Firefox
3,862 CVEs tracked. 15 of them are in CISA KEV.
This hub aggregates every CVE we track for Firefox, a product in the consumer software space. Use it to gauge the current risk picture and drill into individual advisories.
Firefox CVEs per month
| Month | CVEs |
|---|---|
| 2024-12 | 0 |
| 2025-01 | 14 |
| 2025-02 | 12 |
| 2025-03 | 18 |
| 2025-04 | 22 |
| 2025-05 | 13 |
| 2025-06 | 15 |
| 2025-07 | 17 |
| 2025-08 | 19 |
| 2025-09 | 14 |
| 2025-10 | 16 |
| 2025-11 | 16 |
| 2025-12 | 16 |
| 2026-01 | 18 |
| 2026-02 | 54 |
| 2026-03 | 48 |
| 2026-04 | 51 |
| 2026-05 | 43 |
| 2026-06 | 47 |
| 2026-07 | 67 |
| 2026-08 | 59 |
| 2026-09 | 181 |
| 2026-10 | 251 |
| 2026-11 | 101 |
Severity
How the 3,862 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical1,019
- High1,298
- Medium1,439
- Low71
Latest CVEs
The 15 most recently published vulnerabilities affecting Firefox.
- CVE-2026-124952Use-after-free in the Audio/Video component8.8
- CVE-2026-124950Same-origin policy bypass in the CSS Parsing and Computation component—
- CVE-2026-124949Other issue in the SVG component—
- CVE-2026-124947Incorrect boundary conditions in the Graphics component8.8
- CVE-2026-124945Invalid pointer in the Layout: Text and Fonts component—
- CVE-2026-124946Invalid pointer in the JavaScript Engine: JIT component—
- CVE-2026-124943Use-after-free in the Layout component8.8
- CVE-2026-124944Information disclosure in the Marionette component4.3
- CVE-2026-124937Other issue in the Media component in Firefox for Android—
- CVE-2026-124936Spoofing issue in the Address Bar component—
- CVE-2026-124928Mitigation bypass in the SVG component—
- CVE-2026-124925Information disclosure in the Layout component4.3
- CVE-2026-124923Sandbox escape in the Agent component—
- CVE-2026-124920Uninitialized memory in the Graphics: WebGPU component—
- CVE-2026-124921Sandbox escape in the Graphics: WebGPU component—
Product grouping is registry-driven, with AI assist and human review. How it works