Search CVEs, research… / diras.sa

VENDOR

Mozilla vulnerabilities: CVEs, exploitation and patches

Every Mozilla CVE reviewed by Diras Labs analysts, newest first, with exploitation status and fixes.

  1. CVE-2026-84135
    Firefox remote code execution via input-validation flaw Mozilla Firefox ·
    CRITICAL 9.8
  2. CVE-2026-84134
    Firefox information disclosure unauthenticated (CWE-200) Mozilla Firefox ·
    CRITICAL 9.8
  3. CVE-2026-84133
    Firefox site isolation bypass in DOM Push Subscriptions component Mozilla Firefox ·
    CRITICAL 9.8
  4. CVE-2026-84142
    Firefox memory corruption pre-auth remote code execution Mozilla Firefox ·
    CRITICAL 9.8
  5. CVE-2026-84140
    Firefox site isolation navigation pre-auth remote code execution Mozilla Firefox ·
    CRITICAL 9.8
  6. CVE-2026-84141
    Firefox integer overflow in ImageLib component Mozilla Firefox ·
    CRITICAL 9.8
  7. CVE-2026-84143
    Firefox memory-corruption remote code execution Mozilla Firefox ·
    CRITICAL 9.8
  8. CVE-2026-92036
    Firefox memory-safety flaw in HTTP networking allows remote code execution Mozilla Firefox ·
    CRITICAL 9.8
  9. CVE-2026-92037
    Firefox DOM animation boundary bug allows pre-auth remote code execution Mozilla Firefox ·
    CRITICAL 9.8
  10. CVE-2026-92061
    Firefox process sandboxing buffer overflow remote code execution Mozilla Firefox ·
    CRITICAL 9.8
  11. CVE-2026-92066
    Firefox sandbox escape leading to remote code execution Mozilla Firefox ·
    CRITICAL 9.8
  12. CVE-2026-16367
    Firefox sandbox escape in Disability Access APIs (invalid pointer) Mozilla Firefox ·
    CRITICAL 10
  13. CVE-2026-75874
    Firefox sandbox escape in Remote Settings Client Mozilla Firefox ·
    CRITICAL 10
  14. CVE-2026-74939
    Firefox DOM navigation privilege escalation vulnerability Mozilla Firefox ·
    • PoC PUBLIC
    HIGH 8.8
14 CVEs · page 2 of 2