M
Vendor security profile13 actively exploited CVEs
mozilla
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs758
Critical206
CISA KEV13
Public exploit28
Patch rate%1
Avg. CVSS7.9
12-month vulnerability rate
0
16
8
32
21
22
31
22
69
60
191
85
CVE KEV
CVE severity distribution
758toplam CVE
Critical206 (27%)
High295 (39%)
Medium205 (27%)
Low3 (0%)
Uncertain49 (6%)
Patch and exploitation view
%1
Verified patch
%2
CISA KEV
%4
Public exploit
5Patch available
3Partial
7Workaround
0Vendor: no patch
743Unknown
Latest vulnerabilities
-
CVE-2026-110249
Denial-of-service in the Exchange email component
M
Patch status unknown
-
CVE-2026-110247
Integer overflow in libmime buffer growth could lead to heap corruption
M
Patch status unknown
-
CVE-2026-109783
Mitigation bypass in the File Handling component
M
Patch status unknown
-
CVE-2026-109782
Mitigation bypass in the File Handling component
M
Patch status unknown
6.5
CVE-2026-109781
Denial-of-service in the Printing: Output component
M
Patch status unknown
-
CVE-2026-109780
Mitigation bypass in the DOM: Core & HTML component
M
Patch status unknown
4.2
CVE-2026-109779
Race condition in the Networking: DNS component
M
Patch status unknown
8.8
CVE-2026-109778
Privilege escalation in the WebExtensions component
M
Patch status unknown
4.3
CVE-2026-109777
Information disclosure in the Storage: IndexedDB component
M
Patch status unknown
-
CVE-2026-109776
Race condition in the XPCOM component
M
Patch status unknown