Vulnerabilidades de Mozilla
CVEs publicadas que afetam produtos de Mozilla: 564 registro(s), com severidade, exploração e correções.
Firefox 533Thunderbird 447Firefox Mobile 15Firefox ESR 10Firefox Focus 4Focus 3Thunderbird Esr 2Firefox for Android 2Firefox Os 1Seamonkey 1Thin-vec 10din Scanner 1Rhino 1Klar 1Node-convict 1Network Security Services 1
CVE-2026-84137
Média · 4.3
CWE-346 01/09/2026
Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in…
Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84136
Média · 6.1
CWE-79 01/09/2026
Cross-site Scripting (XSS) em Mozilla Firefox
Other issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84135
Crítica · 9.8
CWE-20 01/09/2026
Improper Input Validation em Mozilla Firefox Mobile
Other issue in Firefox Focus for Android. This vulnerability was fixed in Firefox 155.
CVE-2026-84134
Crítica · 9.8
CWE-200 01/09/2026
Exposure of Sensitive Information em Mozilla Firefox
Other issue in the Profile Backup component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84133
Crítica · 9.8
CWE-346 01/09/2026
Site isolation issue in the DOM: Push Subscriptions component. This vulnerability was…
Site isolation issue in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84132
Alta · 7.5
CWE-200 01/09/2026
Exposure of Sensitive Information em Mozilla Firefox
Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84131
Alta · 8.8
CWE-763 01/09/2026
Privilege escalation due to invalid pointer in the Graphics component. This…
Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-84130
Alta · 7.5
CWE-200 01/09/2026
Exposure of Sensitive Information em Mozilla Firefox
Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84129
Crítica · 9.8
CWE-346 01/09/2026
Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in…
Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84128
Alta · 8.8
CWE-284 01/09/2026
Improper Access Control em Mozilla Firefox
Privilege escalation in the WebDriver BiDi component. This vulnerability was fixed in Firefox 155 and Thunderbird 155.
CVE-2026-84127
Média · 4.3
CWE-200 01/09/2026
Exposure of Sensitive Information em Mozilla Firefox Mobile
Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155.
CVE-2026-84126
Média · 4.3
CWE-120 01/09/2026
Classic Buffer Overflow em Mozilla Firefox
Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155.
CVE-2026-84125
Média · 5.4
CWE-416 01/09/2026
Use After Free em Mozilla Firefox
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84124
Média · 5.4
CWE-416 01/09/2026
Use After Free em Mozilla Firefox
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-84123
Alta · 8.8
CWE-416 01/09/2026
Use After Free em Mozilla Firefox
Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84122
Média · 5.4
CWE-416 01/09/2026
Use After Free em Mozilla Firefox
Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-84121
Crítica · 9.6
CWE-416 01/09/2026
Use After Free em Mozilla Firefox
Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-84120
Média · 5.4
CWE-416 01/09/2026
Use After Free em Mozilla Firefox
Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-84119
Crítica · 9.6
CWE-416 01/09/2026
Use After Free em Mozilla Firefox
Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-84118
Média · 5.4
CWE-416 01/09/2026
Use After Free em Mozilla Firefox
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84117
Alta · 8.8
CWE-284 01/09/2026
Improper Access Control em Mozilla Firefox Mobile
Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 155.
CVE-2026-81267
Média · 5.4
CWE-451 31/08/2026
A malicious webpage could stall a popup's cross-origin navigation after commit, causing…
A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 155.0.
CVE-2026-75874
Crítica · 10.0
CWE-693 18/08/2026
Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in…
Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Thunderbird 154, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-74990
Crítica · 9.8
CWE-119 18/08/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Mozilla Firefox
Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74989
Crítica · 9.8
CWE-119 18/08/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Mozilla Firefox
Internally found bugs present in Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154 and Thunderbird 154.