All apps
F

Firefox

Browser
Mozilla·Website

Open-source browser by Mozilla

Latest versions

Stable
WindowsmacOSLinux
158.013 Oct 2026
Enterprise Stable
macOSLinuxWindows
153.5.0esr
Actively exploited
0
CISA KEV · 15 lifetime
Affecting latest
4
v158.0
+24 unverified
Known CVEs
3543
across all versions, as matched by PemSync
Last checked
21 Oct 2026, 4:42

The latest tracked version (158.0) is affected by 4 known vulnerabilities — update to the versions shown in the table below.

These verdicts were computed against 158.0 only. We also track Enterprise Stable 153.5.0esr, which was not evaluated — a CVE fixed in 158.0 may still affect that build.

CVESeverityEPSS pctStatusScore source
HIGHvendor—No fix available yetVendor advisory20 Oct 2026
LOWvendor—Patch to 158.0.1Vendor advisory20 Oct 2026
MEDIUMvendor—Patch to 158.0.1Vendor advisory20 Oct 2026
HIGHvendor—Patch to 158.0.1Vendor advisory20 Oct 2026
—66%Impact unverified—19 Nov 2022
—40%Impact unverified—17 May 2021
—95%Impact unverified—4 Feb 2019
—93%Impact unverified—12 Jul 2018
—46%Impact unverified—4 May 2018
—96%Impact unverified—6 Sep 2016
—96%Impact unverified—6 Sep 2016
—90%Impact unverified—15 Oct 2014
—81%Impact unverified—15 Sep 2012
—91%Impact unverified—15 Sep 2012
—99%Impact unverified—6 Sep 2011
—88%Impact unverified—7 Mar 2011
—63%Impact unverified—29 Jan 2010
—62%Impact unverified—14 Dec 2009
—54%Impact unverified—14 Dec 2009
—89%Impact unverified—29 Nov 2009
—77%Impact unverified—11 May 2009
—64%Impact unverified—17 Apr 2008
—91%Impact unverified—26 Jul 2007
—60%Impact unverified—17 Jul 2007
—98%Impact unverified—10 Jul 2007
Showing 1–25 of 3543
Page 1 of 142

PemSync reports known, cataloged exploited vulnerabilities (CISA KEV) and published CVEs. It is not a zero-day detection or threat-intelligence system — a vulnerability may be exploited before it appears here. Absence of data does not mean an app is secure.

More from Mozilla