{"schema_version":1,"title":"Mozilla vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 438 vulnerabilities in Mozilla: 0 in the last 7 days and 241 in the last 90 days, 110 of them critical and 13 exploited in the wild. The most recent, CVE-2026-92240, was published on 15 September 2026. 8 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/mozilla","json_url":"https://junglewise.ai/threats/vendors/mozilla.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/mozilla","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":129,"all_time":438,"critical":110,"exploited":13,"last_7_days":0,"last_30_days":114,"last_90_days":241,"last_365_days":421},"latest":[{"cve":"CVE-2026-92240","cvss":9.1,"epss":0.0063,"slug":"cve-2026-92240-mozilla-thunderbird-out-of-bounds-read-in-imap-response-parser","title":"Mozilla Thunderbird out-of-bounds read in IMAP response parser","severity":"critical","exploited":false,"published_at":"2026-09-15T20:19:41.677+00:00","url":"https://junglewise.ai/threats/cve-2026-92240-mozilla-thunderbird-out-of-bounds-read-in-imap-response-parser"},{"cve":"CVE-2026-92239","cvss":8.1,"epss":0.0041,"slug":"cve-2026-92239-mozilla-thunderbird-buffer-overrun-in-imap-response-parsing","title":"Mozilla Thunderbird buffer overrun in IMAP response parsing","severity":"high","exploited":false,"published_at":"2026-09-15T20:19:41.577+00:00","url":"https://junglewise.ai/threats/cve-2026-92239-mozilla-thunderbird-buffer-overrun-in-imap-response-parsing"},{"cve":"CVE-2026-92238","cvss":9.8,"epss":0.0054,"slug":"cve-2026-92238-mozilla-thunderbird-mail-header-parsing-ambiguity","title":"Mozilla Thunderbird mail header parsing ambiguity","severity":"critical","exploited":false,"published_at":"2026-09-15T20:19:41.477+00:00","url":"https://junglewise.ai/threats/cve-2026-92238-mozilla-thunderbird-mail-header-parsing-ambiguity"},{"cve":"CVE-2026-92079","cvss":9.1,"epss":0.005,"slug":"cve-2026-92079-mozilla-firefox-mitigation-bypass-in-widget-win32","title":"Mozilla Firefox mitigation bypass in Widget: Win32","severity":"critical","exploited":false,"published_at":"2026-09-15T13:17:03.56+00:00","url":"https://junglewise.ai/threats/cve-2026-92079-mozilla-firefox-mitigation-bypass-in-widget-win32"},{"cve":"CVE-2026-92078","cvss":6.5,"epss":0.0042,"slug":"cve-2026-92078-mozilla-firefox-denial-of-service-in-security-component","title":"Mozilla Firefox denial-of-service in Security component","severity":"medium","exploited":false,"published_at":"2026-09-15T13:17:03.44+00:00","url":"https://junglewise.ai/threats/cve-2026-92078-mozilla-firefox-denial-of-service-in-security-component"},{"cve":"CVE-2026-92077","cvss":6.5,"epss":0.0042,"slug":"cve-2026-92077-mozilla-firefox-denial-of-service-in-svg-component","title":"Mozilla Firefox denial-of-service in SVG component","severity":"medium","exploited":false,"published_at":"2026-09-15T13:17:03.323+00:00","url":"https://junglewise.ai/threats/cve-2026-92077-mozilla-firefox-denial-of-service-in-svg-component"},{"cve":"CVE-2026-92076","cvss":8.8,"epss":0.0016,"slug":"cve-2026-92076-mozilla-firefox-incorrect-boundary-conditions-in-networking","title":"Mozilla Firefox incorrect boundary conditions in Networking","severity":"high","exploited":false,"published_at":"2026-09-15T13:17:03.18+00:00","url":"https://junglewise.ai/threats/cve-2026-92076-mozilla-firefox-incorrect-boundary-conditions-in-networking"},{"cve":"CVE-2026-92075","cvss":9.1,"epss":0.005,"slug":"cve-2026-92075-mozilla-firefox-mitigation-bypass-in-networking-component","title":"Mozilla Firefox mitigation bypass in Networking component","severity":"critical","exploited":false,"published_at":"2026-09-15T13:17:03.04+00:00","url":"https://junglewise.ai/threats/cve-2026-92075-mozilla-firefox-mitigation-bypass-in-networking-component"},{"cve":"CVE-2026-92074","cvss":8.8,"epss":0.0017,"slug":"cve-2026-92074-mozilla-firefox-and-thunderbird-popup-blocker-mitigation-bypass","title":"Mozilla