Mozilla Firefox ↗

Mozilla · Browser

Track your version:Monitors Mozilla Firefox and tailors your dashboard to that exact version.

158.0 · latest cycle100/100 Healthy

Summary iPlain-English security verdict for Mozilla Firefox, generated from its current health score, actively-exploited vulnerabilities, and latest supported version.

Mozilla Firefox currently scores 100/100 — healthy. 3 actively-exploited vulnerabilities (CISA KEV) affect older releases (e.g. CVE-2024-9680) — staying on the latest supported version keeps you clear of them. The latest supported release is 158.0. It's on the latest patch with no significant known issues — keep it current.

Disclosure trend iNew CVEs published for Mozilla Firefox each year (NVD). A higher bar means more disclosures that year — more scrutiny, not necessarily less safe.

'19

'20

'21

'22

'23

'24

'25

'26

1 of its known vulnerability is linked to ransomware campaigns (CISA KEV).

Patch priority — what to act on iThe issues to fix first — actively exploited (CISA KEV) first, then by exploitation probability (EPSS), then severity. Each row's "→ fixed in" is the earliest version that patches it; "see advisory" means no fixed version is published.

Most urgent first — actively exploited, then likeliest to be exploited.

CVE-2024-9680 CRITICAL exploited ransomware Use-after-free EPSS 23% → fixed in 131.0.2 CVE-2022-26485 HIGH exploited Use-after-free EPSS 14% → fixed in 97.3.0 CVE-2022-26486 CRITICAL exploited Use-after-free EPSS 2% → fixed in 97.3.0 CVE-2011-3389 MEDIUM CWE-326 EPSS 73% → see advisory CVE-2016-0718 CRITICAL Memory corruption EPSS 13% → fixed in 48.0 CVE-2025-4918 CRITICAL Out-of-bounds read EPSS 9% → fixed in 138.0.4 CVE-2025-0247 CRITICAL Out-of-bounds write EPSS 9% → fixed in 134.0 CVE-2016-9063 CRITICAL Integer overflow EPSS 5% → fixed in 50 CVE-2025-6424 CRITICAL Use-after-free EPSS 4% → fixed in 140.0 CVE-2025-2857 CRITICAL CWE-668 EPSS 2% → fixed in 136.0.4 CVE-2025-1009 CRITICAL Use-after-free EPSS 1% → fixed in 135.0 CVE-2026-4698 CRITICAL CWE-843 EPSS 1% → fixed in 149.0

See all 608 known Mozilla Firefox CVEs & security history →

Get alerted about Mozilla Firefox

Be emailed the moment Mozilla Firefox gets a newly exploited vulnerability (CISA KEV) or a release reaches end of life. Free · double opt-in · unsubscribe anytime.

We email only on real events for Mozilla Firefox — no marketing, no sharing, and we never know what you run. Track your whole stack →

Versions & lifecycle iWhen each release line stops receiving security patches (end-of-life). After EOL there are no more fixes — plan upgrades before these dates.

How long each Mozilla Firefox release line is supported — and when it sunsets. Select a line for its full report.

Mar31'27 Mozilla Firefox 115EOL 2027-03-31

Oct27'26 Mozilla Firefox 158EOL 2026-10-27

Oct13'26 Mozilla Firefox 157ended 2026-10-13

Sept29'26 Mozilla Firefox 156ended 2026-09-29

Sept29'26 Mozilla Firefox 140ended 2026-09-29

Sept15'26 Mozilla Firefox 155ended 2026-09-15

Sept1'26 Mozilla Firefox 154ended 2026-09-01

Jul21'26 Mozilla Firefox 152ended 2026-07-21

Jun16'26 Mozilla Firefox 151ended 2026-06-16

May18'26 Mozilla Firefox 150ended 2026-05-18

Apr21'26 Mozilla Firefox 149ended 2026-04-21

Mar24'26 Mozilla Firefox 148ended 2026-03-24

Full Mozilla Firefox end-of-life dates & support timeline →

Frequently asked

Is Mozilla Firefox safe and patched?

What should I do about Mozilla Firefox now?

Upgrade Mozilla Firefox to the latest supported release (158.0) or later, which clears the actively-exploited issues affecting older versions, then confirm against Mozilla's official advisory.

When does Mozilla Firefox reach end-of-life?

The latest supported Mozilla Firefox release is 158.0. After end-of-life a release no longer receives security patches.

Which versions of Mozilla Firefox are still receiving security updates?

Supported Mozilla Firefox release lines (latest 158.0): 158, 153, 115. End-of-life releases no longer receive security patches.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Mozilla's official advisory before you patch or upgrade — Mozilla Firefox official site ↗