Mozilla: exploited vulnerabilities
- 13exploited vulnerabilities
- 1used by ransomware
- Oct 6, 2025latest one added
- Firefox and Thunderbird 6
- Firefox 5
- Multiple Products 1
- Firefox, Firefox ESR, and Thunderbird 1
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Oct 6, 2025 | Remote Code Execution | Multiple Products | Critical 9.8 | 83% |
| Oct 15, 2024 | Use-After-Free | Firefox | Critical 9.8 | 23% |
| Jun 22, 2023 | Use-After-Free | Firefox, Firefox ESR, and Thunderbird | High 7.5 | 87% |
| May 25, 2022 | Security Feature Bypass | Firefox | High 8.8 | 69% |
| May 23, 2022 | Sandbox Escape | Firefox and Thunderbird | Critical 10.0 | 56% |
| May 23, 2022 | Type Confusion | Firefox and Thunderbird | High 8.8 | 38% |
| Mar 28, 2022 | Denial-of-Service | Firefox and Thunderbird | High 8.8 | 69% |
| Mar 7, 2022 | Use-After-Free | Firefox | Critical 9.6 | 2.4% |
| Mar 7, 2022 | Use-After-Free | Firefox | High 8.8 | 14% |
| Mar 3, 2022 | Information Disclosure | Firefox | Medium 6.5 | 6.7% |
| Nov 3, 2021 | Use-After-Free | Firefox and Thunderbird | High 8.1 | 7.1% |
| Nov 3, 2021 | Use-After-Free | Firefox and Thunderbird | High 8.1 | 3.0% |
| Nov 3, 2021 | Type Confusion | Firefox and Thunderbird | High 8.8 | 46% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.