目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

mozilla 厂商漏洞列表 / CVE 中文分析 1933

mozilla 厂商相关 1933 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Mozilla 致力于开发开源互联网工具，核心产品 Firefox 浏览器及 Thunderbird 邮件客户端广泛用于全球用户。其历史漏洞多集中于内存安全缺陷，如缓冲区溢出导致的远程代码执行（RCE），以及跨站脚本（XSS）和权限提升问题。值得关注的是，Mozilla 积极推行零信任架构与增强型隐私保护特性，并定期发布安全更新以修复高危风险，持续维护开源生态的安全性与透明度。

上位製品 mozilla: Firefox Thunderbird Firefox ESR Firefox for iOS Firefox for Android Focus for iOS Thunderbird ESR nss Mozilla VPN Hubs Cloud WebThings Gateway Mozilla Bleach Focus sccache Nunjucks Convict PollBot Mozilla VPN 2.28.0 neqo rhino thin-vec common-voice Mozilla VPN 2.16.1 hawk geckodriver Mozilla VPN iOS 1.0.7 Firefox for Bugzilla Network Security Services (NSS) Network Security Services
CVE IDタイトルCVSS深刻度公開日
CVE-2026-9309 Arbitrary JavaScript execution in internal pages via Reader View JSON-LD injection — Firefox for iOS--2026-06-01
CVE-2026-9308 Arbitrary JavaScript execution in Reader View due to wrong HTML replacement order — Firefox for iOS--2026-06-01
CVE-2026-9078 Firefox iOS RTL Domain Rendering Issue in Link Preview — Firefox for iOS--2026-05-25
CVE-2026-8706 Sensitive user data could be leaked to other applications through Reader mode — Firefox for iOS--2026-05-19
CVE-2026-8975 Memory safety bugs fixed in Firefox ESR 115.36, Firefox ESR 140.11 and Firefox 151 — Firefox--2026-05-19
CVE-2026-8974 Memory safety bugs fixed in Firefox ESR 140.11 and Firefox 151 — Firefox--2026-05-19
CVE-2026-8973 Memory safety bugs fixed in Firefox 151 — Firefox--2026-05-19
CVE-2026-8972 Privilege escalation in the WebRTC: Audio/Video component — Firefox--2026-05-19
CVE-2026-8971 Same-origin policy bypass in the Networking: JAR component — Firefox--2026-05-19
CVE-2026-8970 Privilege escalation in the Security component — Firefox--2026-05-19
CVE-2026-8969 Mitigation bypass in the DOM: Security component — Firefox--2026-05-19
CVE-2026-8968 Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component — Firefox--2026-05-19
CVE-2026-8967 Information disclosure in the Graphics: WebGPU component — Firefox--2026-05-19
CVE-2026-8966 Information disclosure in the IP Protection component — Firefox--2026-05-19
CVE-2026-8965 Information disclosure in the DOM: Security component — Firefox--2026-05-19
CVE-2026-8964 Spoofing issue in the Popup Blocker component — Firefox--2026-05-19
CVE-2026-8963 Spoofing issue in the Web Speech component — Firefox--2026-05-19
CVE-2026-8962 Mitigation bypass in the DOM: Security component — Firefox--2026-05-19
CVE-2026-8961 Spoofing issue in the Form Autofill component — Firefox--2026-05-19
CVE-2026-8960 Spoofing issue in WebExtensions — Firefox--2026-05-19
CVE-2026-8959 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component — Firefox--2026-05-19
CVE-2026-8958 Information disclosure, sandbox escape in the Security: Process Sandboxing component — Firefox--2026-05-19
CVE-2026-8957 Privilege escalation in the Enterprise Policies component — Firefox--2026-05-19
CVE-2026-8956 Integer overflow in the Networking: JAR component — Firefox--2026-05-19
CVE-2026-8955 Privilege escalation in the DOM: Workers component — Firefox--2026-05-19
CVE-2026-8954 Incorrect boundary conditions, integer overflow in the Audio/Video component — Firefox--2026-05-19
CVE-2026-8953 Sandbox escape due to use-after-free in the Disability Access APIs component — Firefox--2026-05-19
CVE-2026-8952 Privilege escalation in the Application Update component — Firefox--2026-05-19
CVE-2026-8951 Spoofing issue in the Toolbar component in Firefox for Android — Firefox--2026-05-19
CVE-2026-8950 Same-origin policy bypass in the Networking: HTTP component — Firefox--2026-05-19

本页汇总了 mozilla 厂商截至目前公开的全部 1933 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。