Firefox and Thunderbird Popup Blocker mitigation bypass","severity":"high","exploited":false,"published_at":"2026-09-15T13:17:02.877+00:00","url":"https://junglewise.ai/threats/cve-2026-92074-mozilla-firefox-and-thunderbird-popup-blocker-mitigation-bypass"},{"cve":"CVE-2026-92073","cvss":8.8,"epss":0.0044,"slug":"cve-2026-92073-mozilla-firefox-privilege-escalation-in-enterprise-policies","title":"Mozilla Firefox privilege escalation in Enterprise Policies","severity":"high","exploited":false,"published_at":"2026-09-15T13:17:02.153+00:00","url":"https://junglewise.ai/threats/cve-2026-92073-mozilla-firefox-privilege-escalation-in-enterprise-policies"},{"cve":"CVE-2026-92072","cvss":8,"epss":0.0043,"slug":"cve-2026-92072-mozilla-firefox-incorrect-boundary-conditions-in-safe-browsing","title":"Mozilla Firefox incorrect boundary conditions in Safe Browsing component","severity":"high","exploited":false,"published_at":"2026-09-15T13:17:02.003+00:00","url":"https://junglewise.ai/threats/cve-2026-92072-mozilla-firefox-incorrect-boundary-conditions-in-safe-browsing"},{"cve":"CVE-2026-92071","cvss":9.6,"epss":0.0048,"slug":"cve-2026-92071-mozilla-firefox-sandbox-escape-in-widget-win32-component","title":"Mozilla Firefox sandbox escape in Widget: Win32 component","severity":"critical","exploited":false,"published_at":"2026-09-15T13:17:01.86+00:00","url":"https://junglewise.ai/threats/cve-2026-92071-mozilla-firefox-sandbox-escape-in-widget-win32-component"},{"cve":"CVE-2026-92070","cvss":4.3,"epss":0.0034,"slug":"cve-2026-92070-mozilla-firefox-information-disclosure-in-networking-component","title":"Mozilla Firefox information disclosure in Networking component","severity":"medium","exploited":false,"published_at":"2026-09-15T13:17:01.747+00:00","url":"https://junglewise.ai/threats/cve-2026-92070-mozilla-firefox-information-disclosure-in-networking-component"},{"cve":"CVE-2026-92069","cvss":5.4,"epss":0.0034,"slug":"cve-2026-92069-mozilla-firefox-spoofing-issue-in-dom-navigation-component","title":"Mozilla Firefox spoofing issue in DOM Navigation component","severity":"medium","exploited":false,"published_at":"2026-09-15T13:17:01.62+00:00","url":"https://junglewise.ai/threats/cve-2026-92069-mozilla-firefox-spoofing-issue-in-dom-navigation-component"},{"cve":"CVE-2026-92068","cvss":5.4,"epss":0.0017,"slug":"cve-2026-92068-mozilla-firefox-site-isolation-issue-in-reader-mode","title":"Mozilla Firefox site isolation issue in Reader Mode","severity":"medium","exploited":false,"published_at":"2026-09-15T13:17:01.513+00:00","url":"https://junglewise.ai/threats/cve-2026-92068-mozilla-firefox-site-isolation-issue-in-reader-mode"},{"cve":"CVE-2026-92067","cvss":8.8,"epss":0.0047,"slug":"cve-2026-92067-mozilla-firefox-use-after-free-in-widget-gtk-component","title":"Mozilla Firefox use-after-free in Widget: Gtk component","severity":"high","exploited":false,"published_at":"2026-09-15T13:17:01.403+00:00","url":"https://junglewise.ai/threats/cve-2026-92067-mozilla-firefox-use-after-free-in-widget-gtk-component"},{"cve":"CVE-2026-92066","cvss":9.8,"epss":0.0059,"slug":"cve-2026-92066-mozilla-firefox-sandbox-escape-in-profile-backup","title":"Mozilla Firefox sandbox escape in Profile Backup","severity":"critical","exploited":false,"published_at":"2026-09-15T13:17:01.283+00:00","url":"https://junglewise.ai/threats/cve-2026-92066-mozilla-firefox-sandbox-escape-in-profile-backup"},{"cve":"CVE-2026-92065","cvss":8.8,"epss":0.0016,"slug":"cve-2026-92065-mozilla-firefox-sandbox-escape-in-widget-win32","title":"Mozilla Firefox sandbox escape in Widget: