# Mozilla vulnerabilities > Mozilla has 3,329 published vulnerabilities across 40 products in our catalogue. 15 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Firefox, with 2,901. If you run Mozilla software, patch the exploited flaws first. Canonical page: https://www.precursorintelligence.com/vendors/mozilla ## At a glance - **Published vulnerabilities:** 3,329 - **Known to be exploited:** 15 - **Products:** 40 - **Versions:** 2,565 - **Most recently added to the known-exploited list:** [CVE-2010-3765](https://www.precursorintelligence.com/what-is/cve-2010-3765), 6 October 2025. We keep watching the list. ## Which Mozilla products have the most vulnerabilities? - [Firefox](https://www.precursorintelligence.com/product/mozilla/firefox): 2,901 published vulnerabilities, 734 versions - [Thunderbird](https://www.precursorintelligence.com/product/mozilla/thunderbird): 1,544 published vulnerabilities, 432 versions - [Firefox Esr](https://www.precursorintelligence.com/product/mozilla/firefox_esr): 743 published vulnerabilities, 200 versions - [Seamonkey](https://www.precursorintelligence.com/product/mozilla/seamonkey): 707 published vulnerabilities, 100 versions - [Thunderbird Esr](https://www.precursorintelligence.com/product/mozilla/thunderbird_esr): 228 published vulnerabilities, 37 versions - [Bugzilla](https://www.precursorintelligence.com/product/mozilla/bugzilla): 151 published vulnerabilities, 218 versions - [Mozilla](https://www.precursorintelligence.com/product/mozilla/mozilla): 109 published vulnerabilities, 45 versions - [Network Security Services](https://www.precursorintelligence.com/product/mozilla/network_security_services): 50 published vulnerabilities, 184 versions - [Mozilla Suite](https://www.precursorintelligence.com/product/mozilla/mozilla_suite): 27 published vulnerabilities, 7 versions - [Firefox Mobile](https://www.precursorintelligence.com/product/mozilla/firefox_mobile): 20 published vulnerabilities, 14 versions Each product page lists its own known-exploited flaws. ## Which Mozilla vulnerabilities are being exploited? 15 flaws are on the government list of vulnerabilities known to be exploited, newest first: - [CVE-2010-3765](https://www.precursorintelligence.com/what-is/cve-2010-3765): Mozilla Multiple Products Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 83%, known exploited since 6 October 2025. - [CVE-2024-9680](https://www.precursorintelligence.com/what-is/cve-2024-9680): Mozilla Firefox Use-After-Free Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 23%, known exploited since 15 October 2024. - [CVE-2023-5217](https://www.precursorintelligence.com/what-is/cve-2023-5217): Google Chromium libvpx Heap Buffer Overflow Vulnerability. High, CVSS 8.8, chance of use in 30 days 49%, known exploited since 2 October 2023. - [CVE-2023-4863](https://www.precursorintelligence.com/what-is/cve-2023-4863): Google Chromium WebP Heap-Based Buffer Overflow Vulnerability. High, CVSS 8.8, chance of use in 30 days >99%, known exploited since 13 September 2023. - [CVE-2016-9079](https://www.precursorintelligence.com/what-is/cve-2016-9079): Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability. High, CVSS 7.5, chance of use in 30 days 88%, known exploited since 22 June 2023. - [CVE-2015-4495](https://www.precursorintelligence.com/what-is/cve-2015-4495): Mozilla Firefox Security Feature Bypass Vulnerability. High, CVSS 8.8, chance of use in 30 days 69%, known exploited since 25 May 2022. - [CVE-2019-11708](https://www.precursorintelligence.com/what-is/cve-2019-11708): Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability. Critical, CVSS 10.0, chance of use in 30 days 56%, known exploited since 23 May 2022. - [CVE-2019-11707](https://www.precursorintelligence.com/what-is/cve-2019-11707): Mozilla