Mozilla vulnerabilities in CISA KEV
Mozilla has 13 vulnerabilities in CISA's catalogue of flaws known to be exploited, the 21st highest of any vendor. none were added in the last 12 months; 1 is linked to known ransomware use (7.7% of its entries, against 20.4% across the catalogue). CISA's median fix window for these entries is 21 days (range 14 to 181), against 21 days (range 1 to 184) across the whole catalogue. The most exploited product is Firefox and Thunderbird, with 6 entries. Other frequently affected products: Firefox (5); Firefox, Firefox ESR, and Thunderbird (1).
Catalog v2026.11.04, released 5 Nov 2026. Source CISA ↗. All KEV entries.
$ ./kev --vendor mozilla --summary
Counts are computed from the catalog release on ; the 12 month window ends there.
┌─ total entries
13
in CISA KEV
┌─ first added
2021-11-03
earliest entry
┌─ latest added
2025-10-06
most recent entry
┌─ last 12 months
0
entries added
┌─ ransomware use
1 of 13
7.7% linked to ransomware
┌─ distinct products
4
affected products
$ awk -F, {print $1} /var/log/kev/mozilla.log | uniq -c
Entries by the year CISA added them.
| Year | Entries added | Of which ransomware |
|---|---|---|
| 2021 | 3 | 0 |
| 2022 | 7 | 0 |
| 2023 | 1 | 0 |
| 2024 | 1 | 1 |
| 2025 | 1 | 0 |
$ sort /var/log/kev/mozilla.log | uniq -c | sort -rn | head -5
The five products with the most entries in the catalogue.
- Firefox and Thunderbird 6 entries
- Firefox 5 entries
- Firefox, Firefox ESR, and Thunderbird 1 entry
- Multiple Products 1 entry
$ kev-due-dates --vendor mozilla
Days between the date CISA added an entry and the due date it set, median and range. Due dates apply to US federal agencies; for everyone else they are a patch-first ranking signal.
┌─ Mozilla
21 days (range 14 to 181)
median and range in days
┌─ whole catalogue
21 days (range 1 to 184)
median and range in days
$ grep -o 'CWE-[0-9]*' /var/log/kev/mozilla.log | sort | uniq -c | sort -rn | head -3
Weakness types CISA records for these entries (12 of 13 have at least one CWE).
$ grep -ril 'Mozilla' /var/log/news | head -5
Our reporting that names Mozilla or one of its KEV CVE ids, newest first.
- [MED] DigiCert Breach Exposes Customer Information and Identity Documents news/digicert-data-breach-exposes-customer-documents.md
Patch Week pages with these entries
No Patch Week page covers this vendor yet.
$ wc -l ./mozilla.kev · 13 rows
Descriptions: CISA Known Exploited Vulnerabilities catalogue
- CVE-2010-3765
Multiple Products
Mozilla Multiple Products Remote Code Execution Vulnerability
due 2025-10-27
$ cat CVE-2010-3765.txt
Description. Mozilla Firefox, SeaMonkey, and Thunderbird contain an unspecified vulnerability when JavaScript is enabled. This allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption.
Required action. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- CVE-2024-9680
Firefox [RANSOMWARE]
Mozilla Firefox Use-After-Free Vulnerability
due 2024-11-05 · CWE-416
$ cat CVE-2024-9680.txt
Description. Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process.
Required action. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CVE-2016-9079
Firefox, Firefox ESR, and Thunderbird
Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability
due 2023-07-13 · CWE-416
$ cat CVE-2016-9079.txt
Description. Mozilla Firefox, Firefox ESR, and Thunderbird contain a use-after-free vulnerability in SVG Animation, targeting Firefox and Tor browser users on Windows.
Required action. Apply updates per vendor instructions.
- CVE-2015-4495
Firefox
Mozilla Firefox Security Feature Bypass Vulnerability
due 2022-06-15 · CWE-200
$ cat CVE-2015-4495.txt
Description. Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges.
Required action. Apply updates per vendor instructions.
- CVE-2019-11707
Firefox and Thunderbird
Mozilla Firefox and Thunderbird Type Confusion Vulnerability
due 2022-06-13 · CWE-843
$ cat CVE-2019-11707.txt
Description. Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash.
Required action. Apply updates per vendor instructions.
- CVE-2019-11708
Firefox and Thunderbird
Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability
due 2022-06-13 · CWE-20
$ cat CVE-2019-11708.txt
Description. Mozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution.
Required action. Apply updates per vendor instructions.
- CVE-2013-1690
Firefox and Thunderbird
Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability
due 2022-04-18 · CWE-119
$ cat CVE-2013-1690.txt
Description. Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.
Required action. Apply updates per vendor instructions.
- CVE-2022-26485
Firefox
Mozilla Firefox Use-After-Free Vulnerability
due 2022-03-21 · CWE-416
$ cat CVE-2022-26485.txt
Description. Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code execution.
Required action. Apply updates per vendor instructions.
- CVE-2022-26486
Firefox
Mozilla Firefox Use-After-Free Vulnerability
due 2022-03-21 · CWE-416
$ cat CVE-2022-26486.txt
Description. Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution.
Required action. Apply updates per vendor instructions.
- CVE-2013-1675
Firefox
Mozilla Firefox Information Disclosure Vulnerability
due 2022-03-24 · CWE-119
$ cat CVE-2013-1675.txt
Description. Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.
Required action. Apply updates per vendor instructions.
- CVE-2019-17026
Firefox and Thunderbird
Mozilla Firefox And Thunderbird Type Confusion Vulnerability
due 2022-05-03 · CWE-843
$ cat CVE-2019-17026.txt
Description. Mozilla Firefox and Thunderbird contain a type confusion vulnerability due to incorrect alias information in the IonMonkey JIT compiler when setting array elements.
Required action. Apply updates per vendor instructions.
- CVE-2020-6819
Firefox and Thunderbird
Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
due 2022-05-03 · CWE-362 CWE-416
$ cat CVE-2020-6819.txt
Description. Mozilla Firefox and Thunderbird contain a race condition vulnerability when running the nsDocShell destructor under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts.
Required action. Apply updates per vendor instructions.
- CVE-2020-6820
Firefox and Thunderbird
Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
due 2022-05-03 · CWE-362
$ cat CVE-2020-6820.txt
Description. Mozilla Firefox and Thunderbird contain a race condition vulnerability when handling a ReadableStream under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts.
Required action. Apply updates per vendor instructions.