# Mozilla Firefox.

Every CVE that names Mozilla Firefox among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Use-after-free in the DOM: Bindings (WebIDL) component](https://agentprime.io/advisories/CVE-2026-2770.md)
  `CVE-2026-2770` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 24 Feb 2026 · Tags: Memory corruption
- [Use-after-free in the Storage: IndexedDB component](https://agentprime.io/advisories/CVE-2026-2769.md)
  `CVE-2026-2769` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 24 Feb 2026 · Tags: Memory corruption
- [Sandbox escape in the Storage: IndexedDB component](https://agentprime.io/advisories/CVE-2026-2768.md)
  `CVE-2026-2768` · CVE record: Mozilla Firefox and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Feb 2026 · Tags: Broken access control, CWE-693
- [Use-after-free in the JavaScript: WebAssembly component](https://agentprime.io/advisories/CVE-2026-2767.md)
  `CVE-2026-2767` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 24 Feb 2026 · Tags: Memory corruption
- [Use-after-free in the JavaScript Engine: JIT component](https://agentprime.io/advisories/CVE-2026-2766.md)
  `CVE-2026-2766` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Feb 2026 · Tags: Memory corruption
- [Use-after-free in the JavaScript Engine component](https://agentprime.io/advisories/CVE-2026-2765.md)
  `CVE-2026-2765` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Feb 2026 · Tags: Memory corruption
- [JIT miscompilation, use-after-free in the JavaScript Engine: JIT component](https://agentprime.io/advisories/CVE-2026-2764.md)
  `CVE-2026-2764` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Feb 2026 · Tags: Memory corruption
- [Use-after-free in the JavaScript Engine component](https://agentprime.io/advisories/CVE-2026-2763.md)
  `CVE-2026-2763` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Feb 2026 · Tags: Memory corruption
- [Integer overflow in the JavaScript: Standard Library component](https://agentprime.io/advisories/CVE-2026-2762.md)
  `CVE-2026-2762` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Feb 2026 · Tags: Memory corruption
- [Sandbox escape in the Graphics: WebRender component](https://agentprime.io/advisories/CVE-2026-2761.md)
  `CVE-2026-2761` · CVE record: Mozilla Firefox and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Feb 2026 · Tags: CWE-693
- [Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component](https://agentprime.io/advisories/CVE-2026-2760.md)
  `CVE-2026-2760` · CVE record: Mozilla Firefox and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Feb 2026 · Tags: CWE-1384
- [Incorrect boundary conditions in the Graphics: ImageLib component](https://agentprime.io/advisories/CVE-2026-2759.md)
  `CVE-2026-2759` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Feb 2026 · Tags: CWE-1384
- [Use-after-free in the JavaScript: GC component](https://agentprime.io/advisories/CVE-2026-2758.md)
  `CVE-2026-2758` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Feb 2026 · Tags: Memory corruption
- [Incorrect boundary conditions in the WebRTC: Audio/Video component](https://agentprime.io/advisories/CVE-2026-2757.md)
  `CVE-2026-2757` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Feb 2026 · Tags: CWE-1384
- [Heap buffer overflow in libvpx](https://agentprime.io/advisories/CVE-2026-2447.md)
  `CVE-2026-2447` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 16 Feb 2026 · Tags: Memory corruption
- [Use-after-free in the Layout: Scrolling and Overflow component](https://agentprime.io/advisories/CVE-2026-24869.md)
  `CVE-2026-24869` · CVE record: Mozilla Firefox · CVSS 8.8 High · Not analysed yet · Published 27 Jan 2026 · Tags: Memory corruption
- [Mitigation bypass in the Privacy: Anti-Tracking component](https://agentprime.io/advisories/CVE-2026-24868.md)
  `CVE-2026-24868` · CVE record: Mozilla Firefox · CVSS 6.5 Medium · Not analysed yet · Published 27 Jan 2026 · Tags: CWE-693
- [Memory safety bugs fixed in Firefox 147 and Thunderbird 147](https://agentprime.io/advisories/CVE-2026-0892.md)
  `CVE-2026-0892` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147](https://agentprime.io/advisories/CVE-2026-0891.md)
  `CVE-2026-0891` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Spoofing issue in the DOM: Copy & Paste and Drag & Drop component](https://agentprime.io/advisories/CVE-2026-0890.md)
  `CVE-2026-0890` · CVE record: Mozilla Firefox and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Authentication bypass
