
| CVE-2026-100816 | FI Firefox Mozilla | 8.1 | Sep 29 | Site isolation issue in the DOM: Networking component |
| CVE-2026-100815 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the CSS Parsing and Computation component |
| CVE-2026-100814 | FI Firefox Mozilla | 8.8 | Sep 29 | Incorrect boundary conditions in the JavaScript Engine: JIT component |
| CVE-2026-100813 | FI Firefox Mozilla | 8.8 | Sep 29 | Invalid pointer in the JavaScript Engine: JIT component |
| CVE-2026-100812 | FI Firefox Mozilla | 6.5 | Sep 29 | Denial-of-service in the Graphics component |
| CVE-2026-100811 | FI Firefox Mozilla | 9.6 | Sep 29 | Sandbox escape due to use-after-free in the DOM: Core & HTML component |
| CVE-2026-100810 | FI Firefox Mozilla | 9.8 | Sep 29 | Other issue in the DevTools component |
| CVE-2026-100809 | FI Firefox Mozilla | 8.1 | Sep 29 | Same-origin policy bypass in the DevTools component |
| CVE-2026-100808 | FI Firefox Mozilla | 8.8 | Sep 29 | Mitigation bypass in the DOM: Service Workers component |
| CVE-2026-100807 | FI Firefox Mozilla | 8.8 | Sep 29 | Privilege escalation in the DOM: Service Workers component |
| CVE-2026-100806 | FI Firefox Mozilla | 4.3 | Sep 29 | Uninitialized memory in the Graphics: WebGPU component |
| CVE-2026-100805 | FI Firefox Mozilla | 7.5 | Sep 29 | Race condition, use-after-free in the Audio/Video component |
| CVE-2026-100804 | FI Firefox Mozilla | 9.6 | Sep 29 | Sandbox escape due to use-after-free in the Preferences: Backend component |
| CVE-2026-100803 | FI Firefox Mozilla | 8.1 | Sep 29 | Same-origin policy bypass in the WebExtensions component |
| CVE-2026-100802 | FI Firefox Mozilla | 4.3 | Sep 29 | Uninitialized memory in the Graphics: WebGPU component |
| CVE-2026-100801 | FI Firefox Mozilla | 8.8 | Sep 29 | Privilege escalation in the DLL Services component |
| CVE-2026-100800 | FI Firefox Mozilla | 9.6 | Sep 29 | Sandbox escape due to use-after-free in the Disability Access APIs component |
| CVE-2026-100799 | FI Firefox Mozilla | 4.3 | Sep 29 | Uninitialized memory in the Graphics: WebGPU component |
| CVE-2026-100798 | FI Firefox Mozilla | 8.1 | Sep 29 | Cryptography misuse in Storage: Quota Manager component |
| CVE-2026-100797 | FI Firefox Mozilla | 8.8 | Sep 29 | Privilege escalation due to use-after-free in the Graphics: WebRender component |
| CVE-2026-100796 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the JavaScript: WebAssembly component |
| CVE-2026-100795 | FI Firefox Mozilla | 6.5 | Sep 29 | Denial-of-service in the Networking component |
| CVE-2026-96869 | FI Firefox Mozilla | 4.3 | Sep 29 | Information disclosure in the Networking component |
| CVE-2026-100794 | FI Firefox Mozilla | 9.6 | Sep 29 | Sandbox escape due to incorrect boundary conditions in the Internationalization component |
| CVE-2026-100793 | FI Firefox Mozilla | 6.5 | Sep 29 | JIT miscompilation in the JavaScript Engine component |
| CVE-2026-100792 | FI Firefox Mozilla | 7.1 | Sep 29 | JIT miscompilation in the JavaScript: WebAssembly component |
| CVE-2026-100791 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the DOM: Core & HTML component |
| CVE-2026-100790 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the XSLT component |
| CVE-2026-100789 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the Graphics: Canvas2D component |
| CVE-2026-100788 | FI Firefox Mozilla | 9.8 | Sep 29 | Invalid pointer in the JavaScript: WebAssembly component |
| CVE-2026-100787 | FI Firefox Mozilla | 9.6 | Sep 29 | Sandbox escape in the XUL component |
| CVE-2026-100786 | FI Firefox Mozilla | 9.6 | Sep 29 | Sandbox escape due to use-after-free in the Graphics component |
| CVE-2026-100785 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the DOM: Core & HTML component |
| CVE-2026-100784 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the Layout: Text and Fonts component |
| CVE-2026-100783 | FI Firefox Mozilla | 4.3 | Sep 29 | Uninitialized memory in the Audio/Video component |
| CVE-2026-100782 | FI Firefox Mozilla | 8.8 | Sep 29 | Privilege escalation due to incorrect boundary conditions in the Graphics component |
| CVE-2026-100781 | FI Firefox Mozilla | 9.6 | Sep 29 | Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component |
| CVE-2026-100780 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the DOM: Core & HTML component |
| CVE-2026-100779 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the XSLT component |
| CVE-2026-100778 | FI Firefox Mozilla | 9.6 | Sep 29 | Sandbox escape due to use-after-free in the DOM: Core & HTML component |
| CVE-2026-100777 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the Graphics: Canvas2D component |
| CVE-2026-100776 | FI Firefox Mozilla | 8.8 | Sep 29 | Use-after-free in the JavaScript: WebAssembly component |