Mozilla Firefox vulnerabilities and fixes
Exploited and high-severity Mozilla Firefox vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.
- 8.8CVE-2026-120572Incorrect boundary conditions in the Layout: Block and Inline componentVerify fixMozilla Firefox
1 min read - 7.3CVE-2026-117937Invalid pointer in the JavaScript Engine componentVerify fixMozilla Firefox
1 min read - 8.8CVE-2026-117940Use-after-free in the DOM: Core & HTML componentVerify fixMozilla Firefox
1 min read - 8.8CVE-2026-117922Use-after-free in the Networking: WebSockets componentVerify fixMozilla Firefox
1 min read - 7.3CVE-2026-117915Incorrect boundary conditions in the Layout: Block and Inline componentVerify fixMozilla Firefox
1 min read - 7.3CVE-2026-117889Incorrect boundary conditions in the JavaScript Engine componentVerify fixMozilla Firefox
1 min read - 7.3CVE-2026-117890JIT miscompilation in the JavaScript Engine: JIT componentVerify fixMozilla Firefox
1 min read - 8.8CVE-2026-117881Use-after-free in the DOM: Core & HTML componentVerify fixMozilla Firefox
1 min read - 7.3CVE-2026-117867Use-after-free in the Layout componentVerify fixMozilla Firefox
1 min read - 9.6CVE-2026-117868Sandbox escape in the DOM: Networking componentVerify fixMozilla Firefox
1 min read - 8.8CVE-2026-117869Use-after-free in the DOM: Core & HTML componentVerify fixMozilla Firefox
1 min read - 7.3CVE-2026-117870Use-after-free in the JavaScript Engine componentVerify fixMozilla Firefox
1 min read - 7.3CVE-2026-117871Invalid pointer in the Graphics componentVerify fixMozilla Firefox
1 min read - 8.1CVE-2026-117860Same-origin policy bypass in the DOM: Navigation componentVerify fixMozilla Firefox
1 min read - 9.8CVE-2026-117862Privilege escalation due to incorrect boundary conditions in the Networking componentVerify fixMozilla Firefox
1 min read - 8.8CVE-2026-117864Sandbox escape in the Form Manager componentVerify fixMozilla Firefox
1 min read - 8.8CVE-2026-117936Use-after-free in the DOM: Core & HTML componentVerify fixMozilla Firefox
1 min read - 8.8CVE-2026-117925Use-after-free in the DOM: Core & HTML componentVerify fixMozilla Firefox
1 min read - 8.1CVE-2026-117926Incorrect boundary conditions in the SVG componentVerify fixMozilla Firefox
1 min read - 9.8CVE-2026-117917Invalid pointer in the Graphics: WebRender componentVerify fixMozilla Firefox
1 min read - 7.3CVE-2026-117910Invalid pointer in the JavaScript Engine componentVerify fixMozilla Firefox
1 min read - 8.1CVE-2026-117912Same-origin policy bypass in the CSS Parsing and Computation componentVerify fixMozilla Firefox
1 min read - 8.8CVE-2026-117904Use-after-free in the JavaScript: GC componentVerify fixMozilla Firefox
1 min read - 8.8CVE-2026-117900Use-after-free in the DOM: Editor componentVerify fixMozilla Firefox
1 min read - 8.8CVE-2026-117901Use-after-free in the DOM: Core & HTML componentVerify fixMozilla Firefox
1 min read - 7.3CVE-2026-117897Incorrect boundary conditions in the Layout: Tables componentVerify fixMozilla Firefox
1 min read - 8.8CVE-2026-117899Use-after-free in the Networking: HTTP componentVerify fixMozilla Firefox
1 min read - 7.3CVE-2026-117892Privilege escalation due to use-after-free in the WebRTC: Networking componentVerify fixMozilla Firefox
1 min read - 7.3CVE-2026-117891Use-after-free in the JavaScript Engine: JIT componentVerify fixMozilla Firefox
1 min read - 8.1CVE-2026-117886Incorrect boundary conditions in the Graphics: Text componentVerify fixMozilla Firefox
1 min read - 8.8CVE-2026-117887Use-after-free in the DOM: Core & HTML componentVerify fixMozilla Firefox
1 min read - 8.8CVE-2026-117884Use-after-free in the Networking componentVerify fixMozilla Firefox
1 min read - 8.8CVE-2026-117883Use-after-free in the DOM: HTML Parser componentVerify fixMozilla Firefox
1 min read - 7.3CVE-2026-117879Incorrect boundary conditions in the Layout: Tables componentVerify fixMozilla Firefox
1 min read - 8.8CVE-2026-117872Use-after-free in the JavaScript: Standard Library componentVerify fixMozilla Firefox
1 min read - 8.1CVE-2026-117873Incorrect boundary conditions in the Audio/Video: Playback componentVerify fixMozilla Firefox
1 min read - 7.3CVE-2026-117866Privilege escalation due to use-after-free in the Graphics: Canvas2D componentVerify fixMozilla Firefox
1 min read - 9.6CVE-2026-117861Sandbox escape in the DOM: Navigation componentVerify fixMozilla Firefox
1 min read