CVE Tools
Track your stack

Mozilla

4,060 CVEs tracked since 2000. Since Oct 2018, 8 of them reached CISA KEV.

Mozilla CVEs per month

Oct 2018 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Mozilla CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2018-10320
2018-11no snapshot
2018-122 or fewer
2019-01no snapshot
2019-02340
2019-03no snapshot
2019-04no snapshot
2019-0520
2019-06no snapshot
2019-07482
2019-082 or fewer
2019-09220
2019-102 or fewer
2019-112 or fewer
2019-122 or fewer
2020-01370
2020-0240
2020-03251
2020-04no snapshot
2020-05no snapshot
2020-062 or fewer
2020-07no snapshot
2020-08150
2020-091 or fewer
2020-10280
2020-111 or fewer
2020-12210
2021-01140
2021-02260
2021-03no snapshot
2021-042 or fewer
2021-052 or fewer
2021-06390
2021-072 or fewer
2021-08230
2021-092 or fewer
2021-102 or fewer
2021-11140
2021-12280
2022-012 or fewer
2022-022 or fewer
2022-033 or fewer
2022-043 or fewer
2022-0540
2022-063 or fewer
2022-073 or fewer
2022-083 or fewer
2022-093 or fewer
2022-102 or fewer
2022-113 or fewer
2022-121752
2023-013 or fewer
2023-0270
2023-03no snapshot
2023-043 or fewer
2023-053 or fewer
2023-06870
2023-07170
2023-08150
2023-09252
2023-10140
2023-11120
2023-12220
2024-01170
2024-02180
2024-03160
2024-04170
2024-05170
2024-06180
2024-07160
2024-08180
2024-09140
2024-10281
2024-11240
2024-123 or fewer
2025-01140
2025-02140
2025-03200
2025-04260
2025-05200
2025-06180
2025-07170
2025-08210
2025-09150
2025-10160
2025-11170
2025-12170
2026-01190
2026-02540
2026-03510
2026-04520
2026-05440
2026-06500
2026-07710
2026-08600
2026-091910
2026-102690
2026-110

Products

The products that kept showing up in Mozilla's monthly top three, with their CVEs summed over those months.

  1. Firefox1,90959 months
  2. Thunderbird1,54556 months
  3. Firefox Esr67050 months
  4. Firefox For IOS103 months
  5. Firefox Mobile103 months
  6. Thunderbird Esr81 month
  7. Bleach21 month
  8. Convict21 month
  9. Mozilla Bleach21 month
  10. Webthings Gateway21 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Mozilla.

  1. CVE-2026-120572Incorrect boundary conditions in the Layout: Block and Inline component8.8
  2. CVE-2026-118180Matrix homeserver could redirect the chat session to a local file or network share7.5
  3. CVE-2026-118179Request forgery via news: links8.8
  4. CVE-2026-118177Calendar discovery accepted local file and remote network share locations9.1
  5. CVE-2026-118178RSS feed could redirect its subscription to a local file or network share5.7
  6. CVE-2026-118176Bypass of remote UNC path restriction in mailbox: URLs8.1
  7. CVE-2026-118175Content of other messages could be included when replying to a crafted message7.5
  8. CVE-2026-118174Displaying a message could load an attacker-chosen URL through an OpenPGP key attachment6.5
  9. CVE-2026-118027Frame poisoning in the Layout component9.1
  10. CVE-2026-118024Use-after-free in the Graphics: Text component8.8
  11. CVE-2026-118025Other issue in the SVG component8.8
  12. CVE-2026-118026Invalid pointer in the JavaScript: GC component8.8
  13. CVE-2026-118022Sandbox escape due to use-after-free in the Disability Access APIs component8.8
  14. CVE-2026-118021Sandbox escape due to use-after-free in the XPCOM component8.8
  15. CVE-2026-118023Sandbox escape due to use-after-free in the Graphics: WebRender component8.8

The record

Peak rank
#1 in Nov 2012
Busiest month shown
Oct 2026, 269 CVEs
Months with a KEV entry
5 since Oct 2018
Monthly snapshots
209 since 2000
Mozilla's full record, month by month