Class familyMozilla · Firefox
Mozilla Firefox use-after-free flaws, 2022–2026
63 Firefox CVEs with CWE-416 weaknesses, 22 Dec 2022 to 13 Oct 2026. 3 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
2 2022’22
2023’23
1 2024’24
2 2025’25
58 2026’26
In CISA KEVNot in KEV
20222 CVEs, 2 in KEV
20241 CVE, 1 in KEV
20252 CVEs
202658 CVEs
- CVE-2026-0882
- CVE-2026-0884
- CVE-2026-0885
- CVE-2026-2758
- CVE-2026-2763
- CVE-2026-2765
- CVE-2026-2786
- CVE-2026-4701
- CVE-2026-6746
- CVE-2026-6754
- CVE-2026-8090
- CVE-2026-12291
- CVE-2026-74936
- CVE-2026-74937
- CVE-2026-74940
- CVE-2026-74944
- CVE-2026-74973
- CVE-2026-84118
- CVE-2026-84119
- CVE-2026-84120
- CVE-2026-84121
- CVE-2026-84122
- CVE-2026-84124
- CVE-2026-84125
- CVE-2026-92022
- CVE-2026-92023
- CVE-2026-92024
- CVE-2026-92025
- CVE-2026-92026
- CVE-2026-92027
- CVE-2026-92028
- CVE-2026-92029
- CVE-2026-92046
- CVE-2026-92058
- CVE-2026-100757
- CVE-2026-100762
- CVE-2026-100767
- CVE-2026-100770
- CVE-2026-100773
- CVE-2026-100774
- CVE-2026-100778
- CVE-2026-100779
- CVE-2026-100780
- CVE-2026-100784
- CVE-2026-100785
- CVE-2026-100786
- CVE-2026-100790
- CVE-2026-100791
- CVE-2026-109707
- CVE-2026-109710
- CVE-2026-109713
- CVE-2026-109718
- CVE-2026-109724
- CVE-2026-109725
- CVE-2026-109726
- CVE-2026-109727
- CVE-2026-109728
- CVE-2026-109732
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2022-26485KEV | 22 Dec 2022 | Mozilla Firefox Use-After-Free Vulnerability | Grouped by weakness | 68.5 |
| CVE-2022-26486KEV | 22 Dec 2022 | Mozilla Firefox Use-After-Free Vulnerability | Grouped by weakness | 66.5 |
| CVE-2024-9680KEV | 9 Oct 2024 | Mozilla Firefox Use-After-Free Vulnerability | Grouped by weakness | 79.4 |
| CVE-2025-1009 | 4 Feb 2025 | Use-after-free in XSLT | Grouped by weakness | 20.5 |
| CVE-2025-13014 | 11 Nov 2025 | Use-after-free in the Audio/Video component | Grouped by weakness | 11.1 |
| CVE-2026-0882 | 13 Jan 2026 | Use-after-free in the IPC component | Grouped by weakness | 14.2 |
| CVE-2026-0884 | 13 Jan 2026 | Use-after-free in the JavaScript Engine component | Grouped by weakness | 14.9 |
| CVE-2026-0885 | 13 Jan 2026 | Use-after-free in the JavaScript: GC component | Grouped by weakness | 11.5 |
| CVE-2026-2758 | 24 Feb 2026 | Use-after-free in the JavaScript: GC component | Grouped by weakness | 16.3 |
| CVE-2026-2763 | 24 Feb 2026 | Use-after-free in the JavaScript Engine component | Grouped by weakness | 22.8 |
| CVE-2026-2765 | 24 Feb 2026 | Use-after-free in the JavaScript Engine component | Grouped by weakness | 17.8 |
| CVE-2026-2786 | 24 Feb 2026 | Use-after-free in the JavaScript Engine component | Grouped by weakness | 14.9 |
| CVE-2026-4701 | 24 Mar 2026 | Use-after-free in the JavaScript Engine component | Grouped by weakness | 15.1 |
| CVE-2026-6746 | 21 Apr 2026 | Use-after-free in the DOM: Core & HTML component | Grouped by weakness | 17.5 |
| CVE-2026-6754 | 21 Apr 2026 | Use-after-free in the JavaScript Engine component | Grouped by weakness | 11.8 |
| CVE-2026-8090 | 7 May 2026 | Use-after-free in the DOM: Networking component | Grouped by weakness | 10.0 |
| CVE-2026-12291 | 16 Jun 2026 | Use-after-free in the Networking: HTTP component | Grouped by weakness | 12.6 |
| CVE-2026-74936 | 18 Aug 2026 | Use-after-free in the JavaScript: WebAssembly component | Grouped by weakness | 16.5 |
| CVE-2026-74937 | 18 Aug 2026 | Use-after-free in the JavaScript: GC component | Grouped by weakness | 13.7 |
| CVE-2026-74940 | 18 Aug 2026 | Use-after-free in the Graphics: Text component | Grouped by weakness | 16.6 |
| CVE-2026-74944 | 18 Aug 2026 | Use-after-free in the DOM: Core & HTML component | Grouped by weakness | 16.5 |
| CVE-2026-74973 | 18 Aug 2026 | Race condition, use-after-free in the Graphics component | Grouped by weakness | 5.3 |
| CVE-2026-84118 | 1 Sep 2026 | Use-after-free in the JavaScript: GC component | Grouped by weakness | 13.0 |
| CVE-2026-84119 | 1 Sep 2026 | Sandbox escape due to use-after-free in the DOM: Navigation component | Grouped by weakness | 11.7 |
| CVE-2026-84120 | 1 Sep 2026 | Use-after-free in the Audio/Video component | Grouped by weakness | 6.3 |
