Mozilla Firefox <107
productDEA product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
public exploit
0
EPSS ≥ 10%
by severity
1critical5high12medium0low
updated 2026-10-28
01
vulnerabilities (18)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2022-45406US | critical9.8 | — |
| CVE-2022-45412US | high8.8 | — |
| CVE-2022-45410US | medium6.5OT elevated | — |
| CVE-2022-45409US | high8.8 | — |
| CVE-2022-45418US | medium6.1 | — |
| CVE-2022-45421US | high8.8 | — |
| CVE-2022-45403US | medium6.5 | — |
| CVE-2022-45416US | medium6.5 | — |
| CVE-2022-45408US | medium6.5 | — |
| CVE-2022-45405US | medium6.5 | — |
| CVE-2022-45407US | high7.5 | — |
| CVE-2022-45404US | medium6.5 | — |
| CVE-2022-45411US | medium6.1 | — |
| CVE-2022-45420US | medium6.5 | — |
| CVE-2022-45413US | medium6.1 | — |
| CVE-2022-45417US | medium4.3 | — |
| CVE-2022-45419US | medium6.5 | — |
| CVE-2022-45415US | high7.8 | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-1021Improper Restriction of Rendered UI Layers or Frames5 CVEs
- CWE-416Use After Free4 CVEs
- CWE-451User Interface (UI) Misrepresentation of Critical Information4 CVEs
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
- CWE-203Observable Discrepancy2 CVEs
- CWE-254CWE-2542 CVEs
- CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
- CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
03
sources (1)
Which sources assert this record, and when.
- DECERT-Bund (BSI CSAF)18 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan