Firefox

This hub aggregates every CVE we track for Firefox, a product in the consumer software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Firefox.

• CVE-2026-15719Site isolation in the DOM: Navigation component5.4Jul 14, 2026
• CVE-2026-15718Invalid pointer in the JavaScript: WebAssembly component4.3Jul 14, 2026
• CVE-2026-13356Interrupted navigation could allow address bar origin spoofing in Firefox for iOS6.3Jul 6, 2026
• CVE-2026-14241Memory safety bugs fixed in Firefox 152.0.49.8Jun 30, 2026
• CVE-2026-12330Incorrect boundary conditions in the Internationalization component5.4Jun 16, 2026
• CVE-2026-12329Memory safety bug fixed in Thunderbird ESR 140.125.3Jun 16, 2026
• CVE-2026-12328Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 1528.1Jun 16, 2026
• CVE-2026-12327Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 1528.1Jun 16, 2026
• CVE-2026-12326Memory safety bugs fixed in Firefox 152 and Thunderbird 1528.1Jun 16, 2026
• CVE-2026-12325Denial-of-service in the Graphics: ImageLib component6.5Jun 16, 2026
• CVE-2026-12324Incorrect boundary conditions in the Graphics: CanvasWebGL component7.3Jun 16, 2026
• CVE-2026-12323Spoofing issue in the DOM: Core & HTML component5.4Jun 16, 2026
• CVE-2026-12322Clickjacking issue in the Widget: Gtk component5.4Jun 16, 2026
• CVE-2026-12321JIT miscompilation in the JavaScript: WebAssembly component5.4Jun 16, 2026
• CVE-2026-12320Information disclosure in the Password Manager component4.3Jun 16, 2026