M
Vendor security profile13 actively exploited CVEs
mozilla
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs675
Critical204
CISA KEV13
Public exploit25
Patch rate%1
Avg. CVSS8.0
12-month vulnerability rate
0
16
8
32
21
22
31
22
69
60
191
2
CVE KEV
CVE severity distribution
675toplam CVE
Critical204 (30%)
High291 (43%)
Medium170 (25%)
Low3 (0%)
Uncertain7 (1%)
Patch and exploitation view
%1
Verified patch
%2
CISA KEV
%4
Public exploit
4Patch available
3Partial
8Workaround
0Vendor: no patch
660Unknown
Latest vulnerabilities
7.5
CVE-2026-106550
CVE-2026-106550
M
Patch status unknownEPSS %0
9.8
CVE-2026-106016
Mitigation bypass in the File Handling component
M
Patch status unknownEPSS %0
-
CVE-2026-103500
Heap buffer overflow opening large email
M
Patch status unknownEPSS %0
8.8
CVE-2026-100832
Use-after-free in the Graphics: Canvas2D component
M
Patch status unknownEPSS %0
8.8
CVE-2026-100831
Use-after-free in the DOM: UI Events & Focus Handling component
M
Patch status unknownEPSS %0
8.1
CVE-2026-100830
Mitigation bypass in the DOM: Navigation component
M
Patch status unknownEPSS %0
9.6
CVE-2026-100829
Mitigation bypass in the DOM: Security component
M
Patch status unknownEPSS %0
9.6
CVE-2026-100828
Mitigation bypass in the Bookmarks & History component
M
Patch status unknownEPSS %0
6.5
CVE-2026-100826
Denial-of-service in the Storage: StorageManager component
M
Patch status unknownEPSS %0
8.8
CVE-2026-100825
Use-after-free in the JavaScript Engine: JIT component
M
Patch status unknownEPSS %0