Mozilla vulnerabilities15 known to be exploited.
Mozilla has 3,329 published vulnerabilities across 40 products in our catalogue. 15 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Firefox, with 2,901. If you run Mozilla software, patch the exploited flaws first.
The most recent Mozilla flaw added to the known-exploited list is CVE-2010-3765, on 6 October 2025. We keep watching the known-exploited list.
Which Mozilla products have the most vulnerabilities?
Firefox leads with 2,901 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Mozilla vulnerabilities are being exploited?
15 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 9.8Mozilla Multiple Products Remote Code Execution Vulnerability
Mozilla Firefox, SeaMonkey, and Thunderbird contain an unspecified vulnerability when JavaScript is enabled.
- 9.8Mozilla Firefox Use-After-Free Vulnerability
Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process.
- 8.8Google Chromium libvpx Heap Buffer Overflow Vulnerability
Google Chromium libvpx contains a heap buffer overflow vulnerability in vp8 encoding that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- 8.8Google Chromium WebP Heap-Based Buffer Overflow Vulnerability
Google Chromium WebP contains a heap-based buffer overflow vulnerability that allows a remote attacker to perform an out-of-bounds memory write via a crafted HTML page.
- 7.5Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability
Mozilla Firefox, Firefox ESR, and Thunderbird contain a use-after-free vulnerability in SVG Animation, targeting Firefox and Tor browser users on Windows.
- 8.8Mozilla Firefox Security Feature Bypass Vulnerability
Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges.
- 10.0Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability
Mozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution.
- 8.8Mozilla Firefox and Thunderbird Type Confusion Vulnerability
Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash.
Which Mozilla flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 83%
Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute...
- 79%CVE-2006-3677High
Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properties of the window navigator object (window.navigator) that are accessed when...
- 76%CVE-2011-2371Critical
Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to execute arbitrary code via...
- 74%CVE-2011-0065Critical
Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute arbitrary code via vectors related to OBJECT's mChannel.
- 73%CVE-2011-3389Medium
The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained...
- 71%CVE-2006-0295Medium
Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbitrary code via the QueryInterface method of the built-in Location and...
- 70%CVE-2011-0073Critical
Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly use nsTreeRange data structures, which allows remote attackers to execute arbitrary code via unspecified vectors...
- 70%CVE-2011-3658High
The SVG implementation in Mozilla Firefox 8.0, Thunderbird 8.0, and SeaMonkey 2.5 does not properly interact with DOMAttrModified event handlers, which allows remote attackers to cause a denial of service...
- 68%CVE-2005-2265Medium
Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of service (access violation and crash), and possibly execute arbitrary code, by calling...
All Mozilla products we track.
29 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Firefoxfirefox2,901 vulnerabilities734 versions
- Thunderbirdthunderbird1,544 vulnerabilities432 versions
- Firefox Esrfirefox_esr743 vulnerabilities200 versions
- Seamonkeyseamonkey707 vulnerabilities100 versions
- Thunderbird Esrthunderbird_esr228 vulnerabilities37 versions
- Bugzillabugzilla151 vulnerabilities218 versions
- Mozillamozilla109 vulnerabilities45 versions
- Network Security Servicesnetwork_security_services50 vulnerabilities184 versions
- Mozilla Suitemozilla_suite27 vulnerabilities7 versions
- Firefox Mobilefirefox_mobile20 vulnerabilities14 versions
- Firefox Focusfirefox_focus18 vulnerabilities43 versions
- Firefox OSfirefox_os14 vulnerabilities2 versions
- Nssnss6 vulnerabilities178 versions
- Bleachbleach5 vulnerabilities48 versions
- Caminocamino5 vulnerabilities15 versions
- Bonsaibonsai4 vulnerabilities1 version
- Convictconvict3 vulnerabilities46 versions
- Netscape Portable Runtimenetscape_portable_runtime3 vulnerabilities63 versions
- VPNvpn3 vulnerabilities7 versions
- Geckogecko2 vulnerabilities7 versions
- Geckodrivergeckodriver2 vulnerabilities37 versions
- Mozjpegmozjpeg2 vulnerabilities32 versions
- Pollbotpollbot2 vulnerabilities25 versions
- Webthings Gatewaywebthings_gateway2 vulnerabilities23 versions
This directory lists the 29 Mozilla products with at least one tracked version, of 40 in our catalogue.
Running Mozilla? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Mozilla Firefox, SeaMonkey, and Thunderbird contain an unspecified vulnerability when JavaScript is enabled. This allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption.
- Matched to
- Firefox on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 3,329 published vulnerabilities across 40 products and 2,565 versions from Mozilla. The most recent Mozilla flaw added to the known-exploited list is CVE-2010-3765, on 6 October 2025.
15 Mozilla vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2010-3765, CVE-2024-9680 and CVE-2023-5217. The full list is on this page.
Firefox, with 2,901 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Mozilla products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.