Win32","severity":"high","exploited":false,"published_at":"2026-09-15T13:17:01.147+00:00","url":"https://junglewise.ai/threats/cve-2026-92065-mozilla-firefox-sandbox-escape-in-widget-win32"},{"cve":"CVE-2026-92064","cvss":8.8,"epss":0.0016,"slug":"cve-2026-92064-mozilla-firefox-sandbox-escape-in-widget-win32-component","title":"Mozilla Firefox sandbox escape in Widget: Win32 component","severity":"high","exploited":false,"published_at":"2026-09-15T13:17:01.02+00:00","url":"https://junglewise.ai/threats/cve-2026-92064-mozilla-firefox-sandbox-escape-in-widget-win32-component"},{"cve":"CVE-2026-92063","cvss":6.5,"epss":0.0041,"slug":"cve-2026-92063-mozilla-firefox-denial-of-service-in-audio-video-component","title":"Mozilla Firefox denial-of-service in Audio/Video component","severity":"medium","exploited":false,"published_at":"2026-09-15T13:17:00.9+00:00","url":"https://junglewise.ai/threats/cve-2026-92063-mozilla-firefox-denial-of-service-in-audio-video-component"},{"cve":"CVE-2026-92062","cvss":8.8,"epss":0.0044,"slug":"cve-2026-92062-mozilla-firefox-privilege-escalation-in-session-restore-component","title":"Mozilla Firefox privilege escalation in Session Restore component","severity":"high","exploited":false,"published_at":"2026-09-15T13:17:00.777+00:00","url":"https://junglewise.ai/threats/cve-2026-92062-mozilla-firefox-privilege-escalation-in-session-restore-component"},{"cve":"CVE-2026-92061","cvss":9.8,"epss":0.0059,"slug":"cve-2026-92061-mozilla-firefox-incorrect-boundary-conditions-in-process","title":"Mozilla Firefox incorrect boundary conditions in process sandboxing","severity":"critical","exploited":false,"published_at":"2026-09-15T13:17:00.653+00:00","url":"https://junglewise.ai/threats/cve-2026-92061-mozilla-firefox-incorrect-boundary-conditions-in-process"},{"cve":"CVE-2026-92060","cvss":8.8,"epss":0.0047,"slug":"cve-2026-92060-mozilla-firefox-use-after-free-in-internationalization-component","title":"Mozilla Firefox use-after-free in Internationalization component","severity":"high","exploited":false,"published_at":"2026-09-15T13:17:00.51+00:00","url":"https://junglewise.ai/threats/cve-2026-92060-mozilla-firefox-use-after-free-in-internationalization-component"},{"cve":"CVE-2026-92059","cvss":9.3,"epss":0.0018,"slug":"cve-2026-92059-mozilla-firefox-incorrect-boundary-conditions-in-dom-editor","title":"Mozilla Firefox incorrect boundary conditions in DOM Editor component","severity":"critical","exploited":false,"published_at":"2026-09-15T13:17:00.35+00:00","url":"https://junglewise.ai/threats/cve-2026-92059-mozilla-firefox-incorrect-boundary-conditions-in-dom-editor"},{"cve":"CVE-2026-92058","cvss":8.8,"epss":0.0047,"slug":"cve-2026-92058-mozilla-firefox-use-after-free-in-graphics-component","title":"Mozilla Firefox use-after-free in Graphics component","severity":"high","exploited":false,"published_at":"2026-09-15T13:17:00.207+00:00","url":"https://junglewise.ai/threats/cve-2026-92058-mozilla-firefox-use-after-free-in-graphics-component"}],"vendor":{"hub":true,"name":"Mozilla","slug":"mozilla","homepage":"https://www.mozilla.org/","description":"A non-profit organization and its subsidiary that develop the Firefox web browser and other open-source internet technologies.","url":"https://junglewise.ai/threats/vendors/mozilla"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":65},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":15,"exploited":0,"vulnerabilities":55},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-31","critical":11,"exploited":0,"vulnerabilities":34},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-09-14","critical":21,"exploited":0,"vulnerabilities":77},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2019-11708","cvss":10,"slug":"cve-2019-11708-mozilla-firefox-and-thunderbird-sandbox-escape-vulnerability","title":"Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-11708-mozilla-firefox-and-thunderbird-sandbox-escape-vulnerability"},{"cve":"CVE-2010-3765","cvss":9.8,"epss":0.8662,"slug":"cve-2010-3765-mozilla-multiple-products-memory-corruption-in","title":"Mozilla