Mozilla Foundation Security Advisories
mozilla-mfsa · A · active
https://www.mozilla.org/en-US/security/advisories/
Firefox / Thunderbird / Firefox ESR security advisories (added 2026-05-08). 2026-05-08 audit: WebFetch returned 5 dated MFSA-2026-NN advisories all 2026-05-07/08. Drill into per-MFSA pages for CVE list and credit. | 2026-06-20 full audit (v2.62): live=Y, drill=Y. FETCH → webfetch https://www.mozilla.org/en-US/security/advisories/ (listing of dated MFSA entries) then webfetch the per-MFSA page https://www.mozilla.org/en-US/security/advisories/mfsa2026-NN/ for CVE list. AVOID: Nothing to avoid; plain WebFetch works on both listing and detail. No bridge needed.. | 2026-07-05 admiralty audit: A, first-party PSIRT, official MFSA advisories for Mozilla's own products; authoritative ground truth. Reliability HIGH->A, status stays active. A justified: definitive first-party disclosure source, direct authority over what it reports. | 2026-10-10: `extract` of the advisories index drops list items under most date headings; WebFetch of the index returns the advisories.
Cited in 2 entries
Citation cadence
Citation days per ISO week (15 weeks of coverage span, total 2).
- eMudhra: the private keys of eight intermediate CA certificates were trivially recoverable, so anyone could forge trusted HTTPS certificates; browsers block them, clients with their own trust store or no revocation checking need an update (CVE-2026-111943 in Go)2026-10-21
- Firefox 152.0.6, chained WebAssembly memory-safety and DOM-navigation site-isolation flaws with public exploit code (CVE-2026-15718, CVE-2026-15719)2026-07-17