CVE-20XX-?

Mozilla Firefox CVEs.

Published CVEs affecting Mozilla Firefox, ranked by exploit odds.

747 CVEs · updated 2026-11-06 01:30 UTC

  1. CVE-2025-0242

    Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5, Thunderbird 115.18, and Thunderbird 128.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Firefox ESR 115.19, Thunderbird 134, and Thunderbird 128.6.

    Mozilla Firefox

    6.5 MEDIUM 15% exploit odds Fix listed
  2. CVE-2025-0247

    Memory safety bugs present in Firefox 133 and Thunderbird 133. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 134 and Thunderbird 134.

    Mozilla Firefox

    9.8 CRITICAL 11% exploit odds Fix listed
  3. CVE-2025-4918

    An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object. This vulnerability was fixed in Firefox 138.0.4, Firefox ESR 128.10.1, Firefox ESR 115.23.1, Thunderbird 128.10.2, and Thunderbird 138.0.2.

    Mozilla Firefox

    9.8 CRITICAL 10% exploit odds Fix listed
  4. CVE-2025-4919

    An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability was fixed in Firefox 138.0.4, Firefox ESR 128.10.1, Firefox ESR 115.23.1, Thunderbird 128.10.2, and Thunderbird 138.0.2.

    Mozilla Firefox

    8.8 HIGH 9% exploit odds Fix listed
  5. CVE-2025-6424

    A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability was fixed in Firefox 140, Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.

    Mozilla Firefox

    9.8 CRITICAL 8% exploit odds Fix listed
  6. CVE-2025-0244

    When redirecting to an invalid protocol scheme, an attacker could spoof the address bar. *Note: This issue only affected Android operating systems. Other operating systems are unaffected.*. This vulnerability was fixed in Firefox 134.

    Mozilla Firefox

    5.3 MEDIUM 7% exploit odds Fix listed
  7. CVE-2025-6436

    Memory safety bugs present in Firefox 139 and Thunderbird 139. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 140 and Thunderbird 140.

    Mozilla Firefox

    8.1 HIGH 4% exploit odds Fix listed
  8. CVE-2026-6770

    Other issue in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

    Mozilla Firefox

    6.5 MEDIUM 4% exploit odds Fix listed
  9. CVE-2025-2857

    Following the recent Chrome sandbox escape (CVE-2025-2783), various Firefox developers identified a similar pattern in our IPC code. A compromised child process could cause the parent process to return an unintentionally powerful handle, leading to a sandbox escape. The original vulnerability was being exploited in the wild. *This only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability was fixed in Firefox 136.0.4, Firefox ESR 128.8.1, and Firefox ESR 115.21.1.

    Mozilla Firefox

    10.0 CRITICAL 2% exploit odds Fix listed
  10. CVE-2025-1009

    An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.

    Mozilla Firefox

    9.8 CRITICAL 1% exploit odds Fix listed
  11. CVE-2026-4696

    Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

    Mozilla Firefox

    9.8 CRITICAL 1.0% exploit odds Fix listed
  12. CVE-2026-2796

    JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.

    Mozilla Firefox

    9.8 CRITICAL 0.9% exploit odds Fix listed
  13. CVE-2026-6746

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

    Mozilla Firefox

    7.5 HIGH 0.9% exploit odds Fix listed
  14. CVE-2026-4700

    Mitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

    Mozilla Firefox

    9.8 CRITICAL 0.9% exploit odds Fix listed
  15. CVE-2026-2773

    Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Mozilla Firefox

    9.8 CRITICAL 0.9% exploit odds Fix listed
  16. CVE-2025-3028

    JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free. This vulnerability was fixed in Firefox 137, Firefox ESR 115.22, Firefox ESR 128.9, Thunderbird 137, and Thunderbird 128.9.

    Mozilla Firefox

    6.5 MEDIUM 0.9% exploit odds Fix listed
  17. CVE-2026-16357

    Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

    Mozilla Firefox

    9.8 CRITICAL 0.9% exploit odds Fix listed
  18. CVE-2026-10702

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 151.0.3.

    Mozilla Firefox

    4.3 MEDIUM 0.9% exploit odds Fix listed
  19. CVE-2026-2774

    Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Mozilla Firefox

    9.8 CRITICAL 0.9% exploit odds Fix listed
  20. CVE-2026-2775

    Mitigation bypass in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Mozilla Firefox

    9.8 CRITICAL 0.8% exploit odds Fix listed
  21. CVE-2026-6758

    Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

    Mozilla Firefox

    7.5 HIGH 0.8% exploit odds Fix listed
  22. CVE-2026-4690

    Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

    Mozilla Firefox

    8.6 HIGH 0.8% exploit odds Fix listed
  23. CVE-2026-4694

    Incorrect boundary conditions, integer overflow in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

    Mozilla Firefox

    7.5 HIGH 0.8% exploit odds Fix listed
  24. CVE-2025-0238

    Assuming a controlled failed memory allocation, an attacker could have caused a use-after-free, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Firefox ESR 115.19, Thunderbird 134, and Thunderbird 128.6.

    Mozilla Firefox

    5.3 MEDIUM 0.8% exploit odds Fix listed
  25. CVE-2026-4698

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

    Mozilla Firefox

    9.8 CRITICAL 0.8% exploit odds Fix listed
  26. CVE-2025-10533

    Integer overflow in the SVG component. This vulnerability was fixed in Firefox 143, Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.

    Mozilla Firefox

    8.8 HIGH 0.8% exploit odds Fix listed
  27. CVE-2026-2771

    Undefined behavior in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Mozilla Firefox

    9.8 CRITICAL 0.8% exploit odds Fix listed
  28. CVE-2025-49710

    An integer overflow was present in `OrderedHashTable` used by the JavaScript engine. This vulnerability was fixed in Firefox 139.0.4.

    Mozilla Firefox

    9.8 CRITICAL 0.7% exploit odds Fix listed
  29. CVE-2026-2763

    Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Mozilla Firefox

    9.8 CRITICAL 0.7% exploit odds Fix listed
  30. CVE-2026-2764

    JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Mozilla Firefox

    9.8 CRITICAL 0.7% exploit odds Fix listed
  31. CVE-2026-2765

    Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Mozilla Firefox

    9.8 CRITICAL 0.7% exploit odds Fix listed
  32. CVE-2026-2766

    Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Mozilla Firefox

    9.8 CRITICAL 0.7% exploit odds Fix listed
  33. CVE-2026-2770

    Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Mozilla Firefox

    9.8 CRITICAL 0.7% exploit odds Fix listed
  34. CVE-2026-2772

    Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Mozilla Firefox

    9.8 CRITICAL 0.7% exploit odds Fix listed
  35. CVE-2025-0241

    When segmenting specially crafted text, segmentation would corrupt memory leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Thunderbird 134, and Thunderbird 128.6.

    Mozilla Firefox

    7.7 HIGH 0.7% exploit odds Fix listed
  36. CVE-2026-4686

    Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

    Mozilla Firefox

    7.5 HIGH 0.7% exploit odds Fix listed
  37. CVE-2026-74987

    Internally found bugs present in Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

    Memory safety Browser & mail Mozilla Firefox

    9.8 CRITICAL 0.7% exploit odds Fix listed
  38. CVE-2026-74990

    Internally found bugs present in Firefox ESR 115.38, Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

    Memory safety Browser & mail Mozilla Firefox

    9.8 CRITICAL 0.7% exploit odds Fix listed
  39. CVE-2026-4685

    Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

    Mozilla Firefox

    7.5 HIGH 0.7% exploit odds Fix listed
  40. CVE-2026-4693

    Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

    Mozilla Firefox

    7.5 HIGH 0.7% exploit odds Fix listed
  41. CVE-2026-4695

    Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

    Mozilla Firefox

    7.5 HIGH 0.7% exploit odds Fix listed
  42. CVE-2026-4697

    Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

    Mozilla Firefox

    7.5 HIGH 0.7% exploit odds Fix listed
  43. CVE-2026-4699

    Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

    Mozilla Firefox

    7.5 HIGH 0.7% exploit odds Fix listed
  44. CVE-2026-4702

    JIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

    Mozilla Firefox

    9.8 CRITICAL 0.7% exploit odds Fix listed
  45. CVE-2026-2447

    Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird 147.0.2.

    Mozilla Firefox

    8.8 HIGH 0.7% exploit odds Fix listed
  46. CVE-2026-4689

    Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

    Mozilla Firefox

    10.0 CRITICAL 0.7% exploit odds Fix listed
  47. CVE-2026-2769

    Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Mozilla Firefox

    8.8 HIGH 0.7% exploit odds Fix listed
  48. CVE-2026-2779

    Incorrect boundary conditions in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Mozilla Firefox

    9.8 CRITICAL 0.7% exploit odds Fix listed
  49. CVE-2026-74964

    Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

    Memory safety Browser & mail Mozilla Firefox

    9.8 CRITICAL 0.7% exploit odds Fix listed
  50. CVE-2026-2788

    Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Mozilla Firefox

    9.8 CRITICAL 0.7% exploit odds Fix listed

All CVEs affecting Mozilla Firefox that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.