vciy

CVEs we hold for Mozilla

Records whose assigning authority named Mozilla as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-96869Information disclosure in the Networking componentMozilla Firefox
CVE-2026-9309Arbitrary JavaScript execution in internal pages via Reader View JSON-LD injectionMozilla Firefox for iOS
CVE-2026-9308Arbitrary JavaScript execution in Reader View due to wrong HTML replacement orderMozilla Firefox for iOS
CVE-2026-92240Out-of-bounds read in IMAP response parserMozilla Thunderbird
CVE-2026-92239Buffer overrun in IMAPMozilla Thunderbird
CVE-2026-92238Ambiguous parsing of mail headersMozilla Thunderbird
CVE-2026-92079Mitigation bypass in the Widget: Win32 componentMozilla Thunderbird
CVE-2026-92078Denial-of-service in the Security componentMozilla Thunderbird
CVE-2026-92077Denial-of-service in the SVG componentMozilla Thunderbird
CVE-2026-92076Incorrect boundary conditions in the Networking componentMozilla Thunderbird
CVE-2026-92075Mitigation bypass in the Networking componentMozilla Thunderbird
CVE-2026-92074Mitigation bypass in the Popup Blocker componentMozilla Thunderbird
CVE-2026-92073Privilege escalation in the Enterprise Policies componentMozilla Thunderbird
CVE-2026-92072Incorrect boundary conditions in the Safe Browsing componentMozilla Thunderbird
CVE-2026-92071Sandbox escape due to incorrect boundary conditions in the Widget: Win32 componentMozilla Thunderbird
CVE-2026-92070Information disclosure in the Networking componentMozilla Thunderbird
CVE-2026-92069Spoofing issue in the DOM: Navigation componentMozilla Thunderbird
CVE-2026-92068Site isolation issue in the Reader Mode componentMozilla Thunderbird
CVE-2026-92067Use-after-free in the Widget: Gtk componentMozilla Thunderbird
CVE-2026-92066Sandbox escape in the Profile Backup componentMozilla Thunderbird
CVE-2026-92065Sandbox escape due to incorrect boundary conditions in the Widget: Win32 componentMozilla Thunderbird
CVE-2026-92064Sandbox escape due to incorrect boundary conditions in the Widget: Win32 componentMozilla Thunderbird
CVE-2026-92063Denial-of-service in the Audio/Video componentMozilla Thunderbird
CVE-2026-92062Privilege escalation in the Session Restore componentMozilla Thunderbird
CVE-2026-92061Incorrect boundary conditions in the Security: Process Sandboxing componentMozilla Thunderbird
CVE-2026-92060Use-after-free in the Internationalization componentMozilla Thunderbird
CVE-2026-92059Incorrect boundary conditions in the DOM: Editor componentMozilla Thunderbird
CVE-2026-92058Use-after-free in the Graphics componentMozilla Thunderbird
CVE-2026-92057Mitigation bypass in the Enterprise Policies componentMozilla Thunderbird
CVE-2026-92056Use-after-free in the Graphics: Text componentMozilla Thunderbird
CVE-2026-92055Privilege escalation in the DevTools componentMozilla Thunderbird
CVE-2026-92054Privilege escalation in the Memory componentMozilla Thunderbird
CVE-2026-92053Privilege escalation in the Graphics: CanvasWebGL componentMozilla Thunderbird
CVE-2026-92052Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL componentMozilla Thunderbird
CVE-2026-92051Spoofing issue due to invalid pointer in the Graphics componentMozilla Thunderbird
CVE-2026-92050Sandbox escape due to race condition in the XPConnect componentMozilla Thunderbird
CVE-2026-92049Use-after-free in the Widget: Win32 componentMozilla Thunderbird
CVE-2026-92048Sandbox escape due to incorrect boundary conditions in the Widget: Win32 componentMozilla Thunderbird
CVE-2026-92047Privilege escalation in the Crash Reporting componentMozilla Thunderbird
CVE-2026-92046Use-after-free in the Graphics componentMozilla Thunderbird
