Skip to content

Known vulnerabilities in Mozilla Firefox

Is your version affected?

CVE Summary Score Published
CVE-2026-4727 Denial-of-service in the Libraries component in NSS 7.5 High Mar 24, 2026
CVE-2026-4728 Spoofing issue in the Privacy: Anti-Tracking component 6.5 Medium Mar 24, 2026
CVE-2026-4717 Privilege escalation in the Netmonitor component 9.8 Critical Mar 24, 2026
CVE-2026-4726 Denial-of-service in the XML component 7.5 High Mar 24, 2026
CVE-2026-4716 Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component 9.1 Critical Mar 24, 2026
CVE-2026-4714 Incorrect boundary conditions in the Audio/Video component 7.5 High Mar 24, 2026
CVE-2026-4715 Uninitialized memory in the Graphics: Canvas2D component 9.1 Critical Mar 24, 2026
CVE-2026-4712 Information disclosure in the Widget: Cocoa component 7.5 High Mar 24, 2026
CVE-2026-4713 Incorrect boundary conditions in the Graphics component 7.5 High Mar 24, 2026
CVE-2026-4711 Use-after-free in the Widget: Cocoa component 9.8 Critical Mar 24, 2026
CVE-2026-4725 Sandbox escape due to use-after-free in the Graphics: Canvas2D component 9.3 Critical Mar 24, 2026
CVE-2026-4710 Incorrect boundary conditions in the Audio/Video component 9.8 Critical Mar 24, 2026
CVE-2026-4709 Incorrect boundary conditions in the Audio/Video: GMP component 7.5 High Mar 24, 2026
CVE-2026-4708 Incorrect boundary conditions in the Graphics component 7.5 High Mar 24, 2026
CVE-2026-4706 Incorrect boundary conditions in the Graphics: Canvas2D component 7.5 High Mar 24, 2026
CVE-2026-4707 Incorrect boundary conditions in the Graphics: Canvas2D component 7.5 High Mar 24, 2026
CVE-2026-4704 Denial-of-service in the WebRTC: Signaling component 7.5 High Mar 24, 2026
CVE-2026-4705 Undefined behavior in the WebRTC: Signaling component 9.8 Critical Mar 24, 2026
CVE-2026-4723 Use-after-free in the JavaScript Engine component 9.8 Critical Mar 24, 2026
CVE-2026-4724 Undefined behavior in the Audio/Video component 9.1 Critical Mar 24, 2026
CVE-2026-4702 JIT miscompilation in the JavaScript Engine component 9.8 Critical Mar 24, 2026
CVE-2026-4722 Privilege escalation in the IPC component 8.8 High Mar 24, 2026
CVE-2026-4701 Use-after-free in the JavaScript Engine component 9.8 Critical Mar 24, 2026
CVE-2026-4699 Incorrect boundary conditions in the Layout: Text and Fonts component 7.5 High Mar 24, 2026
CVE-2026-4700 Mitigation bypass in the Networking: HTTP component 9.8 Critical Mar 24, 2026

Other Mozilla products