Cyberfeed6 › Vendors › Mozilla
CISA lists 13 Mozilla vulnerabilities as exploited in real attacks, and 1 of them are known to be used in ransomware campaigns. Most entries concern Firefox and Thunderbird, Firefox, Multiple Products, Firefox, Firefox ESR, and Thunderbird.
Showing the 13 most recently added of 13. Check the vendor notice before you act: it names the fixed versions.
| Vulnerability | Product | Added to list | Severity | Ransomware | Fix |
|---|---|---|---|---|---|
| CVE-2010-3765Mozilla Multiple Products Remote Code Execution Vulnerability | Multiple Products | 2025-10-06 | Critical (9.8) | No | Vendor notice |
| CVE-2024-9680Mozilla Firefox Use-After-Free Vulnerability | Firefox | 2024-10-15 | Critical (9.8) | Yes | Vendor notice |
| CVE-2016-9079Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability | Firefox, Firefox ESR, and Thunderbird | 2023-06-22 | High (7.5) | No | Vendor notice |
| CVE-2015-4495Mozilla Firefox Security Feature Bypass Vulnerability | Firefox | 2022-05-25 | High (8.8) | No | |
| CVE-2019-11708Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability | Firefox and Thunderbird | 2022-05-23 | Critical (10.0) | No | |
| CVE-2019-11707Mozilla Firefox and Thunderbird Type Confusion Vulnerability | Firefox and Thunderbird | 2022-05-23 | High (8.8) | No | |
| CVE-2013-1690Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability | Firefox and Thunderbird | 2022-03-28 | High (8.8) | No | |
| CVE-2022-26486Mozilla Firefox Use-After-Free Vulnerability | Firefox | 2022-03-07 | Critical (9.6) | No | |
| CVE-2022-26485Mozilla Firefox Use-After-Free Vulnerability | Firefox | 2022-03-07 | High (8.8) | No | |
| CVE-2013-1675Mozilla Firefox Information Disclosure Vulnerability | Firefox | 2022-03-03 | Medium (6.5) | No | |
| CVE-2020-6820Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | Firefox and Thunderbird | 2021-11-03 | High (8.1) | No | |
| CVE-2020-6819Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | Firefox and Thunderbird | 2021-11-03 | High (8.1) | No | |
| CVE-2019-17026Mozilla Firefox And Thunderbird Type Confusion Vulnerability | Firefox and Thunderbird | 2021-11-03 | High (8.8) | No |
Source: CISA Known Exploited Vulnerabilities catalog, released 2026-11-04. Severity scores are CVSS where available. "Ransomware" means CISA has marked the flaw as known to be used in ransomware campaigns.