Mozilla Firefox

Name: Mozilla Firefox
Brand: Mozilla

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

298critical478high497medium10low

updated 2026-10-27

vulnerabilities (2,092)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2016-9079US	high7.5OT critical	87.4% (100th)	KEV	50.0.2	2018-06-11	unspecified → 50.0.2
CVE-2020-15999US	critical9.6OT critical	63.9% (99th)	KEV	83	2020-11-03	< 83
CVE-2019-11708US	critical10.0OT critical	55.9% (99th)	KEV	67.0.4	2019-07-23	unspecified → 67.0.4
CVE-2019-17026US	high8.8OT critical	46.3% (99th)	KEV	72.0.1	2020-03-02	unspecified → 72.0.1
CVE-2019-11707US	high8.8OT critical	37.7% (99th)	KEV	67.0.3	2019-07-23	unspecified → 67.0.3
CVE-2024-9680US	critical9.8OT critical	23.2% (98th)	KEV	131.0.2	2024-10-09	2 versions
CVE-2022-26485US	high8.8OT critical	14.3% (97th)	KEV	97.0.2	2022-12-22	unspecified → 97.0.2
CVE-2020-6820US	high8.1OT critical	7.06% (94th)	KEV	74.0.1	2020-04-24	unspecified → 74.0.1
CVE-2020-6819US	high8.1OT critical	3.04% (87th)	KEV	74.0.1	2020-04-24	unspecified → 74.0.1
CVE-2022-26486US	critical9.6OT critical	2.36% (84th)	KEV	97.0.2	2022-12-22	unspecified → 97.0.2
CVE-2024-4367US	high8.8	70.7% (99th)	Exploit	126	2024-05-14	unspecified → 126
CVE-2026-33626US	—	45.3% (99th)	Exploit	150	2026-04-20	< 150
CVE-2020-26950US	high8.8	42.3% (99th)	Exploit	no fix	2020-12-09	≤ < 82.0.3
CVE-2017-5375US	critical9.8	34.1% (98th)	Exploit	51	2018-06-11	unspecified → 51
CVE-2022-1802US	high8.8	28.5% (98th)	Exploit	100.0.2	2022-12-22	unspecified → 100.0.2
CVE-2019-9810US	high8.8	27.2% (98th)	Exploit	66.0.1	2019-04-26	unspecified → 66.0.1
CVE-2024-29943US	—	22.9% (98th)	Exploit	124.0.1	2024-03-22	3 versions
CVE-2016-9899US	critical9.8	20.8% (98th)	Exploit	50.1	2018-06-11	unspecified → 50.1
CVE-2018-5159US	critical9.8	20.6% (98th)	Exploit	60	2018-06-11	unspecified → 60
CVE-2019-9791US	critical9.8	19.9% (97th)	Exploit	66	2019-04-26	unspecified → 66
CVE-2017-5465US	critical9.1	18.2% (97th)	Exploit	53	2018-06-11	unspecified → 53
CVE-2017-5447US	critical9.1	17.0% (97th)	Exploit	53	2018-06-11	unspecified → 53
CVE-2017-5404US	critical9.8	16.9% (97th)	Exploit	52	2018-06-11	unspecified → 52
CVE-2022-24713US	high7.5	14.5% (97th)	Exploit	99	2022-03-08	< 99
CVE-2017-7783US	high7.5	13.8% (96th)	Exploit	55	2018-06-11	2 versions
CVE-2018-12386US	high8.1	13.4% (96th)	Exploit	62.0.3	2018-10-18	unspecified → 62.0.3
CVE-2019-9792US	critical9.8	13.2% (96th)	Exploit	66	2019-04-26	unspecified → 66
CVE-2017-5415US	medium5.3	12.3% (96th)	Exploit	52	2018-06-11	unspecified → 52
CVE-2016-9066US	high7.5	12.0% (96th)	Exploit	50	2018-06-11	unspecified → 50
CVE-2018-5146US	high8.8	11.9% (96th)	Exploit	59.0.1	2018-06-11	unspecified → 59.0.1
CVE-2018-5158US	high8.8	10.2% (96th)	Exploit	60	2018-06-11	unspecified → 60
CVE-2019-9813US	high8.8	6.69% (94th)	Exploit	66.0.1	2019-04-26	unspecified → 66.0.1
CVE-2019-9816US	medium5.9	6.15% (93rd)	Exploit	67	2019-07-23	unspecified → 67
CVE-2024-8381US	critical9.8	4.40% (91st)	Exploit	130	2024-09-03	2 versions
CVE-2026-6770US	—	3.88% (90th)	Exploit	150	2026-04-21	< 150
CVE-2022-28281US	high8.8	2.78% (86th)	Exploit	99	2022-12-22	2 versions
CVE-2020-16012US	medium4.3	2.57% (85th)	Exploit	83	2021-01-08	< 83
CVE-2024-0741US	medium6.5	2.15% (82nd)	Exploit	122	2024-01-23	3 versions
CVE-2021-43530US	medium6.1	1.41% (73rd)	Exploit	94	2021-12-08	unspecified → 94
CVE-2025-1015US	medium5.4	1.37% (72nd)	Exploit	135	2025-02-04	< 135
CVE-2026-2796US	critical9.8	0.95% (61st)	Exploit	148	2026-02-24	2 versions
CVE-2026-10702US	—	0.86% (58th)	Exploit	151.0.3	2026-06-02	< 151.0.3
CVE-2026-2766US	critical9.8	0.74% (54th)	Exploit	148	2026-02-24	2 versions
CVE-2026-2764US	critical9.8	0.74% (54th)	Exploit	148	2026-02-24	2 versions
CVE-2026-2763US	critical9.8	0.74% (54th)	Exploit	148	2026-02-24	2 versions
CVE-2026-74943US	critical9.8	0.61% (49th)	Exploit	154	2026-08-18	< 154
CVE-2026-74936US	critical9.8	0.59% (48th)	Exploit	154	2026-08-18	< 154
CVE-2026-4692US	critical10.0	0.51% (43rd)	Exploit	149	2026-03-24	< 149
CVE-2026-74939US	—	0.45% (39th)	Exploit	154	2026-08-18	< 154
CVE-2026-74945US	—	0.44% (38th)	Exploit	154	2026-08-18	< 154

showing 50 of 2,092

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-416Use After Free345 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer335 CVEs
CWE-787Out-of-bounds Write212 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor163 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')138 CVEs
CWE-20Improper Input Validation136 CVEs
CWE-1021Improper Restriction of Rendered UI Layers or Frames94 CVEs
CWE-451User Interface (UI) Misrepresentation of Critical Information81 CVEs

sources (3)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)1,233 CVEs
DECERT-Bund (BSI CSAF)1,192 CVEs
NLNCSC-NL (CSAF)51 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan