Exploited vulnerabilities
Mozilla
13 Mozilla vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.
In the catalogue13
Last 12 months0
In ransomware campaigns1
Last addition6 October 2025
The vulnerabilities13
- 6 October 2025CVE-2010-3765Multiple ProductsMozilla Multiple Products Remote Code Execution Vulnerability
- 15 October 2024CVE-2024-9680FirefoxMozilla Firefox Use-After-Free VulnerabilityRansomware
- 22 June 2023CVE-2016-9079Firefox, Firefox ESR, and ThunderbirdMozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability
- 25 May 2022CVE-2015-4495FirefoxMozilla Firefox Security Feature Bypass Vulnerability
- 23 May 2022CVE-2019-11708Firefox and ThunderbirdMozilla Firefox and Thunderbird Sandbox Escape Vulnerability
- 23 May 2022CVE-2019-11707Firefox and ThunderbirdMozilla Firefox and Thunderbird Type Confusion Vulnerability
- 28 March 2022CVE-2013-1690Firefox and ThunderbirdMozilla Firefox and Thunderbird Denial-of-Service Vulnerability
- 7 March 2022CVE-2022-26486FirefoxMozilla Firefox Use-After-Free Vulnerability
- 7 March 2022CVE-2022-26485FirefoxMozilla Firefox Use-After-Free Vulnerability
- 3 March 2022CVE-2013-1675FirefoxMozilla Firefox Information Disclosure Vulnerability
- 3 November 2021CVE-2020-6820Firefox and ThunderbirdMozilla Firefox And Thunderbird Use-After-Free Vulnerability
- 3 November 2021CVE-2020-6819Firefox and ThunderbirdMozilla Firefox And Thunderbird Use-After-Free Vulnerability
- 3 November 2021CVE-2019-17026Firefox and ThunderbirdMozilla Firefox And Thunderbird Type Confusion Vulnerability
Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.
Alerts only on the products you use
With My Defence you receive alerts and briefings only on the products you use, Mozilla included.