目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1000 CNY

100.0%
コーヒーを一杯おごる

mozilla 厂商漏洞列表 / CVE 中文分析 1773

mozilla 厂商相关 1773 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Mozilla 致力于开发开源互联网工具，核心产品 Firefox 浏览器及 Thunderbird 邮件客户端广泛用于全球用户。其历史漏洞多集中于内存安全缺陷，如缓冲区溢出导致的远程代码执行（RCE），以及跨站脚本（XSS）和权限提升问题。值得关注的是，Mozilla 积极推行零信任架构与增强型隐私保护特性，并定期发布安全更新以修复高危风险，持续维护开源生态的安全性与透明度。

上位製品 mozilla: Firefox Thunderbird Firefox ESR Firefox for iOS Firefox for Android Focus for iOS Thunderbird ESR nss Mozilla VPN Hubs Cloud WebThings Gateway Mozilla Bleach Focus sccache Nunjucks Convict PollBot Mozilla VPN 2.28.0 neqo rhino thin-vec common-voice Mozilla VPN 2.16.1 hawk geckodriver Mozilla VPN iOS 1.0.7 Firefox for Bugzilla Network Security Services (NSS) Network Security Services
CVE IDタイトルCVSS深刻度公開日
CVE-2026-4696 Use-after-free in the Layout: Text and Fonts component — Firefox 9.8 -2026-03-24
CVE-2026-4697 Incorrect boundary conditions in the Audio/Video: Web Codecs component — Firefox 8.1 -2026-03-24
CVE-2026-4694 Incorrect boundary conditions, integer overflow in the Graphics component — Firefox 8.8 -2026-03-24
CVE-2026-4695 Incorrect boundary conditions in the Audio/Video: Web Codecs component — Firefox 8.1 -2026-03-24
CVE-2026-4692 Sandbox escape in the Responsive Design Mode component — Firefox 10.0 -2026-03-24
CVE-2026-4693 Incorrect boundary conditions in the Audio/Video: Playback component — Firefox 8.1 -2026-03-24
CVE-2026-4690 Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component — Firefox 8.8 -2026-03-24
CVE-2026-4691 Use-after-free in the CSS Parsing and Computation component — Firefox 9.8 -2026-03-24
CVE-2026-4689 Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component — Firefox 8.8 -2026-03-24
CVE-2026-4688 Sandbox escape due to use-after-free in the Disability Access APIs component — Firefox 9.8 -2026-03-24
CVE-2026-4686 Incorrect boundary conditions in the Graphics: Canvas2D component — Firefox 9.1 -2026-03-24
CVE-2026-4687 Sandbox escape due to incorrect boundary conditions in the Telemetry component — Firefox 8.8 -2026-03-24
CVE-2026-4685 Incorrect boundary conditions in the Graphics: Canvas2D component — Firefox 9.1 -2026-03-24
CVE-2026-4684 Race condition, use-after-free in the Graphics: WebRender component — Firefox 8.1 -2026-03-24
CVE-2026-3847 Memory safety bugs fixed in Firefox 148.0.2 — Firefox 8.8AIHighAI2026-03-10
CVE-2026-3846 Same-origin policy bypass in the CSS Parsing and Computation component — Firefox 9.8AICriticalAI2026-03-10
CVE-2026-3845 Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android — Firefox 8.8AIHighAI2026-03-10
CVE-2026-2919 Attacker-controlled content shown under spoofed domains in Focus for iOS via stalled navigation and iframe redirect — Focus for iOS 4.7AIMediumAI2026-03-09
CVE-2026-2807 Memory safety bugs fixed in Firefox 148 and Thunderbird 148 — Firefox 9.8 -2026-02-24
CVE-2026-2805 Invalid pointer in the DOM: Core & HTML component — Firefox 7.5 -2026-02-24
CVE-2026-2806 Uninitialized memory in the Graphics: Text component — Firefox 9.1 -2026-02-24
CVE-2026-2804 Use-after-free in the JavaScript: WebAssembly component — Firefox 9.8AICriticalAI2026-02-24
CVE-2026-2803 Information disclosure, mitigation bypass in the Settings UI component — Firefox 7.5 -2026-02-24
CVE-2026-2802 Race condition in the JavaScript: GC component — Firefox 8.1AIHighAI2026-02-24
CVE-2026-2801 Incorrect boundary conditions in the JavaScript: WebAssembly component — Firefox 9.1 -2026-02-24
CVE-2026-2800 Spoofing issue in the WebAuthn component in Firefox for Android — Firefox 6.5 -2026-02-24
CVE-2026-2799 Use-after-free in the DOM: Core & HTML component — Firefox 9.1 -2026-02-24
CVE-2026-2798 Use-after-free in the DOM: Core & HTML component — Firefox 9.1AICriticalAI2026-02-24
CVE-2026-2797 Use-after-free in the JavaScript: GC component — Firefox 9.8 -2026-02-24
CVE-2026-2796 JIT miscompilation in the JavaScript: WebAssembly component — Firefox 6.5 -2026-02-24

本页汇总了 mozilla 厂商截至目前公开的全部 1773 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。