- [Denial-of-service in the DOM: Service Workers component](https://agentprime.io/advisories/CVE-2026-0889.md)
  `CVE-2026-0889` · CVE record: Mozilla Firefox and 1 more · CVSS 7.5 High · Not analysed yet · Published 13 Jan 2026 · Tags: Denial of service
- [Information disclosure in the XML component](https://agentprime.io/advisories/CVE-2026-0888.md)
  `CVE-2026-0888` · CVE record: Mozilla Firefox and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Information disclosure
- [Clickjacking issue, information disclosure in the PDF Viewer component](https://agentprime.io/advisories/CVE-2026-0887.md)
  `CVE-2026-0887` · CVE record: Mozilla Firefox and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Information disclosure
- [Incorrect boundary conditions in the Graphics component](https://agentprime.io/advisories/CVE-2026-0886.md)
  `CVE-2026-0886` · CVE record: Mozilla Firefox and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Use-after-free in the JavaScript: GC component](https://agentprime.io/advisories/CVE-2026-0885.md)
  `CVE-2026-0885` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Use-after-free in the JavaScript Engine component](https://agentprime.io/advisories/CVE-2026-0884.md)
  `CVE-2026-0884` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Information disclosure in the Networking component](https://agentprime.io/advisories/CVE-2026-0883.md)
  `CVE-2026-0883` · CVE record: Mozilla Firefox and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Information disclosure
- [Use-after-free in the IPC component](https://agentprime.io/advisories/CVE-2026-0882.md)
  `CVE-2026-0882` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Sandbox escape in the Messaging System component](https://agentprime.io/advisories/CVE-2026-0881.md)
  `CVE-2026-0881` · CVE record: Mozilla Firefox and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Jan 2026 · Tags: Broken access control, CWE-693
- [Sandbox escape due to integer overflow in the Graphics component](https://agentprime.io/advisories/CVE-2026-0880.md)
  `CVE-2026-0880` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Sandbox escape due to incorrect boundary conditions in the Graphics component](https://agentprime.io/advisories/CVE-2026-0879.md)
  `CVE-2026-0879` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component](https://agentprime.io/advisories/CVE-2026-0878.md)
  `CVE-2026-0878` · CVE record: Mozilla Firefox and 1 more · CVSS 8.0 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption, CWE-20
- [Mitigation bypass in the DOM: Security component](https://agentprime.io/advisories/CVE-2026-0877.md)
  `CVE-2026-0877` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 13 Jan 2026 · Tags: CWE-693
- [Memory safety bugs fixed in Firefox 146.0.1](https://agentprime.io/advisories/CVE-2025-14861.md)
  `CVE-2025-14861` · CVE record: Mozilla Firefox · CVSS 8.8 High · Not analysed yet · Published 18 Dec 2025 · Tags: Memory corruption
- [Use-after-free in the Disability Access APIs component](https://agentprime.io/advisories/CVE-2025-14860.md)
  `CVE-2025-14860` · CVE record: Mozilla Firefox · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Dec 2025 · Tags: Memory corruption
- [Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146](https://agentprime.io/advisories/CVE-2025-14333.md)
  `CVE-2025-14333` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [Memory safety bugs fixed in Firefox 146 and Thunderbird 146](https://agentprime.io/advisories/CVE-2025-14332.md)
  `CVE-2025-14332` · CVE record: Mozilla Firefox and 1 more · CVSS 7.3 High · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [Same-origin policy bypass in the Request Handling component](https://agentprime.io/advisories/CVE-2025-14331.md)
  `CVE-2025-14331` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-346
- [JIT miscompilation in the JavaScript Engine: JIT component](https://agentprime.io/advisories/CVE-2025-14330.md)
  `CVE-2025-14330` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption, CWE-686
- [Privilege escalation in the Netmonitor component](https://agentprime.io/advisories/CVE-2025-14329.md)
  `CVE-2025-14329` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 9 Dec 2025
- [Privilege escalation in the Netmonitor component](https://agentprime.io/advisories/CVE-2025-14328.md)
  `CVE-2025-14328` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 9 Dec 2025
- [Spoofing issue in the Downloads Panel component](https://agentprime.io/advisories/CVE-2025-14327.md)
