mozilla has 718 CVEs on record between 2016 and 2026. Disclosure cadence is accelerating: 436 in the last 90 days against 67 in the 90 before. The busiest recent month was October 2026 with 265. The median CVSS is 8.1 (high), with 121 rated critical. 0% have been exploited in the wild, in line with the corpus average. The dominant weakness classes are CWE-416 (108) and CWE-119 (56). Most affected products: Firefox (661), firefox_mobile (30), Thunderbird (19).

CVEs per month

Last 12 months, by publish date

1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11

Exploited share: 0% vs 1% corpus
Median CVSS: 8.1
Publish → KEV: —(1)
Last 90 days: 436 prev 67

Weakness classes

Products

Firefox 661
firefox_mobile 30
Thunderbird 19
Firefox for iOS 4
firefox_focus 2
Node-convict 1

Follow mozilla:RSS feed Save a search →Embed badge ↗

718

Total CVEs

121

Critical

3

CISA KEV

3

Exploited

Worst active — by depth score

mozilla vulnerabilities

CVEs affecting mozilla, newest first. Open any entry for full detail, references, and exploit status.

718 CVEsRSS

CVE-2026-118010None

Use-after-free in the Disability Access APIs component

Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

▾ SunlitMozilla · Firefoxvia CVEORG

CVE-2026-118004None

Incorrect boundary conditions in the CSS Transitions and Animations component

Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · Firefoxvia CVEORG

CVE-2026-118006None

Privilege escalation due to use-after-free in the WebRTC: Signaling component

Privilege escalation due to use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

▾ SunlitMozilla · Firefoxvia CVEORG

CVE-2026-118000None

Information disclosure in the Networking: HTTP component

Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · Firefoxvia CVEORG

CVE-2026-118002None

Information disclosure due to race condition in the Networking component

Information disclosure due to race condition in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · Firefoxvia CVEORG

CVE-2026-117997None

Sandbox escape due to use-after-free in the Widget component

Sandbox escape due to use-after-free in the Widget component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · Firefoxvia CVEORG

CVE-2026-117998None

Mitigation bypass in the DOM: Push Subscriptions component

Mitigation bypass in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · Firefoxvia CVEORG

CVE-2026-117989None

Use-after-free in the Graphics component

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · Firefoxvia CVEORG

CVE-2026-118003None

Information disclosure in the Networking: DNS component

Information disclosure in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · Firefoxvia CVEORG

CVE-2026-117995None

Privilege escalation in the DOM: UI Events & Focus Handling component

Privilege escalation in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · Firefoxvia CVEORG

CVE-2026-117994None

Use-after-free in the JavaScript: GC component

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · Firefoxvia CVEORG

CVE-2026-117992None

Information disclosure in the CSS Parsing and Computation component

Information disclosure in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · Firefoxvia CVEORG

CVE-2026-117996None

Incorrect boundary conditions in the WebRTC component

Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · Firefoxvia CVEORG

CVE-2026-117988None

Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · Firefoxvia CVEORG

CVE-2026-117987None

Use-after-free in the Graphics component

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · Firefoxvia CVEORG

CVE-2026-117984None

Incorrect boundary conditions in the Layout: Scrolling and Overflow component

Incorrect boundary conditions in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · Firefoxvia CVEORG

CVE-2026-117993None

Integer overflow in the Graphics: Text component

Integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · Firefoxvia CVEORG

CVE-2026-117991None

Incorrect boundary conditions in the Layout: Text and Fonts component

Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · Firefoxvia CVEORG

CVE-2026-117985None

Sandbox escape due to use-after-free in the Graphics component

Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · Firefoxvia CVEORG

CVE-2026-117990None

Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component

Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · Firefoxvia CVEORG

CVE-2026-117980None

Use-after-free in the Graphics component

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · Firefoxvia CVEORG

CVE-2026-117983None

Use-after-free in the Graphics component

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · Firefoxvia CVEORG

CVE-2026-117982None

Invalid pointer in the JavaScript Engine: JIT component

Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · Firefoxvia CVEORG

CVE-2026-117981None

Privilege escalation in the Toolkit component

Privilege escalation in the Toolkit component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · Firefoxvia CVEORG

CVE-2026-117974None

Use-after-free in the XML component

Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · Firefoxvia CVEORG

CVE-2026-117986None

Use-after-free in the Graphics component

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · Firefoxvia CVEORG

CVE-2026-117979None

Incorrect boundary conditions in the Graphics: WebRender component

Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · Firefoxvia CVEORG

CVE-2026-117977None

Other issue in the Console component

Other issue in the Console component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · Firefoxvia CVEORG

CVE-2026-117975None

Sandbox escape due to invalid pointer in the Graphics: WebRender component

Sandbox escape due to invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · Firefoxvia CVEORG

CVE-2026-117972None

Use-after-free in the Graphics component

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · Firefoxvia CVEORG

mozilla vulnerabilities (CVEs) — page 2 · VulnSea