Mozilla Firefox vulnerabilities

CVEs per yearBy the year they were published

1. 20172
2. 2018329
3. 2019126
4. 2020148
5. 2021129
6. 2022154
7. 2023170
8. 2024173
9. 2025174
10. 2026813

Known exploitedNewest addition to KEV first

• CVE-2024-9680

  An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this…

  Mozilla · Firefox

  ExploitedCritical9.8
• CVE-2016-9079

  A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox…

  Mozilla · Firefox

  ExploitedHigh7.5
• CVE-2019-11707

  A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware…

  Mozilla · Firefox ESR

  ExploitedHigh8.8
• CVE-2019-11708

  Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process…

  Mozilla · Firefox ESR

  ExploitedCritical10.0
• CVE-2022-26485

  Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw.…

  Mozilla · Firefox

  ExploitedHigh8.8
• CVE-2022-26486

  An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild…

  Mozilla · Firefox

  ExploitedCritical9.6
• CVE-2020-6819

  Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild…

  Mozilla · Thunderbird

  ExploitedHigh8.1
• CVE-2020-6820

  Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing…

  Mozilla · Thunderbird

  ExploitedHigh8.1
• CVE-2019-17026

  Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild…

  Mozilla · Firefox ESR

  ExploitedHigh8.8

Newest CVEs

• CVE-2026-120572

  Incorrect boundary conditions in the Layout: Block and Inline component

  Mozilla · Firefox

  High8.8
• CVE-2026-118027

  Frame poisoning in the Layout component

  Mozilla · Firefox

  Critical9.1
• CVE-2026-118026

  Invalid pointer in the JavaScript: GC component

  Mozilla · Firefox

  High8.8
• CVE-2026-118025

  Other issue in the SVG component

  Mozilla · Firefox

  High8.8
• CVE-2026-118024

  Use-after-free in the Graphics: Text component

  Mozilla · Firefox

  High8.8
• CVE-2026-118023

  Sandbox escape due to use-after-free in the Graphics: WebRender component

  Mozilla · Firefox

  High8.8
• CVE-2026-118022

  Sandbox escape due to use-after-free in the Disability Access APIs component

  Mozilla · Firefox

  High8.8
• CVE-2026-118021

  Sandbox escape due to use-after-free in the XPCOM component

  Mozilla · Firefox

  High8.8
• CVE-2026-118020

  Use-after-free in the Layout component

  Mozilla · Firefox

  High8.8
• CVE-2026-118019

  Race condition, use-after-free in the DOM: File component

  Mozilla · Firefox

  High8.8