CVE-2026-92045Sandbox escape due to incorrect boundary conditions in the WebRTC componentMozilla Thunderbird
CVE-2026-92044Information disclosure in the Networking: HTTP componentMozilla Thunderbird
CVE-2026-92043Privilege escalation due to incorrect boundary conditions in the Audio/Video componentMozilla Thunderbird
CVE-2026-92042Race condition in the DOM: Content Processes componentMozilla Thunderbird
CVE-2026-92041Mitigation bypass in the DOM: Networking componentMozilla Thunderbird
CVE-2026-92040Use-after-free in the JavaScript: WebAssembly componentMozilla Thunderbird
CVE-2026-92039Mitigation bypass in the DOM: Notifications componentMozilla Thunderbird
CVE-2026-92038Mitigation bypass in the Remote Settings Client componentMozilla Thunderbird
CVE-2026-92037Incorrect boundary conditions in the DOM: Animation componentMozilla Thunderbird
CVE-2026-92036Incorrect boundary conditions in the Networking: HTTP componentMozilla Thunderbird
CVE-2026-92035Sandbox escape due to incorrect boundary conditions in the Graphics componentMozilla Thunderbird
CVE-2026-92034Site isolation issue in the Graphics componentMozilla Thunderbird
CVE-2026-92033Privilege escalation in Firefox for AndroidMozilla Firefox
CVE-2026-92032Sandbox escape due to invalid pointer in the Graphics componentMozilla Thunderbird
CVE-2026-92031Information disclosure in the Graphics: ImageLib componentMozilla Thunderbird
CVE-2026-92030Mitigation bypass in the DOM: Copy & Paste and Drag & Drop componentMozilla Thunderbird
CVE-2026-92029Use-after-free in the SVG componentMozilla Thunderbird
CVE-2026-92028Use-after-free in the DOM: Core & HTML componentMozilla Thunderbird
CVE-2026-92027Use-after-free in the DOM: Streams componentMozilla Thunderbird
CVE-2026-92026Use-after-free in the Networking componentMozilla Thunderbird
CVE-2026-92025Use-after-free in the DOM: Navigation componentMozilla Thunderbird
CVE-2026-92024Use-after-free in the SVG componentMozilla Thunderbird
CVE-2026-92023Use-after-free in the XML componentMozilla Thunderbird
CVE-2026-92022Use-after-free in the DOM: HTML Parser componentMozilla Thunderbird
CVE-2026-92021Use-after-free in the JavaScript Engine: JIT componentMozilla Thunderbird
CVE-2026-92020Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender componentMozilla Thunderbird
CVE-2026-92019Mitigation bypass in the Remote Settings Client componentMozilla Thunderbird
CVE-2026-92018Sandbox escape in the DOM: Core & HTML componentMozilla Thunderbird
CVE-2026-92017Privilege escalation in the DOM: Service Workers componentMozilla Thunderbird
CVE-2026-92016Use-after-free in the Disability Access APIs componentMozilla Thunderbird
CVE-2026-92015Privilege escalation in the WebExtensions componentMozilla Thunderbird
CVE-2026-92014Privilege escalation due to incorrect boundary conditions in the Graphics componentMozilla Thunderbird
CVE-2026-92013Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentMozilla Thunderbird
CVE-2026-92012Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentMozilla Thunderbird
CVE-2026-92011Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentMozilla Thunderbird
CVE-2026-92010Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentMozilla Thunderbird
CVE-2026-92009Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentMozilla Thunderbird
CVE-2026-92008Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentMozilla Thunderbird
CVE-2026-92007Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentMozilla Thunderbird
CVE-2026-92006Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentMozilla Thunderbird
CVE-2026-92005Use-after-free in the Audio/Video: Web Codecs componentMozilla Thunderbird
CVE-2026-9078Firefox iOS RTL Domain Rendering Issue in Link PreviewMozilla Firefox for iOS
CVE-2026-8975Memory safety bugs fixed in Firefox ESR 115.36, Firefox ESR 140.11 and Firefox 151Mozilla Thunderbird
CVE-2026-8974Memory safety bugs fixed in Firefox ESR 140.11 and Firefox 151Mozilla Thunderbird
CVE-2026-8973Memory safety bugs fixed in Firefox 151Mozilla Thunderbird
CVE-2026-8972Privilege escalation in the WebRTC: Audio/Video componentMozilla Thunderbird
CVE-2026-8971Same-origin policy bypass in the Networking: JAR componentMozilla Thunderbird
CVE-2026-8970Privilege escalation in the Security componentMozilla Thunderbird
CVE-2026-8969Mitigation bypass in the DOM: Security componentMozilla Thunderbird
CVE-2026-8968Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs componentMozilla Thunderbird
CVE-2026-8967Information disclosure in the Graphics: WebGPU componentMozilla Thunderbird
CVE-2026-8966Information disclosure in the IP Protection componentMozilla Thunderbird
CVE-2026-8965Information disclosure in the DOM: Security componentMozilla Thunderbird
CVE-2026-8964Spoofing issue in the Popup Blocker componentMozilla Thunderbird
CVE-2026-8963Spoofing issue in the Web Speech componentMozilla Thunderbird
CVE-2026-8962Mitigation bypass in the DOM: Security componentMozilla Thunderbird
CVE-2026-8961Spoofing issue in the Form Autofill componentMozilla Thunderbird
CVE-2026-8960Spoofing issue in WebExtensionsMozilla Thunderbird
CVE-2026-8959Sandbox escape due to incorrect boundary conditions in the Widget: Win32 componentMozilla Thunderbird
CVE-2026-8958Information disclosure, sandbox escape in the Security: Process Sandboxing componentMozilla Thunderbird
CVE-2026-8957Privilege escalation in the Enterprise Policies componentMozilla Thunderbird
CVE-2026-8956Integer overflow in the Networking: JAR componentMozilla Thunderbird
CVE-2026-8955Privilege escalation in the DOM: Workers componentMozilla Thunderbird
CVE-2026-8954Incorrect boundary conditions, integer overflow in the Audio/Video componentMozilla Thunderbird
CVE-2026-8953Sandbox escape due to use-after-free in the Disability Access APIs componentMozilla Thunderbird
CVE-2026-8952Privilege escalation in the Application Update componentMozilla Thunderbird
CVE-2026-8951Spoofing issue in the Toolbar component in Firefox for AndroidMozilla Firefox
CVE-2026-8950Same-origin policy bypass in the Networking: HTTP componentMozilla Thunderbird
CVE-2026-8949Integer overflow in the Widget: Win32 componentMozilla Thunderbird
CVE-2026-8948Same-origin policy bypass in the DOM: Networking componentMozilla Thunderbird
CVE-2026-8947Use-after-free in the DOM: Bindings (WebIDL) componentMozilla Thunderbird
CVE-2026-8946Incorrect boundary conditions in the Audio/Video: Web Codecs componentMozilla Thunderbird
CVE-2026-8945Sandbox escape in Firefox and Firefox Focus for AndroidMozilla Firefox
CVE-2026-8706Sensitive user data could be leaked to other applications through Reader modeMozilla Firefox for iOS
CVE-2026-86853Repeated external URL scheme launches could potentially cause a denial of service in Firefox for iOSMozilla Firefox for iOS
CVE-2026-84642Allowed UNC hostnames for attachments interpreted as a regular expressionMozilla Thunderbird
CVE-2026-84641Information disclosure due to malicious IMAP server responseMozilla Thunderbird
CVE-2026-84640One byte overflow read in mail parserMozilla Thunderbird
CVE-2026-84639Uninitialized memory in MIME parsingMozilla Thunderbird
CVE-2026-84637Calendar invitation attachments could launch local executablesMozilla Thunderbird
CVE-2026-84145Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15Mozilla Thunderbird
CVE-2026-84144Internally found bugs fixed in Thunderbird 155 and Thunderbird ESR 153.2Mozilla Thunderbird
CVE-2026-84143Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15Mozilla Thunderbird
CVE-2026-84142Internally found bugs fixed in Thunderbird 155Mozilla Thunderbird
CVE-2026-84141Integer overflow in the Graphics: ImageLib componentMozilla Thunderbird
CVE-2026-84140Site isolation issue in the DOM: Navigation componentMozilla Thunderbird
CVE-2026-84139Clickjacking issue in the DOM: Events componentMozilla Thunderbird
CVE-2026-84138Denial-of-service in the PDF Viewer componentMozilla Thunderbird
CVE-2026-84137Spoofing issue in the DOM: Core & HTML componentMozilla Thunderbird
CVE-2026-84136Other issue in the DOM: Navigation componentMozilla Thunderbird
CVE-2026-84135Other issue in Firefox Focus for AndroidMozilla Firefox
CVE-2026-84134Other issue in the Profile Backup componentMozilla Thunderbird
CVE-2026-84133Site isolation issue in the DOM: Push Subscriptions componentMozilla Thunderbird
CVE-2026-84132Information disclosure in the Networking: HTTP componentMozilla Thunderbird
CVE-2026-84131Privilege escalation due to invalid pointer in the Graphics componentMozilla Thunderbird
CVE-2026-84130Information disclosure in the Graphics: WebGPU componentMozilla Thunderbird
CVE-2026-84129Site isolation issue in the DOM: Navigation componentMozilla Thunderbird
CVE-2026-84128Privilege escalation in the WebDriver BiDi componentMozilla Thunderbird
CVE-2026-84127Information disclosure in the WebExtensions component in Firefox for AndroidMozilla Firefox
CVE-2026-84126Incorrect boundary conditions in the Layout: Grid componentMozilla Thunderbird
CVE-2026-84125Use-after-free in the DOM: Core & HTML componentMozilla Thunderbird
CVE-2026-84124Use-after-free in the DOM: Core & HTML componentMozilla Thunderbird
CVE-2026-84123Privilege escalation due to use-after-free in the Graphics: WebGPU componentMozilla Thunderbird
CVE-2026-84122Use-after-free in the Audio/Video componentMozilla Thunderbird
CVE-2026-84121Sandbox escape due to use-after-free in the DOM: Security componentMozilla Thunderbird
CVE-2026-84120Use-after-free in the Audio/Video componentMozilla Thunderbird
CVE-2026-84119Sandbox escape due to use-after-free in the DOM: Navigation componentMozilla Thunderbird
CVE-2026-84118Use-after-free in the JavaScript: GC componentMozilla Thunderbird
CVE-2026-84117Privilege escalation in Firefox for AndroidMozilla Firefox
CVE-2026-8401Sandbox escape in the Profile Backup componentMozilla Thunderbird
CVE-2026-8391Other issue in the JavaScript Engine componentMozilla Thunderbird
CVE-2026-8390Use-after-free in the JavaScript: WebAssembly componentMozilla Firefox
CVE-2026-8389JIT miscompilation in the JavaScript Engine: JIT componentMozilla Firefox
CVE-2026-8388Incorrect boundary conditions in the JavaScript Engine: JIT componentMozilla Thunderbird
CVE-2026-81267Stalled popup navigation could allow address bar origin spoofing in Firefox for iOSMozilla Firefox for iOS
CVE-2026-8094Other issue in the WebRTC componentMozilla Thunderbird
CVE-2026-8093Memory safety bugs fixed in Firefox 150.0.2Mozilla Thunderbird
CVE-2026-8092Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR 140.10.2 and Firefox 150.0.2Mozilla Thunderbird
CVE-2026-8091Incorrect boundary conditions in the Audio/Video: Playback componentMozilla Thunderbird
CVE-2026-8090Use-after-free in the DOM: Networking componentMozilla Thunderbird
CVE-2026-75874Sandbox escape in the Remote Settings Client componentMozilla Thunderbird
