mozilla firefox

Name: mozilla firefox
Brand: mozilla

productUS

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

336critical1220high1107medium65low

updated 2026-10-25

vulnerabilities (3,448)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-4863US	high8.8OT critical	100.0% (100th)	KEV	115.2.1	2023-09-12	3 versions
CVE-2016-9079US	high7.5OT critical	87.4% (100th)	KEV	50.0.2	2018-06-11	2 versions
CVE-2010-3765US	high9.3OT critical	83.2% (100th)	KEV	no fix	2010-10-28	25 versions
CVE-2013-1690US	high8.8OT critical	69.0% (99th)	KEV	22.0	2013-06-26	2 versions
CVE-2015-4495US	high8.8OT critical	68.6% (99th)	KEV	39.0.3	2015-08-08	2 versions
CVE-2019-11708US	critical10.0OT critical	55.9% (99th)	KEV	67.0.4	2019-07-23	2 versions
CVE-2023-5217US	high8.8OT critical	49.0% (99th)	KEV	118.1	2023-09-28	3 versions
CVE-2019-17026US	high8.8OT critical	46.3% (99th)	KEV	68.4.1	2020-03-02	2 versions
CVE-2019-11707US	high8.8OT critical	37.7% (99th)	KEV	67.0.3	2019-07-23	2 versions
CVE-2024-9680US	critical9.8OT critical	23.2% (98th)	KEV	115.16.1	2024-10-09	4 versions
CVE-2022-26485US	high8.8OT critical	14.3% (97th)	KEV	91.6.1	2022-12-22	2 versions
CVE-2020-6820US	high8.1OT critical	7.06% (94th)	KEV	74.0.1	2020-04-24	2 versions
CVE-2013-1675US	medium6.5OT critical	6.70% (94th)	KEV	17.0.6	2013-05-16	2 versions
CVE-2020-6819US	high8.1OT critical	3.04% (87th)	KEV	68.6.1	2020-04-24	2 versions
CVE-2022-26486US	critical9.6OT critical	2.36% (84th)	KEV	91.6.1	2022-12-22	2 versions
CVE-2015-4000US	low3.7OT high	99.9% (100th)	Exploit	no fix	2015-05-21	3 versions
CVE-2013-2566US	medium5.9OT high	84.4% (100th)	Exploit	25.0.1	2013-03-15	3 versions
CVE-2014-1511US	critical9.8	83.6% (100th)	Exploit	24.4	2014-03-19	2 versions
CVE-2014-1510US	critical9.8	82.3% (100th)	Exploit	28.0	2014-03-19	2 versions
CVE-2006-3677US	high7.5	78.7% (100th)	Exploit	no fix	2006-07-27	5 versions
CVE-2011-2371US	high10.0	75.7% (100th)	Exploit	no fix	2011-06-30	107 versions
CVE-2011-0065US	high10.0	73.8% (99th)	Exploit	no fix	2011-05-07	103 versions
CVE-2013-0758US	high9.3	73.4% (99th)	Exploit	17.0.2	2013-01-13	3 versions
CVE-2011-3389US	medium4.3OT high	73.3% (99th)	Exploit	no fix	2011-09-06	—
CVE-2006-0295US	medium5.1	71.3% (99th)	Exploit	no fix	2006-02-02	= 1.5
CVE-2024-4367US	high8.8	70.7% (99th)	Exploit	126.0	2024-05-14	3 versions
CVE-2011-0073US	high10.0	70.2% (99th)	Exploit	no fix	2011-05-07	103 versions
CVE-2011-3658US	high7.5	69.6% (99th)	Exploit	no fix	2011-12-21	= 8.0
CVE-2005-2265US	medium5.0	68.1% (99th)	Exploit	no fix	2005-07-13	12 versions
CVE-2015-0802US	medium5.0	65.9% (99th)	Exploit	no fix	2015-04-01	≤ 36.0.4
CVE-2015-0816US	medium5.0	65.5% (99th)	Exploit	no fix	2015-04-01	2 versions
CVE-2014-8636US	high7.5	64.8% (99th)	Exploit	no fix	2015-01-14	≤ 34.0.5
CVE-2013-0757US	high9.3	60.9% (99th)	Exploit	18.0	2013-01-13	2 versions
CVE-2006-1993US	medium5.1	54.0% (99th)	Exploit	no fix	2006-04-25	= 1.5.0.2
CVE-2013-0753US	high9.3	51.3% (99th)	Exploit	10.0.12	2013-01-13	3 versions
CVE-2008-0016US	high10.0	43.9% (99th)	Exploit	no fix	2008-09-24	48 versions
CVE-2010-1205US	critical9.8	43.4% (99th)	Exploit	3.6.7	2010-06-30	2 versions
CVE-2012-3993US	high9.3	42.6% (99th)	Exploit	no fix	2012-10-10	140 versions
CVE-2009-2477US	high9.3	42.5% (99th)	Exploit	no fix	2009-07-15	= 3.5
CVE-2020-26950US	high8.8	42.3% (99th)	Exploit	82.0.3	2020-12-09	< 82.0.3
CVE-2013-1710US	high10.0	40.1% (99th)	Exploit	no fix	2013-08-07	15 versions
CVE-2011-3659US	high9.3	36.8% (99th)	Exploit	3.6.26	2012-02-01	2 versions
CVE-2017-5375US	critical9.8	34.1% (98th)	Exploit	51.0.1	2018-06-11	2 versions
CVE-2016-1960US	high8.8	30.9% (98th)	Exploit	no fix	2016-03-13	14 versions
CVE-2007-3670US	medium4.3	29.4% (98th)	Exploit	no fix	2007-07-10	—
CVE-2009-0689US	medium6.8	28.1% (98th)	Exploit	no fix	2009-07-01	18 versions
CVE-2019-9810US	high8.8	27.2% (98th)	Exploit	60.6.1	2019-04-26	2 versions
CVE-2022-1802US	high8.8	26.7% (98th)	Exploit	100.3.0	2022-12-22	2 versions
CVE-2016-2819US	high8.8	24.0% (98th)	Exploit	no fix	2016-06-13	3 versions
CVE-2024-29943US	—	22.9% (98th)	Exploit	124.0.1	2024-03-22	< 124.0.1

showing 50 of 3,448

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer688 CVEs
CWE-416Use After Free451 CVEs
CWE-20Improper Input Validation436 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor268 CVEs
CWE-787Out-of-bounds Write239 CVEs
CWE-264CWE-264191 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')172 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')150 CVEs

sources (2)

Which sources assert this record, and when.

USNVD / CVE3,445 CVEs
NLNCSC-NL (CSAF)83 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan