CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 20:30 UTC)

What this means for you

This week: 5,369 CVEs published, 343 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,369; Show in the list
Critical, last 7 days: 343; Show in the list
Healthcare-tagged, last 7 days: 5; Show in the list
Known exploited (CISA KEV): 1,748; Show in the list

Showing CVEs that name the product mozilla:firefox. Show all products

726 CVEs, showing 701 to 726PreviousPage 15 of 15

CVE	Severity	Title	Published
CVE-2025-10531	Medium 5.4	Mitigation bypass in the Web Compatibility: Tooling component.	Sep 16, 2025
CVE-2025-10530	Medium 6.5	Spoofing issue in the WebAuthn component in Firefox for Android.	Sep 16, 2025
CVE-2025-10529	Medium 6.5	Same-origin policy bypass in the Layout component.	Sep 16, 2025
CVE-2025-10528	High 7.3	Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component.	Sep 16, 2025
CVE-2025-10527	High 7.1	Sandbox escape due to use-after-free in the Graphics: Canvas2D component.	Sep 16, 2025
CVE-2024-9680 Known exploited	Critical 9.8	An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. Assigned by mozilla	Oct 9, 2024
CVE-2024-9398	Medium 5.3	By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed.	Oct 1, 2024
CVE-2023-5217 Known exploited	High 8.8	Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Assigned by Chrome	Sep 28, 2023
CVE-2023-4863 Known exploited	High 8.8	Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Assigned by Chrome	Sep 12, 2023
CVE-2022-26486 Known exploited	Critical 9.6	An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. Assigned by mozilla	Dec 22, 2022
CVE-2022-26485 Known exploited	High 8.8	Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. Assigned by mozilla	Dec 22, 2022
CVE-2020-6819 Known exploited	High 8.1	Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. Assigned by mozilla	Apr 24, 2020
CVE-2020-6820 Known exploited	High 8.1	Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. Assigned by mozilla	Apr 24, 2020
CVE-2019-17026 Known exploited	High 8.8	Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. Assigned by mozilla	Mar 2, 2020
CVE-2019-11707 Known exploited	High 8.8	A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. Assigned by mozilla	Jul 23, 2019
CVE-2019-11708 Known exploited	Critical 10.0	Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content chosen by a compromise… Assigned by mozilla	Jul 23, 2019
CVE-2017-5436	High 8.8	An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font.	Jun 11, 2018
CVE-2016-9079 Known exploited	High 7.5	A use-after-free vulnerability in SVG Animation has been discovered. Assigned by mozilla	Jun 11, 2018
CVE-2016-9063	Critical 9.8	An integer overflow during the parsing of XML using the Expat library. Assigned by mozilla	Jun 11, 2018
CVE-2016-0718	Critical 9.8	Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow. Assigned by redhat	May 26, 2016
CVE-2015-7575	Medium 5.9	Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in T… Assigned by redhat	Jan 9, 2016
CVE-2015-4495 Known exploited	High 8.8	The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain p… Assigned by mozilla	Aug 8, 2015
CVE-2013-1690 Known exploited	High 8.8	Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with pag… Assigned by mozilla	Jun 26, 2013
CVE-2013-1675 Known exploited	Medium 6.5	Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mP… Assigned by mozilla	May 16, 2013
CVE-2011-3389	Medium 4.3	The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode wi… Assigned by mitre	Sep 6, 2011
CVE-2010-3765 Known exploited	Critical 9.8	Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attac… Assigned by mitre	Oct 27, 2010

PreviousPage 15 of 15

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.