All apps
F

Firefox

Browser
Mozilla·Website

Open-source browser by Mozilla

Latest versions

Stable
WindowsmacOSLinux
155.0.11 Sep 2026
Enterprise Stable
WindowsmacOSLinux
140.15.0esr
Actively exploited
0
CISA KEV · 15 lifetime
Affecting latest
0
v140.15.0esr
+25 unverified
Known CVEs
3308
across all versions, as matched by PemSync
Last checked
6 Sep 2026, 0:15

Of 3308 recorded CVEs, 3283 are fixed in versions you're past. 25 could not be evaluated against 140.15.0esr — treat them as unknown rather than resolved. They are listed first in the table below.

CVESeverityEPSS pctStatusScore source
63%Impact unverified19 Nov 2022
40%Impact unverified17 May 2021
95%Impact unverified4 Feb 2019
92%Impact unverified12 Jul 2018
46%Impact unverified4 May 2018
96%Impact unverified6 Sep 2016
96%Impact unverified6 Sep 2016
90%Impact unverified15 Oct 2014
80%Impact unverified15 Sep 2012
91%Impact unverified15 Sep 2012
99%Impact unverified6 Sep 2011
88%Impact unverified7 Mar 2011
61%Impact unverified29 Jan 2010
60%Impact unverified14 Dec 2009
53%Impact unverified14 Dec 2009
88%Impact unverified29 Nov 2009
76%Impact unverified11 May 2009
62%Impact unverified17 Apr 2008
90%Impact unverified26 Jul 2007
58%Impact unverified17 Jul 2007
98%Impact unverified10 Jul 2007
86%Impact unverified24 Apr 2007
58%Impact unverified11 Apr 2007
78%Impact unverified13 Feb 2007
66%Impact unverified31 Dec 2003
Showing 125 of 3308
Page 1 of 133

PemSync reports known, cataloged exploited vulnerabilities (CISA KEV) and published CVEs. It is not a zero-day detection or threat-intelligence system — a vulnerability may be exploited before it appears here. Absence of data does not mean an app is secure.

More from Mozilla