Most Exploited Internet-Facing Products

MEIFP

Back to Ranking

Mozilla

Products: Firefox · Firefox ESR · Nunjucks · Thunderbird · common-voice

40.6

Score

5

CVEs

1

Active

4

PoC

1

KEV

#54

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2025-8041	2025-08-19	5.3v3.1	POC	—	Low	None	YES	0.0	Firefox	In the address bar, Firefox for Android truncated the display of URLs from the end instead of prioritizing the origin. This vulnerability was fixed in Firefox 141.
CVE-2025-1009	2025-02-04	9.8v3.1	POC	—	Low	None	YES	0.0	FirefoxThunderbird	An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.
CVE-2024-9680	2024-10-09	9.8v3.1	ACTIVE		Low	None	YES	40.6	FirefoxFirefox ESRThunderbird	An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird
CVE-2024-4367	2024-05-14	5.6v3.1	POC	—	High	None	no	0.0	FirefoxFirefox ESRThunderbird	A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.
CVE-2024-29943	2024-03-22	9.8v3.1	POC	—	Low	None	YES	0.0	Firefox	An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination. This vulnerability affects Firefox < 124.0.1.

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3