  `CVE-2025-14327` · CVE record: Mozilla Firefox and 1 more · CVSS 7.5 High · Not analysed yet · Published 9 Dec 2025 · Tags: Authentication bypass
- [Use-after-free in the Audio/Video: GMP component](https://agentprime.io/advisories/CVE-2025-14326.md)
  `CVE-2025-14326` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [JIT miscompilation in the JavaScript Engine: JIT component](https://agentprime.io/advisories/CVE-2025-14325.md)
  `CVE-2025-14325` · CVE record: Mozilla Firefox and 1 more · CVSS 7.3 High · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [JIT miscompilation in the JavaScript Engine: JIT component](https://agentprime.io/advisories/CVE-2025-14324.md)
  `CVE-2025-14324` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Dec 2025 · Tags: Code injection
- [Privilege escalation in the DOM: Notifications component](https://agentprime.io/advisories/CVE-2025-14323.md)
  `CVE-2025-14323` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 9 Dec 2025
- [Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component](https://agentprime.io/advisories/CVE-2025-14322.md)
  `CVE-2025-14322` · CVE record: Mozilla Firefox and 1 more · CVSS 8.0 High · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-754
- [Use-after-free in the WebRTC: Signaling component](https://agentprime.io/advisories/CVE-2025-14321.md)
  `CVE-2025-14321` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [Memory safety bugs fixed in Firefox 145 and Thunderbird 145](https://agentprime.io/advisories/CVE-2025-13027.md)
  `CVE-2025-13027` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 11 Nov 2025 · Tags: Memory corruption
- [Use-after-free in the WebRTC: Audio/Video component](https://agentprime.io/advisories/CVE-2025-13020.md)
  `CVE-2025-13020` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 11 Nov 2025 · Tags: Memory corruption
- [Same-origin policy bypass in the DOM: Workers component](https://agentprime.io/advisories/CVE-2025-13019.md)
  `CVE-2025-13019` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-942
- [Mitigation bypass in the DOM: Security component](https://agentprime.io/advisories/CVE-2025-13018.md)
  `CVE-2025-13018` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 11 Nov 2025 · Tags: Authentication bypass
- [Same-origin policy bypass in the DOM: Notifications component](https://agentprime.io/advisories/CVE-2025-13017.md)
  `CVE-2025-13017` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-942
- [Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component](https://agentprime.io/advisories/CVE-2025-13026.md)
  `CVE-2025-13026` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-703
- [Incorrect boundary conditions in the Graphics: WebGPU component](https://agentprime.io/advisories/CVE-2025-13025.md)
  `CVE-2025-13025` · CVE record: Mozilla Firefox and 1 more · CVSS 7.5 High · Not analysed yet · Published 11 Nov 2025 · Tags: Broken access control
- [JIT miscompilation in the JavaScript Engine: JIT component](https://agentprime.io/advisories/CVE-2025-13024.md)
  `CVE-2025-13024` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-733
- [Incorrect boundary conditions in the JavaScript: WebAssembly component](https://agentprime.io/advisories/CVE-2025-13016.md)
  `CVE-2025-13016` · CVE record: Mozilla Firefox and 1 more · CVSS 7.5 High · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-703
- [Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component](https://agentprime.io/advisories/CVE-2025-13023.md)
  `CVE-2025-13023` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-703
- [Incorrect boundary conditions in the Graphics: WebGPU component](https://agentprime.io/advisories/CVE-2025-13022.md)
  `CVE-2025-13022` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-703
- [Incorrect boundary conditions in the Graphics: WebGPU component](https://agentprime.io/advisories/CVE-2025-13021.md)
  `CVE-2025-13021` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-703

Newest: <https://agentprime.io/advisories/technology/mozilla-firefox.md>
Older: <https://agentprime.io/advisories/technology/mozilla-firefox.md?cursor=WyIyMDI1LTExLTExVDE1OjQ3OjEzLjIxNDAwMFoiLCJDVkUtMjAyNS0xMzAyMSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=mozilla-firefox&cursor=WyIyMDI2LTAyLTI0VDEzOjMzOjA4LjUzODAwMFoiLCJDVkUtMjAyNi0yNzcxIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/mozilla-firefox/?cursor=WyIyMDI2LTAyLTI0VDEzOjMzOjA4LjUzODAwMFoiLCJDVkUtMjAyNi0yNzcxIl0>. Everything for agents: <https://agentprime.io/llms.txt>.