mozilla has 720 CVEs on record between 2016 and 2026. Disclosure cadence is accelerating: 436 in the last 90 days against 62 in the 90 before. The busiest recent month was October 2026 with 265. The median CVSS is 8.1 (high), with 122 rated critical. 0% have been exploited in the wild, in line with the corpus average. The dominant weakness classes are CWE-416 (108) and CWE-119 (56). Most affected products: Firefox (663), firefox_mobile (30), Thunderbird (19).

CVEs per month

Last 12 months, by publish date

1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11

Exploited share: 0% vs 1% corpus
Median CVSS: 8.1
Publish → KEV: —(1)
Last 90 days: 436 prev 62

Weakness classes

Products

Firefox 663
firefox_mobile 30
Thunderbird 19
Firefox for iOS 4
firefox_focus 2
Node-convict 1

Follow mozilla:RSS feed Save a search →Embed badge ↗

720

Total CVEs

122

Critical

3

CISA KEV

3

Exploited

Worst active — by depth score

mozilla vulnerabilities

CVEs affecting mozilla, newest first. Open any entry for full detail, references, and exploit status.

720 CVEsRSS

CVE-2026-117971None

Sandbox escape due to use-after-free in the Print Preview component

Sandbox escape due to use-after-free in the Print Preview component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.19%via CVEORG

CVE-2026-117978None

Incorrect boundary conditions in the Graphics component

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.19%via CVEORG

CVE-2026-117965None

Same-origin policy bypass in the Address Bar component

Same-origin policy bypass in the Address Bar component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.19%via CVEORG

CVE-2026-117968None

Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.19%via CVEORG

CVE-2026-117967None

Mitigation bypass in the DOM: Security component

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.19%via CVEORG

CVE-2026-117973None

Use-after-free in the Networking: DNS component

Use-after-free in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.18%via CVEORG

CVE-2026-117966None

Site isolation issue in the Networking: HTTP component

Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.19%via CVEORG

CVE-2026-117970None

Race condition in the Disability Access APIs component

Race condition in the Disability Access APIs component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.18%via CVEORG

CVE-2026-117962None

Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component

Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.18%via CVEORG

CVE-2026-117969None

Invalid pointer in the JavaScript Engine: JIT component

Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.18%via CVEORG

CVE-2026-117963None

Incorrect boundary conditions in the DOM: Service Workers component

Incorrect boundary conditions in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.18%via CVEORG

CVE-2026-117964None

Use-after-free in the Panning and Zooming component

Use-after-free in the Panning and Zooming component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.18%via CVEORG

CVE-2026-117958None

Site isolation issue in the Networking: HTTP component

Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.18%via CVEORG

CVE-2026-117956None

Invalid pointer in the Nimbus Desktop Client component

Invalid pointer in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.18%via CVEORG

CVE-2026-117955None

JIT miscompilation in the JavaScript: WebAssembly component

JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.18%via CVEORG

CVE-2026-117954None

Use-after-free in the Layout: Positioned component

Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.19%via CVEORG

CVE-2026-117961None

Incorrect boundary conditions in the Layout: Text and Fonts component

Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.18%via CVEORG

CVE-2026-117960None

Spoofing issue in the DOM: Core & HTML component

Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.18%via CVEORG

CVE-2026-117959None

Site isolation issue in the DOM: Service Workers component

Site isolation issue in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.18%via CVEORG

CVE-2026-117951None

Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.19%via CVEORG

CVE-2026-117953None

Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.18%via CVEORG

CVE-2026-117952None

Uninitialized memory in the Networking component

Uninitialized memory in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.19%via CVEORG

CVE-2026-117957None

Cryptographic issue in the WebRTC: Networking component

Cryptographic issue in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.18%via CVEORG

CVE-2026-117950None

Incorrect boundary conditions in the DOM: Core & HTML component

Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.19%via CVEORG

CVE-2026-117949None

Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.19%via CVEORG

CVE-2026-117947None

Use-after-free in the XML component

Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.18%via CVEORG

CVE-2026-117948None

Use-after-free in the SVG component

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.19%via CVEORG

CVE-2026-117946None

Incorrect boundary conditions in the JavaScript Engine component

Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.19%via CVEORG

CVE-2026-117944None

Use-after-free in the Layout component

Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.19%via CVEORG

CVE-2026-117943None

Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

▾ SunlitMozilla · FirefoxEPSS 0.19%via CVEORG

mozilla vulnerabilities (CVEs) — page 3 · VulnSea