Multiple Products memory corruption in nsCSSFrameConstructor","severity":"critical","exploited":true,"published_at":"2025-10-06T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-3765-mozilla-multiple-products-memory-corruption-in"},{"cve":"CVE-2024-9680","cvss":9.8,"slug":"cve-2024-9680-mozilla-firefox-use-after-free-vulnerability","title":"Mozilla Firefox Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2024-10-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-9680-mozilla-firefox-use-after-free-vulnerability"},{"cve":"CVE-2022-26486","cvss":9.6,"slug":"cve-2022-26486-mozilla-firefox-use-after-free-vulnerability","title":"Mozilla Firefox Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-26486-mozilla-firefox-use-after-free-vulnerability"},{"cve":"CVE-2015-4495","cvss":8.8,"slug":"cve-2015-4495-mozilla-firefox-security-feature-bypass-vulnerability","title":"Mozilla Firefox Security Feature Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-4495-mozilla-firefox-security-feature-bypass-vulnerability"},{"cve":"CVE-2019-11707","cvss":8.8,"slug":"cve-2019-11707-mozilla-firefox-and-thunderbird-type-confusion-vulnerability","title":"Mozilla Firefox and Thunderbird Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-11707-mozilla-firefox-and-thunderbird-type-confusion-vulnerability"},{"cve":"CVE-2013-1690","cvss":8.8,"slug":"cve-2013-1690-mozilla-firefox-and-thunderbird-denial-of-service-vulnerability","title":"Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-1690-mozilla-firefox-and-thunderbird-denial-of-service-vulnerability"},{"cve":"CVE-2022-26485","cvss":8.8,"slug":"cve-2022-26485-mozilla-firefox-use-after-free-vulnerability","title":"Mozilla Firefox Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-26485-mozilla-firefox-use-after-free-vulnerability"},{"cve":"CVE-2019-17026","cvss":8.8,"slug":"cve-2019-17026-mozilla-firefox-and-thunderbird-type-confusion-vulnerability","title":"Mozilla Firefox And Thunderbird Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-17026-mozilla-firefox-and-thunderbird-type-confusion-vulnerability"},{"cve":"CVE-2020-6819","cvss":8.1,"slug":"cve-2020-6819-mozilla-firefox-and-thunderbird-use-after-free-vulnerability","title":"Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-6819-mozilla-firefox-and-thunderbird-use-after-free-vulnerability"}],"generated_at":"2026-09-26T09:11:00.170868+00:00","technologies":[{"name":"Mozilla Firefox","slug":"firefox","vulnerabilities":393,"url":"https://junglewise.ai/threats/technologies/firefox"},{"name":"Mozilla Firefox ESR","slug":"firefox-esr","vulnerabilities":295,"url":"https://junglewise.ai/threats/technologies/firefox-esr"},{"name":"Mozilla Thunderbird","slug":"thunderbird","vulnerabilities":267,"url":"https://junglewise.ai/threats/technologies/thunderbird"},{"name":"Mozilla Thunderbird-Esr","slug":"thunderbird-esr","vulnerabilities":66,"url":"https://junglewise.ai/threats/technologies/thunderbird-esr"},{"name":"Mozilla Firefox for iOS","slug":"firefox-for-ios","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/firefox-for-ios"},{"name":"Mozilla Firefox for Android","slug":"firefox-for-android","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/firefox-for-android"},{"name":"Mozilla Firefox Mobile","slug":"firefox-mobile","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/firefox-mobile"},{"name":"Mozilla Firefox Focus","slug":"firefox-focus-for-android","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/firefox-focus-for-android"}]}