Vendor
Mozilla
4,028 known vulnerabilities in products by Mozilla, 15 of them actively exploited (CISA KEV).
Key figures
4,028
Vulnerabilities
15
Actively exploited (KEV)
1
Used by ransomware
569
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2024-9680 | Mozilla Firefox Use-After-Free Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2010-3765 | Mozilla Multiple Products Remote Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2019-11708 | Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability In CISA KEV | 10.0 | |
| Critical | CVE-2023-4863 | Google Chromium WebP Heap-Based Buffer Overflow Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2023-5217 | Google Chromium libvpx Heap Buffer Overflow Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2013-1690 | Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2015-4495 | Mozilla Firefox Security Feature Bypass Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2019-17026 | Mozilla Firefox And Thunderbird Type Confusion Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2019-11707 | Mozilla Firefox and Thunderbird Type Confusion Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2022-26485 | Mozilla Firefox Use-After-Free Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2016-9079 | Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability In CISA KEV | 7.5 | |
| Critical | CVE-2020-6820 | Mozilla Firefox And Thunderbird Use-After-Free Vulnerability In CISA KEV | 8.1 | |
| Critical | CVE-2022-26486 | Mozilla Firefox Use-After-Free Vulnerability In CISA KEV | 9.6 | |
| Critical | CVE-2013-1675 | Mozilla Firefox Information Disclosure Vulnerability In CISA KEV | 6.5 | |
| Critical | CVE-2020-6819 | Mozilla Firefox And Thunderbird Use-After-Free Vulnerability In CISA KEV | 8.1 | |
| Critical | CVE-2025-4918 | Out-of-bounds access when resolving Promise objects | 9.8 | |
| Critical | CVE-2024-29943 | Mozilla Firefox: Out-of-Bounds Read | 9.8 | |
| Critical | CVE-2025-0247 | Memory safety bugs fixed in Firefox 134 and Thunderbird 134 | 9.8 | |
| Critical | CVE-2009-3555 | OpenSSL: security vulnerability | 9.8 | |
| Critical | CVE-2014-1511 | Mozilla Firefox: security vulnerability | 9.8 | |
| Critical | CVE-2014-1510 | Mozilla Firefox: security vulnerability | 9.8 | |
| High | CVE-2024-4367 | Mozilla Firefox: security vulnerability | 8.8 | |
| Critical | CVE-2010-1205 | libpng: Buffer Overflow | 9.8 | |
| Critical | CVE-2017-5375 | Mozilla Thunderbird: Memory Corruption | 9.8 | |
| High | CVE-2025-4919 | Out-of-bounds access when optimizing linear sums | 8.8 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 33sans-atrisk-mail,
- Researchers Show a Single Malicious Webpage Visit Can Compromise Tor Browserthehackernews,
- Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flawsthehackernews,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 26sans-atrisk-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 25sans-atrisk-mail,
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 21sans-atrisk,
Products
| Product | CVEs | Actively exploited |
|---|---|---|
| Mozilla Firefox | 3,458 | 15 |
| Mozilla Thunderbird | 2,082 | 14 |
| Firefox Esr | 1,200 | 9 |
| Mozilla Seamonkey | 704 | 1 |
| Mozilla Thunderbird ESR | 241 | 2 |
| Mozilla Bugzilla | 145 | 0 |
| Mozilla Mozilla Browser | 108 | 0 |
| Mozilla Firefox for iOS | 87 | 2 |
| Mozilla Network Security Services | 51 | 0 |
| Firefox For Android | 33 | 2 |
| Firefox For IOS | 28 | 0 |
| Mozilla Mozilla Suite | 27 | 0 |
| Mozilla Focus for iOS | 20 | 2 |
| Mozilla Focus | 18 | 2 |
| Focus For Android | 17 | 0 |
| Mozilla Firefox OS | 14 | 1 |
| Firefox IOS | 10 | 0 |
| Mozilla NSS | 10 | 0 |
| Focus For IOS | 7 | 0 |
| Bleach | 5 | 0 |
| Mozilla Bonsai | 4 | 0 |
| Mozilla Camino .8.5 | 4 | 0 |
| Mozilla VPN 2.16.1 | 4 | 0 |
| Webthings Gateway | 4 | 0 |
| Hubs Cloud | 3 | 0 |
| Mozilla Convict | 3 | 0 |
| Mozilla Netscape Portable Runtime (NSPR) | 3 | 0 |
| Mozilla VPN | 3 | 0 |