Mozilla vulnerabilities

CVEs per yearBy the year they were published

1. 20172
2. 2018348
3. 2019139
4. 2020175
5. 2021147
6. 2022177
7. 2023194
8. 2024202
9. 2025208
10. 2026861

Known exploitedNewest addition to KEV first

• CVE-2024-9680

  An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this…

  Mozilla · Firefox

  ExploitedCritical9.8
• CVE-2016-9079

  A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox…

  Mozilla · Firefox

  ExploitedHigh7.5
• CVE-2019-11707

  A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware…

  Mozilla · Firefox ESR

  ExploitedHigh8.8
• CVE-2019-11708

  Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process…

  Mozilla · Firefox ESR

  ExploitedCritical10.0
• CVE-2022-26485

  Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw.…

  Mozilla · Firefox

  ExploitedHigh8.8
• CVE-2022-26486

  An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild…

  Mozilla · Firefox

  ExploitedCritical9.6
• CVE-2020-6819

  Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild…

  Mozilla · Thunderbird

  ExploitedHigh8.1
• CVE-2020-6820

  Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing…

  Mozilla · Thunderbird

  ExploitedHigh8.1
• CVE-2019-17026

  Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild…

  Mozilla · Firefox ESR

  ExploitedHigh8.8

Newest CVEs

• CVE-2026-120572

  Incorrect boundary conditions in the Layout: Block and Inline component

  Mozilla · Firefox

  High8.8
• CVE-2026-118180

  Matrix homeserver could redirect the chat session to a local file or network share

  Mozilla · Thunderbird

  High7.5
• CVE-2026-118179

  Request forgery via news: links

  Mozilla · Thunderbird

  High8.8
• CVE-2026-118178

  RSS feed could redirect its subscription to a local file or network share

  Mozilla · Thunderbird

  Medium5.7
• CVE-2026-118177

  Calendar discovery accepted local file and remote network share locations

  Mozilla · Thunderbird

  Critical9.1
• CVE-2026-118176

  Bypass of remote UNC path restriction in mailbox: URLs

  Mozilla · Thunderbird

  High8.1
• CVE-2026-118175

  Content of other messages could be included when replying to a crafted message

  Mozilla · Thunderbird

  High7.5
• CVE-2026-118174

  Displaying a message could load an attacker-chosen URL through an OpenPGP key attachment

  Mozilla · Thunderbird

  Medium6.5
• CVE-2026-118027

  Frame poisoning in the Layout component

  Mozilla · Firefox

  Critical9.1
• CVE-2026-118026

  Invalid pointer in the JavaScript: GC component

  Mozilla · Firefox

  High8.8