Mozilla has 722 CVEs on record between 2016 and 2026. Disclosure cadence is accelerating: 438 in the last 90 days against 62 in the 90 before. The busiest recent month was October 2026 with 265. The median CVSS is 8.1 (high), with 141 rated critical. 0% have been exploited in the wild, in line with the corpus average. The dominant weakness classes are CWE-416 (108) and CWE-119 (56). Most affected products: Firefox (665), firefox_mobile (30), Thunderbird (19).

CVEs per month

Last 12 months, by publish date

1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11

Exploited share: 0% vs 1% corpus
Median CVSS: 8.1
Publish → KEV: —(1)
Last 90 days: 438 prev 62

Weakness classes

Products

Firefox 665
firefox_mobile 30
Thunderbird 19
Firefox for iOS 4
firefox_focus 2
Node-convict 1

Follow Mozilla:RSS feed Save a search →Embed badge ↗

722

Total CVEs

141

Critical

3

CISA KEV

3

Exploited

Worst active — by depth score

Mozilla vulnerabilities

CVEs affecting Mozilla, newest first. Open any entry for full detail, references, and exploit status.

722 CVEsRSS

CVE-2026-100799Medium· 4.3

Uninitialized memory in the Graphics: WebGPU component

Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.

▾ SunlitMozilla · FirefoxEPSS 0.24%via NVD

CVE-2026-100798High· 8.1⚖ disputed

Cryptography misuse in Storage: Quota Manager component

Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

▾ TwilightMozilla · FirefoxEPSS 0.19%via NVD

CVE-2026-100797High· 8.8⚖ disputed

Privilege escalation due to use-after-free in the Graphics: WebRender component

Privilege escalation due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR …

▾ TwilightMozilla · FirefoxEPSS 0.25%via NVD

CVE-2026-100796High· 8.8

Use-after-free in the JavaScript: WebAssembly component

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.

▾ TwilightMozilla · FirefoxEPSS 0.28%via NVD

CVE-2026-100795Medium· 6.5

Denial-of-service in the Networking component

Denial-of-service in the Networking component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.

▾ SunlitMozilla · FirefoxEPSS 0.26%via NVD

CVE-2026-100794Critical· 9.6⚖ disputed

Sandbox escape due to incorrect boundary conditions in the Internationalization component

Sandbox escape due to incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

▾ MidnightMozilla · ThunderbirdEPSS 0.32%via NVD

CVE-2026-100793Medium· 6.5

JIT miscompilation in the JavaScript Engine component

JIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.

▾ SunlitMozilla · ThunderbirdEPSS 0.27%via NVD

CVE-2026-100792High· 7.1

JIT miscompilation in the JavaScript: WebAssembly component

JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

▾ TwilightMozilla · ThunderbirdEPSS 0.26%via NVD

CVE-2026-100791High· 8.8

Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

▾ TwilightMozilla · FirefoxEPSS 0.40%via NVD

CVE-2026-100790High· 8.8

Use-after-free in the XSLT component

Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

▾ TwilightMozilla · FirefoxEPSS 0.32%via NVD

CVE-2026-100789High· 8.8

Use-after-free in the Graphics: Canvas2D component

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

▾ TwilightMozilla · FirefoxEPSS 0.32%via NVD

CVE-2026-100788Critical· 9.8⚖ disputed

Invalid pointer in the JavaScript: WebAssembly component

Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

▾ MidnightMozilla · ThunderbirdEPSS 0.41%via NVD

CVE-2026-100787Critical· 9.6⚖ disputed

Sandbox escape in the XUL component

Sandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

▾ Midnightmozilla · firefoxEPSS 0.30%via NVD

CVE-2026-100786Critical· 9.6⚖ disputed

Sandbox escape due to use-after-free in the Graphics component

Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

▾ Midnightmozilla · firefoxEPSS 0.32%via NVD

CVE-2026-100785High· 8.8

Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

▾ Twilightmozilla · firefoxEPSS 0.32%via NVD

CVE-2026-100784High· 8.8

Use-after-free in the Layout: Text and Fonts component

Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

▾ Twilightmozilla · firefoxEPSS 0.33%via NVD

CVE-2026-100783Medium· 4.3⚖ disputed

Uninitialized memory in the Audio/Video component

Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

▾ Sunlitmozilla · firefoxEPSS 0.35%via NVD

CVE-2026-100782High· 8.8

Privilege escalation due to incorrect boundary conditions in the Graphics component

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox …

▾ Twilightmozilla · firefoxEPSS 0.26%via NVD

CVE-2026-100781Critical· 9.6⚖ disputed

Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component

Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Fir…

▾ Midnightmozilla · firefoxEPSS 0.33%via NVD

CVE-2026-100780High· 8.8

Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

▾ Twilightmozilla · firefoxEPSS 0.32%via NVD

CVE-2026-100779High· 8.8

Use-after-free in the XSLT component

Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

▾ Twilightmozilla · firefoxEPSS 0.33%via NVD

CVE-2026-100778Critical· 9.6⚖ disputed

Sandbox escape due to use-after-free in the DOM: Core & HTML component

Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

▾ Midnightmozilla · firefoxEPSS 0.32%via NVD

CVE-2026-100777High· 8.8

Use-after-free in the Graphics: Canvas2D component

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

▾ Twilightmozilla · firefoxEPSS 0.32%via NVD

CVE-2026-100776High· 8.8

Use-after-free in the JavaScript: WebAssembly component

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

▾ Twilightmozilla · firefoxEPSS 0.31%via NVD

CVE-2026-100775Critical· 9.6⚖ disputed

Sandbox escape in the Graphics component

Sandbox escape in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

▾ Midnightmozilla · firefoxEPSS 0.33%via NVD

CVE-2026-100774High· 8.8

Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

▾ Twilightmozilla · firefoxEPSS 0.32%via NVD

CVE-2026-100773High· 8.8

Use-after-free in the Storage: IndexedDB component

Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

▾ Twilightmozilla · firefoxEPSS 0.40%via NVD

CVE-2026-100772High· 8.8

Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

▾ Twilightmozilla · firefoxEPSS 0.31%via NVD

CVE-2026-100771High· 8.1

Undefined behavior in the DOM: Streams component

Undefined behavior in the DOM: Streams component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

▾ Twilightmozilla · firefoxEPSS 0.31%via NVD

CVE-2026-100770Critical· 9.6⚖ disputed

Sandbox escape due to use-after-free in the DOM: Content Processes component

Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140…

▾ Midnightmozilla · firefoxEPSS 0.32%via NVD

Mozilla vulnerabilities (CVEs) — page 11 · VulnSea