Mozilla
13 Mozilla flaws are on CISA's list of vulnerabilities attackers have used, 0 of them added in 2026. CISA says 1 is known to be used by ransomware. The latest was added Oct 6, 2025.
13on CISA's list, all time
0added in 2026
0in the last 90 days
1used by ransomware
3zero-days, all time
Exploited flaws added each year
Most-hit products
| Product | Exploited flaws | Most recent |
|---|---|---|
| Firefox and Thunderbird | 6 | May 23, 2022 |
| Firefox | 5 | Oct 15, 2024 |
| Multiple Products | 1 | Oct 6, 2025 |
| Firefox, Firefox ESR, and Thunderbird | 1 | Jun 22, 2023 |
Latest Mozilla flaws
- Multiple ProductsMozilla Multiple Products Remote Code Execution Vulnerability
- FirefoxMozilla Firefox Use-After-Free Vulnerability
- Firefox, Firefox ESR, and ThunderbirdMozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability
- FirefoxMozilla Firefox Security Feature Bypass Vulnerability
- Firefox and ThunderbirdMozilla Firefox and Thunderbird Type Confusion Vulnerability
- Firefox and ThunderbirdMozilla Firefox and Thunderbird Sandbox Escape Vulnerability
- Firefox and ThunderbirdMozilla Firefox and Thunderbird Denial-of-Service Vulnerability
- FirefoxMozilla Firefox Use-After-Free Vulnerability
- FirefoxMozilla Firefox Use-After-Free Vulnerability
- FirefoxMozilla Firefox Information Disclosure Vulnerability
- Firefox and ThunderbirdMozilla Firefox And Thunderbird Type Confusion Vulnerability
- Firefox and ThunderbirdMozilla Firefox And Thunderbird Use-After-Free Vulnerability
- Firefox and ThunderbirdMozilla Firefox And Thunderbird Use-After-Free Vulnerability
Counts come from CISA's Known Exploited Vulnerabilities catalog, which lists flaws with reliable evidence of real attacks. A higher count often reflects how widely a vendor's products are used and targeted, not only how secure they are.