CVE-2026-74990Internally found bugs fixed in Thunderbird ESR 140.14, Thunderbird ESR 153.1 and Thunderbird 154Mozilla Thunderbird
CVE-2026-74989Internally found bugs fixed in Thunderbird 154Mozilla Thunderbird
CVE-2026-74988Internally found bugs fixed in Thunderbird ESR 153.1 and Thunderbird 154Mozilla Thunderbird
CVE-2026-74987Internally found bugs fixed in Thunderbird ESR 140.14, Thunderbird ESR 153.1 and Thunderbird 154Mozilla Thunderbird
CVE-2026-74986Site isolation issue in the CSS Parsing and Computation componentMozilla Thunderbird
CVE-2026-74985Privilege escalation in the Enterprise Policies componentMozilla Thunderbird
CVE-2026-74984Race condition in the JavaScript Engine componentMozilla Thunderbird
CVE-2026-74983Mitigation bypass in the Data Loss Prevention componentMozilla Thunderbird
CVE-2026-74982Denial-of-service in the Widget componentMozilla Thunderbird
CVE-2026-74981Site isolation issue in the Audio/Video: Web Codecs componentMozilla Thunderbird
CVE-2026-74980Clickjacking issue in the Downloads component in Firefox for AndroidMozilla Firefox
CVE-2026-74979Mitigation bypass in the Add-ons Manager componentMozilla Thunderbird
CVE-2026-74978Clickjacking issue in the Widget componentMozilla Thunderbird
CVE-2026-74977Integer overflow in the Graphics componentMozilla Thunderbird
CVE-2026-74976JIT miscompilation in the JavaScript Engine: JIT componentMozilla Thunderbird
CVE-2026-74975Spoofing issue in the Downloads component in Firefox for AndroidMozilla Firefox
CVE-2026-74974Same-origin policy bypass in the Graphics: ImageLib componentMozilla Thunderbird
CVE-2026-74973Race condition, use-after-free in the Graphics componentMozilla Thunderbird
CVE-2026-74972Information disclosure in the DOM: Push Subscriptions componentMozilla Thunderbird
CVE-2026-74971Information disclosure in the DOM: UI Events & Focus Handling componentMozilla Thunderbird
CVE-2026-74970Site isolation issue in the Graphics componentMozilla Thunderbird
CVE-2026-74969Use-after-free in the Layout: Text and Fonts componentMozilla Thunderbird
CVE-2026-74968Site isolation issue in the Graphics: WebRender componentMozilla Thunderbird
CVE-2026-74967Same-origin policy bypass in the Audio/Video: Playback componentMozilla Thunderbird
CVE-2026-74966Information disclosure in the Form Autofill componentMozilla Thunderbird
CVE-2026-74965Privilege escalation in the Shell Integration componentMozilla Thunderbird
CVE-2026-74964Integer overflow in the Graphics componentMozilla Thunderbird
CVE-2026-74963Same-origin policy bypass in the Networking: Cookies componentMozilla Thunderbird
CVE-2026-74962Site isolation issue in the Networking: Cookies componentMozilla Thunderbird
CVE-2026-74961Side-channel in the Web Audio componentMozilla Thunderbird
CVE-2026-74960Site isolation issue in the WebExtensions componentMozilla Thunderbird
CVE-2026-74959Mitigation bypass in the Storage: Cache API componentMozilla Thunderbird
CVE-2026-74958Information disclosure in the WebRTC componentMozilla Thunderbird
CVE-2026-74957Mitigation bypass in the Safe Browsing componentMozilla Thunderbird
CVE-2026-74956Same-origin policy bypass in the DOM: Service Workers componentMozilla Thunderbird
CVE-2026-74955Privilege escalation in the Request Handling componentMozilla Thunderbird
CVE-2026-74954Information disclosure due to side-channel in the Storage: Cache API componentMozilla Thunderbird
CVE-2026-74953Privilege escalation in the Networking: Cookies componentMozilla Thunderbird
CVE-2026-74952Privilege escalation in the Application Update componentMozilla Thunderbird

200 records, read from the index as it stood on 18 Oct 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.