Skip to content
Exploit Radar Choose my productsProducts My radar
English

Products › Brands

Brand

Mozilla: actively exploited vulnerabilities

13 vulnerabilities in Mozilla products (Firefox) are in CISA’s catalog of exploited vulnerabilities. Last added: October 6, 2025.

Mozilla security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one Mozilla category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • Firefox 13 vulnerabilities · Browsers

Name used by CISA: Mozilla. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Mozilla list.

  1. Rank 1Mozilla Firefox

    CVE-2010-3765

    CVE from 2010, added in 2025

    Mozilla Multiple Products Remote Code Execution Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Oct 6, 2025
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  2. Rank 2Mozilla Firefox

    CVE-2019-11708

    CVE from 2019, added in 2022

    Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 23, 2022
    CISA deadline
    21 days
    CVSS severity
    10.0 (critical)

  3. Rank 3Mozilla Firefox

    CVE-2024-9680

    Ransomware

    Mozilla Firefox Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Oct 15, 2024
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  4. Rank 4Mozilla Firefox

    CVE-2022-26486

    Mozilla Firefox Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 7, 2022
    CISA deadline
    14 days
    CVSS severity
    9.6 (critical)

  5. Rank 5Mozilla Firefox

    CVE-2015-4495

    CVE from 2015, added in 2022

    Mozilla Firefox Security Feature Bypass Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 25, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  6. Rank 6Mozilla Firefox

    CVE-2019-11707

    CVE from 2019, added in 2022

    Mozilla Firefox and Thunderbird Type Confusion Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 23, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  7. Rank 7Mozilla Firefox

    CVE-2013-1690

    CVE from 2013, added in 2022

    Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 28, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  8. Rank 8Mozilla Firefox

    CVE-2022-26485

    Mozilla Firefox Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 7, 2022
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  9. Rank 9Mozilla Firefox

    CVE-2019-17026

    CVE from 2019, added in 2021

    Mozilla Firefox And Thunderbird Type Confusion Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    8.8 (high)

  10. Rank 10Mozilla Firefox

    CVE-2020-6819

    Mozilla Firefox And Thunderbird Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    8.1 (high)
Show 3 more vulnerabilities

  1. Rank 11Mozilla Firefox

    CVE-2020-6820

    Mozilla Firefox And Thunderbird Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    8.1 (high)

  2. Rank 12Mozilla Firefox

    CVE-2016-9079

    CVE from 2016, added in 2023

    Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 22, 2023
    CISA deadline
    21 days
    CVSS severity
    7.5 (high)

  3. Rank 13Mozilla Firefox

    CVE-2013-1675

    CVE from 2013, added in 2022

    Mozilla Firefox Information Disclosure Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    6.5 (medium)

Follow and verify

Get new Mozilla vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.