Vulnerabilidades de Mozilla

CVEs publicadas que afetam produtos de Mozilla: 642 registro(s), com severidade, exploração e correções.

Firefox 606 Thunderbird 523 Firefox Mobile 17 Firefox ESR 11 Firefox Focus 4 Focus 3 Thunderbird Esr 2 Firefox for Android 2 Firefox Os 1 Seamonkey 1 Thin-vec 1 0din Scanner 1 Rhino 1 Klar 1 Node-convict 1 Network Security Services 1

Somente exploradas (KEV) →

CVE-2026-74940 Crítica · 9.8 CWE-416 18/08/2026

Use-after-free in the Graphics: Text component

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

CVE-2026-74939 Alta · 8.8 CWE-269 18/08/2026

Privilege escalation in the DOM: Navigation component

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

CVE-2026-74938 Crítica · 9.1 CWE-693 18/08/2026

Mitigation bypass in the JavaScript: GC component

Mitigation bypass in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

CVE-2026-74937 Alta · 8.8 CWE-416 18/08/2026

Use-after-free in the JavaScript: GC component

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

CVE-2026-74936 Crítica · 9.8 CWE-416 18/08/2026

Use-after-free in the JavaScript: WebAssembly component

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

CVE-2026-74935 Alta · 8.8 CWE-269 18/08/2026

Privilege escalation in the DOM: Networking component

Privilege escalation in the DOM: Networking component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

CVE-2026-74934 Alta · 7.5 CWE-200 18/08/2026

Site isolation issue in the Graphics: CanvasWebGL component

Site isolation issue in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

CVE-2026-14899 Alta · 7.5 CWE-193 22/07/2026

Off-by-one out of bounds read in MIME header parser for forwarding

The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) had an off-by-one error, allowing a single byte to be read from the memory after the buffer for the headers, and potentially crashing Thunderbird. This vulnerability was fixed in Thunderbird 153 and Thunderbird 140.13.

CVE-2026-16412 Crítica · 9.8 CWE-119 21/07/2026

Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153

Memory safety bugs present in Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

CVE-2026-16411 Crítica · 9.8 CWE-119 21/07/2026

Memory safety bugs fixed in Firefox 153

Memory safety bugs present in Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVE-2026-16410 Crítica · 9.8 CWE-843 21/07/2026

JIT miscompilation in the JavaScript Engine: JIT component

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVE-2026-16409 Alta · 7.5 CWE-824 21/07/2026

Invalid pointer in the Security: PSM component

Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVE-2026-16408 Crítica · 9.8 CWE-190 21/07/2026

Integer overflow in the Audio/Video: Playback component

Integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVE-2026-16407 Crítica · 9.8 CWE-284 21/07/2026

Mitigation bypass in the DOM: Service Workers component

Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVE-2026-16406 Crítica · 9.1 CWE-693 21/07/2026

Mitigation bypass in the Networking component

Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVE-2026-16405 Alta · 7.5 CWE-200 21/07/2026

Information disclosure in the Networking: WebSockets component

Information disclosure in the Networking: WebSockets component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

CVE-2026-16404 Alta · 7.4 CWE-290 21/07/2026

Spoofing issue in Firefox for Android

Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153.

CVE-2026-16403 Média · 6.5 CWE-451 21/07/2026

Spoofing issue in the Address Bar component

Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVE-2026-16402 Crítica · 9.8 CWE-190 21/07/2026

Integer overflow in the Graphics: ImageLib component

Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVE-2026-16401 Alta · 8.8 CWE-269 21/07/2026

Privilege escalation in the Data Loss Prevention component

Privilege escalation in the Data Loss Prevention component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVE-2026-16400 Alta · 7.5 CWE-200 21/07/2026

Information disclosure in the DOM: Security component

Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVE-2026-16399 Alta · 7.5 CWE-346 21/07/2026

Site isolation issue in the DOM: Navigation component

Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVE-2026-16398 Alta · 7.5 CWE-200 21/07/2026

Site isolation issue in the Graphics component

Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVE-2026-16397 Média · 6.5 CWE-1021 21/07/2026

Clickjacking issue in the WebExtensions component in Firefox for Android

Clickjacking issue in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 153.

CVE-2026-16396 Alta · 8.8 CWE-269 21/07/2026

Privilege escalation in WebExtensions

Privilege escalation in WebExtensions. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.