CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,476 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,476
Show in the list
Critical, last 7 days
358
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product mozilla:firefox_mobile. Show all products

17 CVEs, showing 1 to 17
CVESeverityTitlePublished
CVE-2026-100823Medium 5.4Spoofing issue in the Downloads component in Firefox for Android
Assigned by mozilla
Sep 29, 2026
CVE-2026-92033High 8.8Privilege escalation in Firefox for Android
Assigned by mozilla
Sep 15, 2026
CVE-2026-86853Medium 4.3Repeated external URL scheme launches could potentially cause a denial of service in Firefox for iOS
Assigned by mozilla
Sep 8, 2026
CVE-2026-84135Critical 9.8Other issue in Firefox Focus for Android
Assigned by mozilla
Sep 1, 2026
CVE-2026-84127Medium 4.3Information disclosure in the WebExtensions component in Firefox for Android
Assigned by mozilla
Sep 1, 2026
CVE-2026-84117High 8.8Privilege escalation in Firefox for Android
Assigned by mozilla
Sep 1, 2026
CVE-2026-81267Medium 5.4Stalled popup navigation could allow address bar origin spoofing in Firefox for iOS
Assigned by mozilla
Aug 31, 2026
CVE-2026-74980Medium 6.5Clickjacking issue in the Downloads component in Firefox for Android
Assigned by mozilla
Aug 18, 2026
CVE-2026-74975Medium 5.4Spoofing issue in the Downloads component in Firefox for Android
Assigned by mozilla
Aug 18, 2026
CVE-2026-74951Medium 6.5Clickjacking issue in Firefox for Android
Assigned by mozilla
Aug 18, 2026
CVE-2026-16404High 7.4Spoofing issue in Firefox for Android.Jul 21, 2026
CVE-2026-16373High 7.5Information disclosure in the Privacy component in Firefox for Android.Jul 21, 2026
CVE-2026-14906Medium 5.3Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the Firefox for iOS application sandbox.Jul 13, 2026
CVE-2026-53900Medium 4.3Firefox for iOS preserved cookies set on the initial PDF request across cross-origin HTTP redirects in TemporaryDocument, allowing a malicious site to inject arbitrary cookies into requests to an unr…Jun 16, 2026
CVE-2026-53899Medium 6.5Firefox for iOS used partial domain matching when attaching cookies to PDF requests, allowing a malicious site on a suffix domain to receive cookies belonging to the target site.Jun 16, 2026
CVE-2022-26486
Known exploited
Critical 9.6An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape.
Assigned by mozilla
Dec 22, 2022
CVE-2022-26485
Known exploited
High 8.8Removing an XSLT parameter during processing could have lead to an exploitable use-after-free.
Assigned by mozilla
Dec 22, 2022

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.