Windows winget Mozilla
Mozilla Firefox
Current version
157.0.1
winget:Mozilla.Firefox
Version 157.0.1 of Mozilla Firefox on Windows remains exposed: 77 open CVEs out of 2104 referenced.
- Known vulnerabilities
- 2,104
- Still open
- 77
- KEV open
- 0
- Max CVSS (open)
- 9.6
12 total (history)
10.0 historical
Recommended action
Update to ≥ 158 to clear the 77 open CVEs.
Known vulnerabilities (CVE)
Latest matched CVE: 2026
Test a different version
| CVE |
|---|
|
CVE-2026-109781
Open
MEDIUM 6.5
Network Fixed in: 158
|
|
CVE-2026-109780
Open
HIGH · vendor
Fixed in: 158
|
|
CVE-2026-109779
Open
MEDIUM 4.2
Network Fixed in: 158
|
|
CVE-2026-109778
Open
HIGH 8.8
Network Fixed in: 158
|
|
CVE-2026-109777
Open
MEDIUM 4.3
Network Fixed in: 158
|
|
CVE-2026-109776
Open
MEDIUM 4.2
Network Fixed in: 158
|
|
CVE-2026-109775
Open
MEDIUM 6.5
Network Fixed in: 158
|
|
CVE-2026-109774
Open
HIGH · vendor
Fixed in: 158
|
|
CVE-2026-109773
Open
MEDIUM 6.5
Network Fixed in: 158
|
|
CVE-2026-109772
Open
HIGH · vendor
Fixed in: 158
|
|
CVE-2026-109771
Open
MEDIUM 4.3
Network Fixed in: 158
|
|
CVE-2026-109770
Open
HIGH · vendor
Fixed in: 158
|
|
CVE-2026-109769
Open
MEDIUM 4.3
Network Fixed in: 158
|
|
CVE-2026-109768
Open
MEDIUM 6.5
Network Fixed in: 158
|
|
CVE-2026-109767
Open
MEDIUM 4.3
Network Fixed in: 158
|
|
CVE-2026-109766
Open
HIGH · vendor
Fixed in: 158
|
|
CVE-2026-109765
Open
MEDIUM 4.2
Network Fixed in: 158
|
|
CVE-2026-109764
Open
HIGH · vendor
Fixed in: 158
|
|
CVE-2026-109763
Open
HIGH · vendor
Fixed in: 158
|
|
CVE-2026-109762
Open
HIGH · vendor
Fixed in: 158
|
|
CVE-2026-109761
Open
MEDIUM 5.4
Network Fixed in: 158
|
|
CVE-2026-109760
Open
HIGH · vendor
Fixed in: 158
|
|
CVE-2026-109759
Open
HIGH · vendor
Fixed in: 158
|
|
CVE-2026-109757
Open
HIGH 8.3
Network Fixed in: 158
|
|
CVE-2026-109756
Open
HIGH 8.8
Network Fixed in: 158
|
|
CVE-2026-109755
Open
CRITICAL 9.6
Network Fixed in: 158
|
|
CVE-2026-109754
Open
HIGH · vendor
Fixed in: 158
|
|
CVE-2026-109753
Open
HIGH 8.1
Network Fixed in: 158
|
|
CVE-2026-109752
Open
MEDIUM 5.4
Network Fixed in: 158
|
|
CVE-2026-109751
Open
MEDIUM 4.3
Network Fixed in: 158
|
|
CVE-2026-109750
Open
HIGH · vendor
Fixed in: 158
|
|
CVE-2026-109749
Open
MEDIUM 5.4
Network Fixed in: 158
|
|
CVE-2026-109748
Open
MEDIUM 5.4
Network Fixed in: 158
|
|
CVE-2026-109747
Open
HIGH · vendor
Fixed in: 158
|
|
CVE-2026-109746
Open
HIGH · vendor
Fixed in: 158
|
|
CVE-2026-109745
Open
HIGH · vendor
Fixed in: 158
|
|
CVE-2026-109744
Open
HIGH · vendor
Fixed in: 158
|
|
CVE-2026-109743
Open
HIGH 8.8
Network Fixed in: 158
|
|
CVE-2026-109742
Open
MEDIUM 4.3
Network Fixed in: 158
|
|
CVE-2026-109741
Open
MEDIUM 5.4
Network Fixed in: 158
|
|
CVE-2026-109740
Open
HIGH · vendor
Fixed in: 158
|
|
CVE-2026-109739
Open
HIGH 8.8
Network Fixed in: 158
|
|
CVE-2026-109738
Open
MEDIUM 5.4
Network Fixed in: 158
|
|
CVE-2026-109737
Open
HIGH · vendor
Fixed in: 158
|
|
CVE-2026-109736
Open
HIGH · vendor
Fixed in: 158
|
|
CVE-2026-109735
Open
MEDIUM 5.4
Network Fixed in: 158
|
|
CVE-2026-109734
Open
HIGH · vendor
Fixed in: 158
|
|
CVE-2026-109733
Open
HIGH 8.1
Network Fixed in: 158
|
|
CVE-2026-109732
Open
MEDIUM 5.4
Network Fixed in: 158
|
|
CVE-2026-109731
Open
HIGH · vendor
Fixed in: 158
|
|
CVE-2026-109730
Open
HIGH 8.8
Network Fixed in: 158
|
|
CVE-2026-109729
Open
MEDIUM 5.4
Network Fixed in: 158
|
|
CVE-2026-109728
Open
MEDIUM 5.4
Network Fixed in: 158
|
|
CVE-2026-109727
Open
MEDIUM 5.4
Network Fixed in: 158
|
|
CVE-2026-109726
Open
MEDIUM 5.4
Network Fixed in: 158
|
|
CVE-2026-109725
Open
MEDIUM 5.4
Network Fixed in: 158
|
|
CVE-2026-109724
Open
MEDIUM 5.4
Network Fixed in: 158
|
|
CVE-2026-109723
Open
MEDIUM 5.4
Network Fixed in: 158
|
|
CVE-2026-109722
Open
HIGH · vendor
Fixed in: 158
|
|
CVE-2026-109721
Open
HIGH · vendor
Fixed in: 158
|
|
CVE-2026-109720
Open
HIGH · vendor
Fixed in: 158
|
|
CVE-2026-109719
Open
MEDIUM 4.2
Network Fixed in: 158
|
|
CVE-2026-109718
Open
MEDIUM 5.4
Network Fixed in: 158
|
|
CVE-2026-109717
Open
MEDIUM 5.4
Network Fixed in: 158
|
|
CVE-2026-109716
Open
HIGH · vendor
Fixed in: 158
|
|
CVE-2026-109715
Open
HIGH · vendor
Fixed in: 158
|
|
CVE-2026-109714
Open
MEDIUM 5.4
Network Fixed in: 158
|
|
CVE-2026-109713
Open
MEDIUM 5.4
Network Fixed in: 158
|
|
CVE-2026-109712
Open
HIGH · vendor
Fixed in: 158
|
|
CVE-2026-109711
Open
MEDIUM 5.4
Network Fixed in: 158
|
|
CVE-2026-109710
Open
MEDIUM 5.4
Network Fixed in: 158
|
|
CVE-2026-109709
Open
HIGH 8.8
Network Fixed in: 158
|
|
CVE-2026-109708
Open
CRITICAL 9.6
Network Fixed in: 158
|
|
CVE-2026-109707
Open
CRITICAL 9.6
Network Fixed in: 158
|
|
CVE-2026-109706
Open
MEDIUM 5.4
Network Fixed in: 158
|
|
CVE-2026-109705
Open
CRITICAL 9.6
Network Fixed in: 158
|
|
CVE-2026-109704
Open
HIGH 8.8
Network Fixed in: 158
|
|
CVE-2026-106016
Fixed
CRITICAL 9.8
Network Fixed in: 157.0.1
|
Show 122 CVEs fixed in earlier versions Hide the 122 CVEs fixed earlier
| CVE |
|---|
|
CVE-2026-109783
Fixed
HIGH · vendor
Fixed in: 153.5
|
|
CVE-2026-109782
Fixed
HIGH · vendor
Fixed in: 153.5
|
|
CVE-2026-96869
Fixed
MEDIUM 4.3
Network Fixed in: 140.17.0
|
|
CVE-2026-100832
Fixed
HIGH 8.8
Network Fixed in: 115.42.0
|
|
CVE-2026-100831
Fixed
HIGH 8.8
Network Fixed in: 153.4.0
|
|
CVE-2026-100830
Fixed
HIGH 8.1
Network Fixed in: 153.4.0
|
|
CVE-2026-100829
Fixed
CRITICAL 9.6
Network Fixed in: 153.4.0
|
|
CVE-2026-100828
Fixed
CRITICAL 9.6
Network Fixed in: 153.4.0
|
|
CVE-2026-100826
Fixed
MEDIUM 6.5
Network Fixed in: 153.4.0
|
|
CVE-2026-100825
Fixed
HIGH 8.8
Network Fixed in: 153.4.0
|
|
CVE-2026-100824
Fixed
HIGH 8.8
Network Fixed in: 153.4.0
|
|
CVE-2026-100822
Fixed
MEDIUM 5.4
Network Fixed in: 153.4.0
|
|
CVE-2026-100821
Fixed
MEDIUM 4.7
Network Fixed in: 115.42.0
|
|
CVE-2026-100820
Fixed
HIGH 8.8
Network Fixed in: 140.17.0
|
|
CVE-2026-100819
Fixed
CRITICAL 9.6
Network Fixed in: 115.42.0
|
|
CVE-2026-100818
Fixed
CRITICAL 9.6
Network Fixed in: 140.17.0
|
|
CVE-2026-100817
Fixed
MEDIUM 5.4
Network Fixed in: 157.0.0
|
|
CVE-2026-100816
Fixed
HIGH 8.1
Network Fixed in: 153.4.0
|
|
CVE-2026-100815
Fixed
HIGH 8.8
Network Fixed in: 153.4.0
|
|
CVE-2026-100814
Fixed
HIGH 8.8
Network Fixed in: 153.4.0
|
|
CVE-2026-100813
Fixed
HIGH 8.8
Network Fixed in: 157.0.0
|
|
CVE-2026-100812
Fixed
MEDIUM 6.5
Network Fixed in: 153.4.0
|
|
CVE-2026-100811
Fixed
CRITICAL 9.6
Network Fixed in: 140.17.0
|
|
CVE-2026-100810
Fixed
CRITICAL 9.8
Network Fixed in: 157.0.0
|
|
CVE-2026-100809
Fixed
HIGH 8.1
Network Fixed in: 153.4.0
|
|
CVE-2026-100808
Fixed
HIGH 8.8
Network Fixed in: 153.4.0
|
|
CVE-2026-100807
Fixed
HIGH 8.8
Network Fixed in: 157
|
|
CVE-2026-100806
Fixed
MEDIUM 4.3
Network Fixed in: 157
|
|
CVE-2026-100805
Fixed
HIGH 7.5
Network Fixed in: 157
|
|
CVE-2026-100804
Fixed
CRITICAL 9.6
Network Fixed in: 157
|
|
CVE-2026-100803
Fixed
HIGH 8.1
Network Fixed in: 157
|
|
CVE-2026-100802
Fixed
MEDIUM 4.3
Network Fixed in: 157
|
|
CVE-2026-100801
Fixed
HIGH 8.8
Network Fixed in: 157
|
|
CVE-2026-100800
Fixed
CRITICAL 9.6
Network Fixed in: 157
|
|
CVE-2026-100799
Fixed
MEDIUM 4.3
Network Fixed in: 157
|
|
CVE-2026-100798
Fixed
HIGH 8.1
Network Fixed in: 157
|
|
CVE-2026-100797
Fixed
HIGH 8.8
