Mozilla Firefox for Android

Name: Mozilla Firefox for Android
Brand: Mozilla

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

unpatched

by severity

2critical13high17medium1low

updated 2026-10-28

vulnerabilities (33)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-26485US	high8.8OT critical	14.3% (97th)	KEV	97.3.0	2022-12-22	unspecified → 97.3.0
CVE-2022-26486US	critical9.6OT critical	2.36% (84th)	KEV	97.3.0	2022-12-22	unspecified → 97.3.0
CVE-2022-1802US	high8.8	28.5% (98th)	Exploit	100.3.0	2022-12-22	unspecified → 100.3.0
CVE-2022-1529US	high8.8	17.6% (97th)	—	100.3.0	2022-12-22	unspecified → 100.3.0
CVE-2024-8897US	medium6.1	7.56% (94th)	—	130.0.1	2024-09-17	unspecified → 130.0.1
CVE-2020-6829US	medium5.3	1.48% (74th)	—	80	2020-10-28	unspecified → 80
CVE-2020-15664US	medium6.5OT elevated	1.39% (72nd)	—	80	2020-10-01	unspecified → 80
CVE-2020-15666US	medium6.5	1.24% (69th)	—	80	2020-10-01	unspecified → 80
CVE-2020-15670US	high8.8	1.07% (65th)	—	80	2020-10-01	unspecified → 80
CVE-2023-29535US	medium6.5	0.75% (55th)	—	112	2023-06-02	unspecified → 112
CVE-2023-29541US	high8.8	0.74% (55th)	—	112	2023-06-02	unspecified → 112
CVE-2023-29539US	high8.8	0.74% (54th)	—	112	2023-06-02	unspecified → 112
CVE-2021-29952US	high7.5	0.74% (54th)	—	88.1.3	2021-06-24	unspecified → 88.1.3
CVE-2023-29550US	high8.8	0.71% (53rd)	—	112	2023-06-02	unspecified → 112
CVE-2023-29534US	critical9.1	0.71% (53rd)	—	112	2023-06-19	unspecified → 112
CVE-2023-29536US	high8.8	0.70% (53rd)	—	112	2023-06-02	unspecified → 112
CVE-2023-29548US	medium6.5	0.69% (53rd)	—	112	2023-06-02	unspecified → 112
CVE-2021-29953US	medium6.1	0.65% (51st)	—	88.1.3	2021-06-24	unspecified → 88.1.3
CVE-2023-25747US	high7.5	0.61% (49th)	—	110.1.0	2023-06-19	unspecified → 110.1.0
CVE-2023-29533US	medium4.3	0.57% (47th)	—	112	2023-06-02	unspecified → 112
CVE-2023-29537US	high7.5	0.56% (46th)	—	112	2023-06-02	unspecified → 112
CVE-2020-15668US	medium4.3	0.54% (45th)	—	80	2020-10-01	unspecified → 80
CVE-2023-29551US	high8.8	0.53% (44th)	—	112	2023-06-02	unspecified → 112
CVE-2023-29543US	high8.8	0.53% (44th)	—	112	2023-06-02	unspecified → 112
CVE-2023-29546US	medium6.5	0.50% (42nd)	—	112	2023-06-19	unspecified → 112
CVE-2020-15671US	low3.1	0.49% (42nd)	—	80	2020-10-01	unspecified → 80
CVE-2023-29547US	medium6.5	0.47% (41st)	—	112	2023-06-02	unspecified → 112
CVE-2023-29544US	medium6.5	0.45% (39th)	—	112	2023-06-02	unspecified → 112
CVE-2023-29538US	medium4.3	0.40% (34th)	—	112	2023-06-02	unspecified → 112
CVE-2023-29549US	medium6.5	0.33% (26th)	—	112	2023-06-02	unspecified → 112
CVE-2020-12401US	medium4.7OT elevated	0.33% (25th)	—	80	2020-10-08	unspecified → 80
CVE-2023-29540US	medium6.1	0.32% (24th)	—	112	2023-06-02	unspecified → 112
CVE-2020-12400US	medium4.7OT elevated	0.27% (19th)	—	80	2020-10-08	unspecified → 80

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-416Use After Free6 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-116Improper Encoding or Escaping of Output2 CVEs
CWE-1321Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-203Observable Discrepancy2 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)33 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan