Firefox

This hub aggregates every CVE we track for Firefox, a product in the consumer software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Firefox.

• CVE-2026-18809Information disclosure in Firefox for Android and Firefox Focus for Android6.5Aug 4, 2026
• CVE-2026-16361Memory safety bugs fixed in Thunderbird ESR 140.139.8Jul 21, 2026
• CVE-2026-16360Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 1539.8Jul 21, 2026
• CVE-2026-16412Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 1539.8Jul 21, 2026
• CVE-2026-16411Memory safety bugs fixed in Firefox 1539.8Jul 21, 2026
• CVE-2026-16410JIT miscompilation in the JavaScript Engine: JIT component9.8Jul 21, 2026
• CVE-2026-16409Invalid pointer in the Security: PSM component7.5Jul 21, 2026
• CVE-2026-16408Integer overflow in the Audio/Video: Playback component9.8Jul 21, 2026
• CVE-2026-16407Mitigation bypass in the DOM: Service Workers component9.8Jul 21, 2026
• CVE-2026-16406Mitigation bypass in the Networking component9.1Jul 21, 2026
• CVE-2026-16405Information disclosure in the Networking: WebSockets component7.5Jul 21, 2026
• CVE-2026-16404Spoofing issue in Firefox for Android7.4Jul 21, 2026
• CVE-2026-16403Spoofing issue in the Address Bar component6.5Jul 21, 2026
• CVE-2026-16402Integer overflow in the Graphics: ImageLib component9.8Jul 21, 2026
• CVE-2026-16401Privilege escalation in the Data Loss Prevention component8.8Jul 21, 2026