Read the docs

Mozilla

Records4205All Threatist records
Exploited (KEV)15In CISA KEV
CVSS critical1086CVSS 9.0–10.0
CVSS high1350CVSS 7.0–8.9

Exploited now

Mozilla records in CISA KEV
TI-2010-03577 Mozilla Multiple Products Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2025-10-06TI-2024-08981 Mozilla Firefox Use-After-Free Vulnerability Priority CRITICAL 100KEV 2024-10-15TI-2023-04799 Google Chromium libvpx Heap Buffer Overflow Vulnerability Priority CRITICAL 97KEV 2023-10-02TI-2023-04477 Google Chromium WebP Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 97KEV 2023-09-13TI-2016-07433 Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability Priority CRITICAL 90KEV 2023-06-22TI-2015-03773 Mozilla Firefox Security Feature Bypass Vulnerability Priority CRITICAL 97KEV 2022-05-25

Components

Products in the NVD configurations · select one to filter the records
Firefox 3445 records CRITICAL Thunderbird 2068 records CRITICAL Seamonkey 704 records CRITICAL Firefox Esr 487 records HIGH Thunderbird Esr 228 records CRITICAL Bugzilla 145 records MEDIUM Mozilla 108 records MEDIUM Firefox Mobile 87 records CRITICAL

Records

87 records in Firefox Mobile · all components

TI-2022-09832 CVE-2022-26486 · GHSA-h9vh-vxg7-xmhh

Use after free in Mozilla Firefox

Priority CRITICAL 100KEV

An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.02362 Published 2022-12-22 Partial fix · 97.0.2, 91.6.1 +2 CWE-416
TI-2022-09831 CVE-2022-26485 · GHSA-rj77-m66j-h24w

Use after free in Mozilla Firefox

Priority CRITICAL 97KEV

Removing an XSLT parameter during processing could have lead to an exploitable use-after-free.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.14261 Published 2022-12-22 Partial fix · 97.0.2, 91.6.1 +2 CWE-416
TI-2023-13905 CVE-2023-29537 · GHSA-cm5p-vcj3-gv4c

Race condition in Mozilla Firefox for Android

Priority HIGH 68

Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00556 Published 2023-06-02 Fixed in 112 CWE-362
TI-2022-13642 CVE-2022-31746 · GHSA-5mgf-9mwf-m64w

Information disclosure in Mozilla Firefox for iOS

Priority MEDIUM 62

Internal URLs are protected by a secret UUID key, which could have been leaked to web page through the Referrer header.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00443 Published 2022-12-22 Fixed in 102 CWE-200
TI-2023-13906 CVE-2023-29538 · GHSA-5mrh-6gmv-vc85

Exposure of resource to wrong sphere in Mozilla Firefox for Android

Priority MEDIUM 53

Under specific circumstances a WebExtension may have received a <code>jar:file:///</code> URI instead of a <code>moz-extension:///</code> URI during a load request.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.004 Published 2023-06-02 Fixed in 112 CWE-668
TI-2012-01032 CVE-2012-1126 · GHSA-rjgx-9m76-3q4j

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other…

Priority MEDIUM 51

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbi…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05574 Published 2012-04-25 Fixed CWE-119
TI-2026-57856 CVE-2026-84135 · GHSA-f3fx-84gr-xjhw

Information disclosure in Mozilla Firefox

Priority MEDIUM 49

Other issue in Firefox Focus for Android.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00449 Published 2026-09-01 Fixed in 155 CWE-200
TI-2024-28782 CVE-2024-43111 · GHSA-cr8r-7g9p-hcx6

Cross-site scripting in Mozilla Firefox for iOS

Priority MEDIUM 49

Long pressing on a download link could potentially allow Javascript commands to be executed within the browser This vulnerability affects Firefox for iOS < 129.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00272 Published 2024-08-06 Fixed in 129 CWE-79
TI-2012-01050 CVE-2012-1144 · GHSA-r2w9-89x2-vccf

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other…

Priority MEDIUM 48

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arb…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04857 Published 2012-04-25 Fixed CWE-119
TI-2012-01044 CVE-2012-1138 · GHSA-xmrp-mwjr-xmr4

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other…

Priority MEDIUM 48

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbi…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04748 Published 2012-04-25 No fix listed CWE-119
TI-2012-01041 CVE-2012-1135 · GHSA-9x94-g4g3-xvx3

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other…

Priority MEDIUM 48

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbi…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04748 Published 2012-04-25 No fix listed CWE-119
TI-2012-01039 CVE-2012-1133 · GHSA-9wgx-qrcm-5pv8

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other…

Priority MEDIUM 48

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arb…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04748 Published 2012-04-25 No fix listed CWE-119
TI-2012-01034 CVE-2012-1128 · GHSA-9mrf-rm77-2g6j

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other…

Priority MEDIUM 48

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and memory corruption) or possibly execute arbitra…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04622 Published 2012-04-25 No fix listed CWE-119
TI-2012-01048 CVE-2012-1142 · GHSA-h582-2pv5-7gjm

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other…

Priority MEDIUM 47

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arb…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03801 Published 2012-04-25 Fixed CWE-119
TI-2012-01047 CVE-2012-1141 · GHSA-p74p-hrj9-8v93

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other…

Priority MEDIUM 47

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbi…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0377 Published 2012-04-25 Fixed CWE-119
TI-2012-01046 CVE-2012-1140 · GHSA-wcf5-qfp2-773g

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other…

Priority MEDIUM 47

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbi…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0377 Published 2012-04-25 Fixed CWE-119
TI-2012-01043 CVE-2012-1137 · GHSA-4xr7-m8pw-2h45

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other…

Priority MEDIUM 47

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbi…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0377 Published 2012-04-25 Fixed CWE-119
TI-2012-01042 CVE-2012-1136 · GHSA-whgh-75v6-65qp

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other…

Priority MEDIUM 47

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arb…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0377 Published 2012-04-25 Fixed CWE-119
TI-2012-01040 CVE-2012-1134 · GHSA-h252-9mw9-6mg2

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other…

Priority MEDIUM 47

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arb…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04583 Published 2012-04-25 Fixed CWE-119
TI-2012-01038 CVE-2012-1132 · GHSA-5f29-p234-6p39

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other…

Priority MEDIUM 47

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbi…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0377 Published 2012-04-25 Fixed CWE-119
Load more
Open these records in search →