VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

Severity

CriticoAltoMedioBassoExploited in the wild (KEV)

Language / ecosystem

JavaScript / TypeScript (npm)Python (PyPI)PHP (Packagist)Java / Kotlin (Maven)GoRuby (RubyGems).NET (NuGet)

Stack

JavaScript / Node.js

Next.jsNuxtReactAngularSvelte / SvelteKitAstroRemixViteExpressNestJSFastifyNode.jsaxios

PHP

LaravelSymfonyPHP

Python

DjangoFlaskFastAPI / Starlette

Ruby

Ruby on Rails

Java

Spring

GinFiber

CMS

WordPressWooCommerceDrupalGhostStrapi

Servers & databases

nginxApache HTTP ServerMySQLPostgreSQLRedis

Vendor1

mozillaoracleibmgoogleadobemicrosoftciscoapacheappleredhatjenkinshpAll vendors →

mozilla products

firefox 3421thunderbird 2054seamonkey 694firefox esr 487thunderbird esr 228bugzilla 144mozilla 100firefox mobile 86network security services 46mozilla suite 27firefox focus 18focus 16nss 6bleach 5

403.732 vulnerabilities · 1767 actively exploited (CISA KEV)

mozilla ✕Clear filters

3879 results

ID	Severity	Summary	Published
CVE-2025-14328	ALTO8.8	Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.	09/12/2025
CVE-2025-14327	ALTO7.5	Spoofing issue in the Downloads Panel component. This vulnerability was fixed in Firefox 146, Thunderbird 146, Firefox ESR 140.7, and Thunderbird 140.7.	09/12/2025
CVE-2025-14326	CRITICO9.8	Use-after-free in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 146 and Thunderbird 146.	09/12/2025
CVE-2025-14325	ALTO7.3	JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.