InfoSec Signals™
Sign InStart Free

CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,382 CVEs published, 347 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

Published in the last 7 days
5,382
Show in the list
Critical, last 7 days
347
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list
Clear

Showing CVEs that name the product mozilla:firefox. Show all products

724 CVEs, showing 501 to 550PreviousPage 11 of 15Next
CVESeverityTitlePublished
CVE-2026-92013High 8.8Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92014High 8.8Privilege escalation due to incorrect boundary conditions in the Graphics component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92015High 8.8Privilege escalation in the WebExtensions component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92016High 8.8Use-after-free in the Disability Access APIs component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92017High 8.8Privilege escalation in the DOM: Service Workers component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92018Critical 9.6Sandbox escape in the DOM: Core & HTML component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92019High 8.1Mitigation bypass in the Remote Settings Client component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92020High 8.8Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92021High 8.8Use-after-free in the JavaScript Engine: JIT component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92022High 8.8Use-after-free in the DOM: HTML Parser component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92023High 8.8Use-after-free in the XML component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92024High 8.8Use-after-free in the SVG component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92025High 8.8Use-after-free in the DOM: Navigation component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92026High 8.8Use-after-free in the Networking component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92027High 8.8Use-after-free in the DOM: Streams component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92028High 8.8Use-after-free in the DOM: Core & HTML component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92029High 8.8Use-after-free in the SVG component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92030Medium 5.4Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92031Medium 6.5Information disclosure in the Graphics: ImageLib component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92032Critical 9.6Sandbox escape due to invalid pointer in the Graphics component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92033High 8.8Privilege escalation in Firefox for Android
Assigned by mozilla
Sep 15, 2026
CVE-2026-92034Critical 9.1Site isolation issue in the Graphics component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92035Critical 9.6Sandbox escape due to incorrect boundary conditions in the Graphics component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92036Critical 9.8Incorrect boundary conditions in the Networking: HTTP component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92037Critical 9.8Incorrect boundary conditions in the DOM: Animation component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92038Critical 9.1Mitigation bypass in the Remote Settings Client component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92039Medium 6.3Mitigation bypass in the DOM: Notifications component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92040High 8.8Use-after-free in the JavaScript: WebAssembly component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92041Critical 9.1Mitigation bypass in the DOM: Networking component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92042High 7.5Race condition in the DOM: Content Processes component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92043High 8.8Privilege escalation due to incorrect boundary conditions in the Audio/Video component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92044High 7.5Information disclosure in the Networking: HTTP component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92045Critical 9.6Sandbox escape due to incorrect boundary conditions in the WebRTC component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92046High 8.8Use-after-free in the Graphics component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92047High 8.8Privilege escalation in the Crash Reporting component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92048Critical 9.0Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92049High 8.8Use-after-free in the Widget: Win32 component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92050Critical 9.1Sandbox escape due to race condition in the XPConnect component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92051Critical 9.1Spoofing issue due to invalid pointer in the Graphics component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92052High 8.8Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92053High 8.8Privilege escalation in the Graphics: CanvasWebGL component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92054High 8.8Privilege escalation in the Memory component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92055High 8.8Privilege escalation in the DevTools component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92056High 8.8Use-after-free in the Graphics: Text component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92057Critical 9.1Mitigation bypass in the Enterprise Policies component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92058High 8.8Use-after-free in the Graphics component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92059Critical 9.3Incorrect boundary conditions in the DOM: Editor component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92060High 8.8Use-after-free in the Internationalization component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92061Critical 9.8Incorrect boundary conditions in the Security: Process Sandboxing component
Assigned by mozilla
Sep 15, 2026
CVE-2026-92062High 8.8Privilege escalation in the Session Restore component
Assigned by mozilla
Sep 15, 2026
PreviousPage 11 of 15Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.