Vendor
Mozilla: actively exploited vulnerabilities
13 vulnerabilities in Mozilla products are listed in CISA’s catalog of actively exploited vulnerabilities, 1 of them used by ransomware. Latest addition on October 6, 2025: CVE-2010-3765 (Multiple Products).
- 13 exploited vulnerabilities in the catalog
- 0 added in the last 12 months
- 1 used by ransomware
- 4 products affected
Affected products
- Firefox and Thunderbird6
- Firefox5
- Firefox, Firefox ESR, and Thunderbird1
- Multiple Products1
CERT-FR alerts and notices
Recent CERT-FR publications naming this vendor (alerts: immediate threat; notices: patches released). In French.
-
CERTFR-2026-AVI-1272Vulnérabilité dans les produits Mozilla (07 octobre 2026)
All exploited vulnerabilities
CISA KEV catalog, newest first: each entry corresponds to observed exploitation.
2025 1 vulnerability
-
CVE-2010-3765Mozilla Multiple Products Remote Code Execution Vulnerability
2024 1 vulnerability
-
CVE-2024-9680Used by ransomwareMozilla Firefox Use-After-Free Vulnerability
2023 1 vulnerability
-
CVE-2016-9079Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability
2022 7 vulnerabilities
-
CVE-2015-4495Mozilla Firefox Security Feature Bypass Vulnerability
-
CVE-2019-11708Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability
-
CVE-2019-11707Mozilla Firefox and Thunderbird Type Confusion Vulnerability
-
CVE-2013-1690Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability
-
CVE-2022-26486Mozilla Firefox Use-After-Free Vulnerability
-
CVE-2022-26485Mozilla Firefox Use-After-Free Vulnerability
-
CVE-2013-1675Mozilla Firefox Information Disclosure Vulnerability
2021 3 vulnerabilities
-
CVE-2020-6820Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
-
CVE-2020-6819Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
-
CVE-2019-17026Mozilla Firefox And Thunderbird Type Confusion Vulnerability
What to do
If your estate includes any of these products, make sure the vendor’s patches are applied, starting with the most recent vulnerabilities and those used by ransomware, then look for signs of compromise: an exploited vulnerability has often been used before it was fixed.
Additions from all vendors are tracked on the Actively exploited vulnerabilities page, updated several times a day. Sources: CISA KEV catalog (US public domain) and CERT-FR.