Skip to content

Mozilla · weakness class

Denial of Service

184 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
8

Every one of the 184 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute arbitrary code via vectors r…CVE-2011-0065Mozilla · 74% likely

    CWE-399

  2. The SVG implementation in Mozilla Firefox 8.0, Thunderbird 8.0, and SeaMonkey 2.5 does not properly interact with DOMAttrModified event handlers, which allows remote attackers to…CVE-2011-3658Mozilla · 70% likely

    CWE-399

  3. Mozilla Firefox 1.5.0.2, when designMode is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain Javascript that is not pr…CVE-2006-1993Mozilla · 54% likely

    CWE-399

  4. AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cause a denial of service (unspecified resource consumption) vi…CVE-2007-1377Mozilla · 18% likely

    CWE-400

  5. Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers to cause a denial of…CVE-2008-2798Mozilla · 14% likely

    CWE-399

  6. The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and Thunderbird allows remote attackers to cause a denial of se…CVE-2009-2464Mozilla · 13% likely

    CWE-399

  7. nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to ca…CVE-2006-0749Mozilla · 10% likely

    CWE-399

  8. The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (crash) and po…CVE-2009-1169Mozilla · 10% likely

    CWE-399

  9. The user interface event dispatcher in Mozilla Firefox 3.0.3 on Windows XP SP2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash…CVE-2008-4324Mozilla · 8.9% likely

    CWE-399

  10. Mozilla Firefox 3.0.10 allows remote attackers to cause a denial of service (infinite loop, application hang, and memory consumption) via a KEYGEN element in conjunction with (1)…CVE-2009-1828Mozilla · 8.8% likely

    CWE-399

  11. The nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox 3.0.9 allows remote attackers to cause a denial of service (memory corruption) an…CVE-2009-1313Mozilla · 8.4% likely

    CWE-399

  12. Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to execute arbitrary cod…CVE-2006-0748Mozilla · 8.0% likely

    CWE-399

  13. Use-after-free vulnerability in the mozilla::dom::indexedDB::IDBKeyRange::cycleCollection::Trace function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thun…CVE-2012-0469Mozilla · 7.3% likely

    CWE-399

  14. Use-after-free vulnerability in the JSON.stringify method in js3250.dll in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, might allow remote a…CVE-2011-0055Mozilla · 7.2% likely

    CWE-399

  15. Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by c…CVE-2009-3371Mozilla · 7.2% likely

    CWE-399

  16. The block reflow implementation in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allows remote attackers to execute arbitrary code…CVE-2008-2811Mozilla · 7.1% likely

    CWE-399

  17. Use-after-free vulnerability in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allows remote attackers to execute arbitrary code via vectors i…CVE-2010-3766Mozilla · 7.0% likely

    CWE-399

  18. Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 al…CVE-2010-0175Mozilla · 7.0% likely

    CWE-399

  19. Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the window.navigator.plugins array while a reference t…CVE-2010-0177Mozilla · 6.9% likely

    CWE-399

  20. Mozilla Firefox 2.0.0.14 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly execute arbitrary code by triggering an error con…CVE-2008-2419Mozilla · 6.6% likely

    CWE-399

  21. Mozilla Firefox 3.0.5 and earlier 3.0.x versions, when designMode is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash)…CVE-2009-0071Mozilla · 6.6% likely

    CWE-399

  22. Use-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetweenTimeContainer function in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3…CVE-2012-0457Mozilla · 6.5% likely

    CWE-399

  23. Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the _moveToEdgeShift XUL tree method, which triggers garbage co…CVE-2009-1044Mozilla · 6.5% likely

    CWE-399

  24. Use-after-free vulnerability in the nsEditor::IsPreformatted function in editor/libeditor/base/nsEditor.cpp in Mozilla Firefox before 19.0.2, Firefox ESR 17.x before 17.0.4, Thund…CVE-2013-0787Mozilla · 6.4% likely

    CWE-399

  25. The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted messag…CVE-2010-0160Mozilla · 6.0% likely

    CWE-399

  26. Use-after-free vulnerability in the JS_GetGlobalForScopeChain function in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 allows remote attackers t…CVE-2013-1738Mozilla · 5.9% likely

    CWE-399

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.