Firefox and Thunderbird Type Confusion Vulnerability. High, CVSS 8.8, chance of use in 30 days 38%, known exploited since 23 May 2022. - [CVE-2013-1690](https://www.precursorintelligence.com/what-is/cve-2013-1690): Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability. High, CVSS 8.8, chance of use in 30 days 69%, known exploited since 28 March 2022. - [CVE-2022-26486](https://www.precursorintelligence.com/what-is/cve-2022-26486): Mozilla Firefox Use-After-Free Vulnerability. Critical, CVSS 9.6, chance of use in 30 days 2.4%, known exploited since 7 March 2022. - [CVE-2022-26485](https://www.precursorintelligence.com/what-is/cve-2022-26485): Mozilla Firefox Use-After-Free Vulnerability. High, CVSS 8.8, chance of use in 30 days 14%, known exploited since 7 March 2022. - [CVE-2013-1675](https://www.precursorintelligence.com/what-is/cve-2013-1675): Mozilla Firefox Information Disclosure Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 6.7%, known exploited since 3 March 2022. - [CVE-2019-17026](https://www.precursorintelligence.com/what-is/cve-2019-17026): Mozilla Firefox And Thunderbird Type Confusion Vulnerability. High, CVSS 8.8, chance of use in 30 days 46%, known exploited since 3 November 2021. - [CVE-2020-6820](https://www.precursorintelligence.com/what-is/cve-2020-6820): Mozilla Firefox And Thunderbird Use-After-Free Vulnerability. High, CVSS 8.1, chance of use in 30 days 7.1%, known exploited since 3 November 2021. - [CVE-2020-6819](https://www.precursorintelligence.com/what-is/cve-2020-6819): Mozilla Firefox And Thunderbird Use-After-Free Vulnerability. High, CVSS 8.1, chance of use in 30 days 3.0%, known exploited since 3 November 2021. ## Which Mozilla flaws are most likely to be used? Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days): - [CVE-2010-3765](https://www.precursorintelligence.com/what-is/cve-2010-3765): 83%, Critical (CVSS 9.8), known exploited - [CVE-2006-3677](https://www.precursorintelligence.com/what-is/cve-2006-3677): 79%, High (CVSS 7.5) - [CVE-2011-2371](https://www.precursorintelligence.com/what-is/cve-2011-2371): 76%, Critical (CVSS 10.0) - [CVE-2011-0065](https://www.precursorintelligence.com/what-is/cve-2011-0065): 74%, Critical (CVSS 10.0) - [CVE-2011-3389](https://www.precursorintelligence.com/what-is/cve-2011-3389): 73%, Medium (CVSS 4.3) - [CVE-2006-0295](https://www.precursorintelligence.com/what-is/cve-2006-0295): 71%, Medium (CVSS 5.1) - [CVE-2011-0073](https://www.precursorintelligence.com/what-is/cve-2011-0073): 70%, Critical (CVSS 10.0) - [CVE-2011-3658](https://www.precursorintelligence.com/what-is/cve-2011-3658): 70%, High (CVSS 7.5) - [CVE-2005-2265](https://www.precursorintelligence.com/what-is/cve-2005-2265): 68%, Medium (CVSS 5.0) ## All Mozilla products we track 29 products with at least one tracked version, most vulnerabilities first: - [Firefox](https://www.precursorintelligence.com/product/mozilla/firefox): 2,901 vulnerabilities, 734 versions - [Thunderbird](https://www.precursorintelligence.com/product/mozilla/thunderbird): 1,544 vulnerabilities, 432 versions - [Firefox Esr](https://www.precursorintelligence.com/product/mozilla/firefox_esr): 743 vulnerabilities, 200 versions - [Seamonkey](https://www.precursorintelligence.com/product/mozilla/seamonkey): 707 vulnerabilities, 100 versions - [Thunderbird Esr](https://www.precursorintelligence.com/product/mozilla/thunderbird_esr): 228 vulnerabilities, 37 versions - [Bugzilla](https://www.precursorintelligence.com/product/mozilla/bugzilla): 151 vulnerabilities, 218 versions - [Mozilla](https://www.precursorintelligence.com/product/mozilla/mozilla): 109 vulnerabilities, 45 versions - [Network Security Services](https://www.precursorintelligence.com/product/mozilla/network_security_services): 50 vulnerabilities, 184 versions - [Mozilla Suite](https://www.precursorintelligence.com/product/mozilla/mozilla_suite): 27 vulnerabilities, 7 versions - [Firefox Mobile](https://www.precursorintelligence.com/product/mozilla/firefox_mobile): 20 vulnerabilities, 14 versions - [Firefox Focus](https://www.precursorintelligence.com/product/mozilla/firefox_focus): 18 vulnerabilities, 43 versions - [Firefox OS](https://www.precursorintelligence.com/product/mozilla/firefox_os): 14 vulnerabilities, 2 versions - [Nss](https://www.precursorintelligence.com/product/mozilla/nss): 6 vulnerabilities, 178 versions - [Bleach](https://www.precursorintelligence.com/product/mozilla/bleach): 5 vulnerabilities, 48 versions - [Camino](https://www.precursorintelligence.com/product/mozilla/camino): 5 vulnerabilities, 15 versions - [Bonsai](https://www.precursorintelligence.com/product/mozilla/bonsai): 4 vulnerabilities, 1 version - [VPN](https://www.precursorintelligence.com/product/mozilla/vpn): 3 vulnerabilities, 7 versions - [Netscape Portable Runtime](https://www.precursorintelligence.com/product/mozilla/netscape_portable_runtime): 3 vulnerabilities, 63 versions - [Convict](https://www.precursorintelligence.com/product/mozilla/convict): 3 vulnerabilities, 46 versions - [Geckodriver](https://www.precursorintelligence.com/product/mozilla/geckodriver): 2 vulnerabilities, 37 versions - [Gecko](https://www.precursorintelligence.com/product/mozilla/gecko): 2 vulnerabilities, 7 versions - [Webthings Gateway](https://www.precursorintelligence.com/product/mozilla/webthings_gateway): 2 vulnerabilities, 23 versions - [Mozjpeg](https://www.precursorintelligence.com/product/mozilla/mozjpeg): 2 vulnerabilities, 32 versions - [Pollbot](https://www.precursorintelligence.com/product/mozilla/pollbot): 2 vulnerabilities, 25 versions - [Common Voice](https://www.precursorintelligence.com/product/mozilla/common_voice): 1 vulnerability, 1 version - [Durian Web Application Server](https://www.precursorintelligence.com/product/mozilla/durian_web_application_server): 1 vulnerability, 1 version - [Firefoxos](https://www.precursorintelligence.com/product/mozilla/firefoxos): 1 vulnerability, 3 versions - [Nunjucks](https://www.precursorintelligence.com/product/mozilla/nunjucks): 1 vulnerability, 50 versions - [Persona](https://www.precursorintelligence.com/product/mozilla/persona): 1 vulnerability, 12 versions ## Questions ### How many vulnerabilities does Mozilla have? Our catalogue lists 3,329 published vulnerabilities across 40 products and 2,565 versions from Mozilla. The most recent Mozilla flaw added to the known-exploited list is CVE-2010-3765, on 6 October 2025. ### Which Mozilla vulnerabilities are being exploited? 15 Mozilla vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2010-3765, CVE-2024-9680 and CVE-2023-5217. The full list is on this page. ### Which Mozilla product has the most vulnerabilities? Firefox, with 2,901 published vulnerabilities. Its own page lists the ones known to be exploited. ### How do I get alerts for new Mozilla vulnerabilities? Create a Precursor Intelligence account and track the Mozilla products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook. ## Running Mozilla? Precursor Intelligence keeps checking for you: - **Tell us what you run.** Pick your software from a list, or let us work it out from your website. - **We match it to every flaw.** Over 400,000 published flaws, checked against your list. - **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it. - **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools. Start free (no card, nothing to install): https://www.precursorintelligence.com/register Book a demo: https://www.precursorintelligence.com/contact