Network Fixed in: 157
|
|
CVE-2026-100796
Fixed
HIGH 8.8
Network Fixed in: 157
|
|
CVE-2026-100795
Fixed
MEDIUM 6.5
Network Fixed in: 157
|
|
CVE-2026-100794
Fixed
CRITICAL 9.6
Network Fixed in: 157
|
|
CVE-2026-100793
Fixed
MEDIUM 6.5
Network Fixed in: 157
|
|
CVE-2026-100792
Fixed
HIGH 7.1
Network Fixed in: 157
|
|
CVE-2026-100791
Fixed
HIGH 8.8
Network Fixed in: 157
|
|
CVE-2026-100790
Fixed
HIGH 8.8
Network Fixed in: 157
|
|
CVE-2026-100789
Fixed
HIGH 8.8
Network Fixed in: 157
|
|
CVE-2026-100788
Fixed
CRITICAL 9.8
Network Fixed in: 157
|
|
CVE-2026-100787
Fixed
CRITICAL 9.6
Network Fixed in: 153.4.0
|
|
CVE-2026-100786
Fixed
CRITICAL 9.6
Network Fixed in: 115.42.0
|
|
CVE-2026-100785
Fixed
HIGH 8.8
Network Fixed in: 115.42.0
|
|
CVE-2026-100784
Fixed
HIGH 8.8
Network Fixed in: 115.42.0
|
|
CVE-2026-100783
Fixed
MEDIUM 4.3
Network Fixed in: 115.42.0
|
|
CVE-2026-100782
Fixed
HIGH 8.8
Network Fixed in: 115.42.0
|
|
CVE-2026-100781
Fixed
CRITICAL 9.6
Network Fixed in: 115.42.0
|
|
CVE-2026-100780
Fixed
HIGH 8.8
Network Fixed in: 115.42.0
|
|
CVE-2026-100779
Fixed
HIGH 8.8
Network Fixed in: 115.42.0
|
|
CVE-2026-100778
Fixed
CRITICAL 9.6
Network Fixed in: 115.42.0
|
|
CVE-2026-100777
Fixed
HIGH 8.8
Network Fixed in: 115.42.0
|
|
CVE-2026-100776
Fixed
HIGH 8.8
Network Fixed in: 140.17.0
|
|
CVE-2026-100775
Fixed
CRITICAL 9.6
Network Fixed in: 115.42.0
|
|
CVE-2026-100774
Fixed
HIGH 8.8
Network Fixed in: 115.42.0
|
|
CVE-2026-100773
Fixed
HIGH 8.8
Network Fixed in: 115.42.0
|
|
CVE-2026-100772
Fixed
HIGH 8.8
Network Fixed in: 140.17.0
|
|
CVE-2026-100771
Fixed
HIGH 8.1
Network Fixed in: 115.42.0
|
|
CVE-2026-100770
Fixed
CRITICAL 9.6
Network Fixed in: 115.42.0
|
|
CVE-2026-100769
Fixed
HIGH 8.8
Network Fixed in: 140.17.0
|
|
CVE-2026-100768
Fixed
HIGH 8.8
Network Fixed in: 157.0.0
|
|
CVE-2026-100767
Fixed
HIGH 8.8
Network Fixed in: 115.42.0
|
|
CVE-2026-100766
Fixed
MEDIUM 4.3
Network Fixed in: 115.42.0
|
|
CVE-2026-100765
Fixed
HIGH 8.8
Network Fixed in: 153.4.0
|
|
CVE-2026-100764
Fixed
HIGH 8.8
Network Fixed in: 157.0.0
|
|
CVE-2026-100763
Fixed
CRITICAL 9.1
Network Fixed in: 157.0.0
|
|
CVE-2026-100762
Fixed
CRITICAL 9.6
Network Fixed in: 115.42.0
|
|
CVE-2026-100761
Fixed
HIGH 8.8
Network Fixed in: 157.0.0
|
|
CVE-2026-100760
Fixed
CRITICAL 9.6
Network Fixed in: 153.4.0
|
|
CVE-2026-100759
Fixed
HIGH 8.1
Network Fixed in: 115.42.0
|
|
CVE-2026-100758
Fixed
CRITICAL 9.6
Network Fixed in: 115.42.0
|
|
CVE-2026-100757
Fixed
HIGH 8.8
Network Fixed in: 115.42.0
|
|
CVE-2026-100756
Fixed
HIGH 8.1
Network Fixed in: 115.42.0
|
|
CVE-2026-92079
Fixed
CRITICAL 9.1
Network Fixed in: 153.3.0
|
|
CVE-2026-92078
Fixed
MEDIUM 6.5
Network Fixed in: 153.3.0
|
|
CVE-2026-92077
Fixed
MEDIUM 6.5
Network Fixed in: 153.3.0
|
|
CVE-2026-92076
Fixed
HIGH 8.8
Local Fixed in: 153.3.0
|
|
CVE-2026-92075
Fixed
CRITICAL 9.1
Network Fixed in: 153.3.0
|
|
CVE-2026-92074
Fixed
HIGH 8.8
Local Fixed in: 153.3.0
|
|
CVE-2026-92073
Fixed
HIGH 8.8
Network Fixed in: 153.3.0
|
|
CVE-2026-92072
Fixed
HIGH 8.0
Network Fixed in: 153.3.0
|
|
CVE-2026-92071
Fixed
CRITICAL 9.6
Network Fixed in: 153.3.0
|
|
CVE-2026-92070
Fixed
MEDIUM 4.3
Network Fixed in: 153.3.0
|
|
CVE-2026-92069
Fixed
MEDIUM 5.4
Network Fixed in: 153.3.0
|
|
CVE-2026-92068
Fixed
MEDIUM 5.4
Network Fixed in: 153.3.0
|
|
CVE-2026-92067
Fixed
HIGH 8.8
Network Fixed in: 153.3.0
|
|
CVE-2026-92066
Fixed
CRITICAL 9.8
Network Fixed in: 156.0.0
|
|
CVE-2026-92065
Fixed
HIGH 8.8
Local Fixed in: 153.3.0
|
|
CVE-2026-92064
Fixed
HIGH 8.8
Local Fixed in: 153.3.0
|
|
CVE-2026-92063
Fixed
MEDIUM 6.5
Network Fixed in: 156.0.0
|
|
CVE-2026-92062
Fixed
HIGH 8.8
Network Fixed in: 153.3.0
|
|
CVE-2026-92061
Fixed
CRITICAL 9.8
Network Fixed in: 156.0.0
|
|
CVE-2026-92060
Fixed
HIGH 8.8
Network Fixed in: 153.3.0
|
|
CVE-2026-92059
Fixed
CRITICAL 9.3
Local Fixed in: 153.3.0
|
|
CVE-2026-92058
Fixed
HIGH 8.8
Network Fixed in: 153.3.0
|
|
CVE-2026-92057
Fixed
CRITICAL 9.1
Network Fixed in: 153.3.0
|
|
CVE-2026-92056
Fixed
HIGH 8.8
Network Fixed in: 153.3.0
|
|
CVE-2026-92055
Fixed
HIGH 8.8
Network Fixed in: 153.3.0
|
|
CVE-2026-92054
Fixed
HIGH 8.8
Network Fixed in: 153.3.0
|
|
CVE-2026-92053
Fixed
HIGH 8.8
Network Fixed in: 153.3.0
|
|
CVE-2026-92052
Fixed
HIGH 8.8
Network Fixed in: 153.3.0
|
|
CVE-2026-92051
Fixed
CRITICAL 9.1
Network Fixed in: 156.0.0
|
|
CVE-2026-92050
Fixed
CRITICAL 9.1
Network Fixed in: 156.0.0
|
|
CVE-2026-92049
Fixed
HIGH 8.8
Network Fixed in: 153.3.0
|
|
CVE-2026-92048
Fixed
CRITICAL 9.0
Network Fixed in: 153.3.0
|
|
CVE-2026-92047
Fixed
HIGH 8.8
Network Fixed in: 153.3.0
|
|
CVE-2026-92046
Fixed
HIGH 8.8
Network Fixed in: 153.3.0
|
|
CVE-2026-92045
Fixed
CRITICAL 9.6
Network Fixed in: 153.3.0
|
|
CVE-2026-92044
Fixed
HIGH 7.5
Network Fixed in: 153.3.0
|
|
CVE-2026-92043
