Mozilla
13 CVEs in CISA KEV — 1 with confirmed ransomware use
Products
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2024-9680 |
Firefox | — | 0.2318 | 2024-10-15 | 2024-11-05 | RW | Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animat |
CVE-2022-26485 |
Firefox | — | 0.1426 | 2022-03-07 | 2022-03-21 | Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter proces | |
CVE-2022-26486 |
Firefox | — | 0.0236 | 2022-03-07 | 2022-03-21 | Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework | |
CVE-2010-3765 |
Multiple Products | — | — | 2025-10-06 | 2025-10-27 | Mozilla Firefox, SeaMonkey, and Thunderbird contain an unspecified vulnerability | |
CVE-2016-9079 |
Firefox, Firefox ESR, and Thunderbird | — | — | 2023-06-22 | 2023-07-13 | Mozilla Firefox, Firefox ESR, and Thunderbird contain a use-after-free vulnerabi | |
CVE-2015-4495 |
Firefox | — | — | 2022-05-25 | 2022-06-15 | Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read | |
CVE-2019-11707 |
Firefox and Thunderbird | — | — | 2022-05-23 | 2022-06-13 | Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can | |
CVE-2019-11708 |
Firefox and Thunderbird | — | — | 2022-05-23 | 2022-06-13 | Mozilla Firefox and Thunderbird contain a sandbox escape vulnerability that coul | |
CVE-2013-1690 |
Firefox and Thunderbird | — | — | 2022-03-28 | 2022-04-18 | Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events | |
CVE-2013-1675 |
Firefox | — | — | 2022-03-03 | 2022-03-24 | Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoo | |
CVE-2020-6819 |
Firefox and Thunderbird | — | — | 2021-11-03 | 2022-05-03 | Mozilla Firefox and Thunderbird contain a race condition vulnerability when runn | |
CVE-2020-6820 |
Firefox and Thunderbird | — | — | 2021-11-03 | 2022-05-03 | Mozilla Firefox and Thunderbird contain a race condition vulnerability when hand | |
CVE-2019-17026 |
Firefox and Thunderbird | — | — | 2021-11-03 | 2022-05-03 | Mozilla Firefox and Thunderbird contain a type confusion vulnerability due to in |