Mozilla
B
MODERATE
1,002
Total CVEs
492
Crit / High
171
Medium
19%
Unpatched
48%
Patched
7.9
Avg CVSS
1
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB
How we collect data →
CVE Trend by Year
Patch Coverage
✓ 524 patched ✗ 202 unpatched ~ 239 under review ⏳ 118 pending score
Intelligence by Audience
PoC Available
0 / 20 shown
CISA KEV (Exploited)
1
Shodan Dorks
ssl:"mozilla" port:443
org:"Mozilla" http.status:200
Top EPSS (Exploitation Probability)
No EPSS data yet for recent CVEs — scores are published by FIRST.org within 24-48h of NVD disclosure.
🎯 Bug Bounty Program: https://www.mozilla.org/en-US/security/bug-bounty/
Quick Facts for Reporting
Total CVEs tracked
1,002
Critical severity
204
Actively exploited (CISA)
1
Unpatched ratio
19%
Avg CVSS score
7.9
Security grade
B (MODERATE)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-10-12
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-10-12
Security Risk Score (for investors)
HIGH
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
Security News Google News
Recent CVEs
showing 20 of 1,083
| CVE ID | Severity | Patch | EPSS | Date |
|---|---|---|---|---|
| CVE-2026-109725 | 5.4 MEDIUM | UNKNOWN / UNPATCHED | — | 2026-10-13 |
| CVE-2026-109719 | 4.2 MEDIUM | UNKNOWN / UNPATCHED | — | 2026-10-13 |
| CVE-2026-109774 | ? N/A | UNKNOWN / UNPATCHED | — | 2026-10-13 |
| CVE-2026-109726 | 5.4 MEDIUM | UNKNOWN / UNPATCHED | — | 2026-10-13 |
| CVE-2026-109706 | 5.4 MEDIUM | UNKNOWN / UNPATCHED | — | 2026-10-13 |
| CVE-2026-109738 | 5.4 MEDIUM | UNKNOWN / UNPATCHED | — | 2026-10-13 |
| CVE-2026-109782 | ? N/A | UNKNOWN / UNPATCHED | — | 2026-10-13 |
| CVE-2026-109776 | ? N/A | UNKNOWN / UNPATCHED | — | 2026-10-13 |
| CVE-2026-109733 | ? N/A | UNKNOWN / UNPATCHED | — | 2026-10-13 |
| CVE-2026-109728 | 5.4 MEDIUM | UNKNOWN / UNPATCHED | — | 2026-10-13 |
| CVE-2026-109722 | ? N/A | UNKNOWN / UNPATCHED | — | 2026-10-13 |
| CVE-2026-109720 | ? N/A | UNKNOWN / UNPATCHED | — | 2026-10-13 |
| CVE-2026-109713 | 5.4 MEDIUM | UNKNOWN / UNPATCHED | — | 2026-10-13 |
| CVE-2026-109777 | 4.3 MEDIUM | UNKNOWN / UNPATCHED | — | 2026-10-13 |
| CVE-2026-103417 | 5.5 MEDIUM | UNKNOWN / UNPATCHED | — | 2026-10-13 |
| CVE-2026-109779 | 4.2 MEDIUM | UNKNOWN / UNPATCHED | — | 2026-10-13 |
| CVE-2026-109783 | ? N/A | UNKNOWN / UNPATCHED | — | 2026-10-13 |
| CVE-2026-109780 | ? N/A | UNKNOWN / UNPATCHED | — | 2026-10-13 |
| CVE-2026-109731 | ? N/A | UNKNOWN / UNPATCHED | — | 2026-10-13 |
| CVE-2026-109781 | 6.5 MEDIUM | UNKNOWN / UNPATCHED | — | 2026-10-13 |
Intel
HQSan Francisco, California, United States
Founded1998
Employees2,500
CEOLaura Chambers
CountryUnited States
LicenseOpen Source
Bug BountyView Program ↗
Trust ScoreB — MODERATE
Max CVSS10.0
Last Updated2026-10-12
Top Weaknesses
CWE-416
Use After Free
86 occurrences in Mozilla CVEs
(9% of total)
CWE-119
Buffer Overflow
54 occurrences in Mozilla CVEs
(5% of total)
CWE-269
Improper Privilege Management
28 occurrences in Mozilla CVEs
(3% of total)
CWE-693
Unknown Weakness Type
28 occurrences in Mozilla CVEs
(3% of total)
CWE-200
Sensitive Information Exposure
23 occurrences in Mozilla CVEs
(2% of total)
CWE-346
Unknown Weakness Type
19 occurrences in Mozilla CVEs
(2% of total)
CWE-787
Out-of-Bounds Write
13 occurrences in Mozilla CVEs
(1% of total)
CWE-120
Buffer Copy Without Size Check
13 occurrences in Mozilla CVEs
(1% of total)
Company Profile
Mozilla is a non-profit organization best known for developing the Firefox web browser, a major open-source alternative to proprietary browsers. Its products are significant in cybersecurity due to their emphasis on privacy, security standards, and rapid patching of vulnerabilities, with over 600 CVEs tracked reflecting its large attack surface and active security research community.
Response Metrics
Est. MTTR ⓘ
~106 days
(Poor)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↗ +180% worse
CVE count 2026 vs 2025:
210 → 588 CVEs
Patch Speed ⓘ Good (20–40% open)
19% of CVEs still unpatched.
Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
Financial Risk Estimate
Est. GDPR Low
€2.0M
Est. GDPR High
€20.0M
Based on 204 critical CVEs, 1 CISA KEV, 24% unpatched. Model: GDPR Art.83 · not legal advice.
Actions
Embed Badge
Mozilla B valtersit.com