| CVE-2026-84121 | 1 Sep 2026 | Sandbox escape due to use-after-free in the DOM: Security component | Grouped by weakness | 11.7 |
| CVE-2026-84122 | 1 Sep 2026 | Use-after-free in the Audio/Video component | Grouped by weakness | 6.1 |
| CVE-2026-84124 | 1 Sep 2026 | Use-after-free in the DOM: Core & HTML component | Grouped by weakness | 5.1 |
| CVE-2026-84125 | 1 Sep 2026 | Use-after-free in the DOM: Core & HTML component | Grouped by weakness | 8.0 |
| CVE-2026-92022 | 15 Sep 2026 | Use-after-free in the DOM: HTML Parser component | Grouped by weakness | 11.1 |
| CVE-2026-92023 | 15 Sep 2026 | Use-after-free in the XML component | Grouped by weakness | 11.1 |
| CVE-2026-92024 | 15 Sep 2026 | Use-after-free in the SVG component | Grouped by weakness | 11.1 |
| CVE-2026-92025 | 15 Sep 2026 | Use-after-free in the DOM: Navigation component | Grouped by weakness | 11.1 |
| CVE-2026-92026 | 15 Sep 2026 | Use-after-free in the Networking component | Grouped by weakness | 11.0 |
| CVE-2026-92027 | 15 Sep 2026 | Use-after-free in the DOM: Streams component | Grouped by weakness | 11.1 |
| CVE-2026-92028 | 15 Sep 2026 | Use-after-free in the DOM: Core & HTML component | Grouped by weakness | 11.1 |
| CVE-2026-92029 | 15 Sep 2026 | Use-after-free in the SVG component | Grouped by weakness | 11.1 |
| CVE-2026-92046 | 15 Sep 2026 | Use-after-free in the Graphics component | Grouped by weakness | 10.5 |
| CVE-2026-92058 | 15 Sep 2026 | Use-after-free in the Graphics component | Grouped by weakness | 9.0 |
| CVE-2026-100757 | 29 Sep 2026 | Use-after-free in the Widget component | Grouped by weakness | 11.1 |
| CVE-2026-100762 | 29 Sep 2026 | Sandbox escape due to use-after-free in the DOM: Content Processes component | Grouped by weakness | 11.7 |
| CVE-2026-100767 | 29 Sep 2026 | Use-after-free in the Networking: Cache component | Grouped by weakness | 11.3 |
| CVE-2026-100770 | 29 Sep 2026 | Sandbox escape due to use-after-free in the DOM: Content Processes component | Grouped by weakness | 11.7 |
| CVE-2026-100773 | 29 Sep 2026 | Use-after-free in the Storage: IndexedDB component | Grouped by weakness | 12.9 |
| CVE-2026-100774 | 29 Sep 2026 | Use-after-free in the DOM: Core & HTML component | Grouped by weakness | 11.1 |
| CVE-2026-100778 | 29 Sep 2026 | Sandbox escape due to use-after-free in the DOM: Core & HTML component | Grouped by weakness | 11.7 |
| CVE-2026-100779 | 29 Sep 2026 | Use-after-free in the XSLT component | Grouped by weakness | 11.3 |
| CVE-2026-100780 | 29 Sep 2026 | Use-after-free in the DOM: Core & HTML component | Grouped by weakness | 11.1 |
| CVE-2026-100784 | 29 Sep 2026 | Use-after-free in the Layout: Text and Fonts component | Grouped by weakness | 11.3 |
| CVE-2026-100785 | 29 Sep 2026 | Use-after-free in the DOM: Core & HTML component | Grouped by weakness | 11.1 |
| CVE-2026-100786 | 29 Sep 2026 | Sandbox escape due to use-after-free in the Graphics component | Grouped by weakness | 11.7 |
| CVE-2026-100790 | 29 Sep 2026 | Use-after-free in the XSLT component | Grouped by weakness | 11.1 |
| CVE-2026-100791 | 29 Sep 2026 | Use-after-free in the DOM: Core & HTML component | Grouped by weakness | 12.9 |
| CVE-2026-109707 | 13 Oct 2026 | Sandbox escape due to use-after-free in the Networking component | Grouped by weakness | 14.1 |
| CVE-2026-109710 | 13 Oct 2026 | Use-after-free in the Graphics: Text component | Grouped by weakness | 6.5 |
| CVE-2026-109713 | 13 Oct 2026 | Use-after-free in the Crash Reporting component | Grouped by weakness | 6.2 |
| CVE-2026-109718 | 13 Oct 2026 | Use-after-free in the XML component | Grouped by weakness | 6.5 |
| CVE-2026-109724 | 13 Oct 2026 | Use-after-free in the DOM: Core & HTML component | Grouped by weakness | 6.2 |
| CVE-2026-109725 | 13 Oct 2026 | Use-after-free in the DOM: Core & HTML component | Grouped by weakness | 6.5 |
| CVE-2026-109726 | 13 Oct 2026 | Use-after-free in the SVG component | Grouped by weakness | 6.5 |
| CVE-2026-109727 | 13 Oct 2026 | Use-after-free in the Audio/Video component | Grouped by weakness | 6.5 |
| CVE-2026-109728 | 13 Oct 2026 | Use-after-free in the DOM: Animation component | Grouped by weakness | 6.5 |
| CVE-2026-109732 | 13 Oct 2026 | Use-after-free in the DOM: Streams component | Grouped by weakness | 6.9 |