Fixed
HIGH 8.8
Network Fixed in: 153.3.0
|
|
CVE-2026-92042
Fixed
HIGH 7.5
Network Fixed in: 153.3.0
|
|
CVE-2026-92041
Fixed
CRITICAL 9.1
Network Fixed in: 153.3.0
|
|
CVE-2026-92040
Fixed
HIGH 8.8
Network Fixed in: 156.0.0
|
|
CVE-2026-92039
Fixed
MEDIUM 6.3
Network Fixed in: 153.3.0
|
|
CVE-2026-92038
Fixed
CRITICAL 9.1
Network Fixed in: 153.3.0
|
|
CVE-2026-92037
Fixed
CRITICAL 9.8
Network Fixed in: 156.0.0
|
|
CVE-2026-92036
Fixed
CRITICAL 9.8
Network Fixed in: 156.0.0
|
Security Score
Concerning
Composite: 50% open CVEs + 40% open KEVs + 10% vendor velocity.
-
Open CVEs -50/-50
77 CVEs
-
Open KEVs 0/-40
0 KEVs
-
Vendor 0/-10
100% fresh
Cumulative exposure
High
Weighted sum capped at 100: open CVEs (max 50 pts) + KEV (max 35) + critical shared permissions (max 10) + trackers (max 8) + OS EOL (max 5). Higher score = more exposed.
-
Open CVEs +50/+50
77 open CVEs, max CVSS 9.6, EPSS 0%
-
Active KEVs +0/+35
0 CISA KEVs still open
-
Permissions +0/+10
0 critical shared permission(s)
-
Trackers +0/+8
0 identification/profiling tracker(s)
-
EOL OS +0/+5
Installed OS is end-of-life
Context
Context
Description
Mozilla Firefox is free and open source software, built by a community of thousands from all over the world.
Technical details
- Publisher
- Mozilla
- Distribution channel
- winget
- Identifier
- winget:Mozilla.Firefox
Other apps by this publisher
Apps published by Mozilla
4 apps tracked · 1 with an open CVE
FAQ
FAQ: Mozilla Firefox
Does Mozilla Firefox have known security vulnerabilities?
Mozilla Firefox (winget:Mozilla.Firefox) on Windows has 2104 CVE referenced in NVD, 77 still open on the current version and 0 listed in the CISA KEV catalog. Absence of a CVE is not a security guarantee.
Which version of Mozilla Firefox fixes its known vulnerabilities?
Updating Mozilla Firefox to 158 or later closes the open CVEs that have a published fix. The current store version is 157.0.1.
Is Mozilla Firefox affected by an actively exploited vulnerability (CISA KEV)?
No CVE affecting Mozilla Firefox (winget:Mozilla.Firefox) is currently in the CISA KEV catalog.
What is the latest known version of Mozilla Firefox?
The most recent version of Mozilla Firefox (winget:Mozilla.Firefox) tracked by Appaloosa Scout is 157.0.1, published by Mozilla.
Deploy this app across your fleet
Appaloosa distributes and updates your Android and iOS apps from an enterprise store.