Product of Mozilla
Firefox
As of , 5 Mozilla Firefox vulnerabilities are on CISA's list of exploited vulnerabilities, 1 of them used in ransomware campaigns; 0 were added in 2026. Patch first: CVE-2015-4495.
Patch first
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 1 | CVE-2015-4495Security Feature Bypass | Mozilla Firefox | Patch this weekMetasploit module; EPSS 0.69 | 0.69 | ||
| 2 | CVE-2024-9680Use-After-Free | Mozilla Firefox | Patch this weekRansomware use | 0.23 | ||
| 3 | CVE-2022-26485Use-After-Free | Mozilla Firefox | Patch soon | 0.14 | ||
| 4 | CVE-2013-1675Information Disclosure | Mozilla Firefox | Patch soon | 0.07 | ||
| 5 | CVE-2022-26486Use-After-Free | Mozilla Firefox | Patch soon | 0.02 |
Added each year
Show the numbers
| Period | entries added |
|---|---|
| 2022 | 4 |
| 2023 | none |
| 2024 | 1 |
| 2025 | none |
| 2026 | none |