Cyber Resilience

← All vendors

Mozilla Uses LLMs for vuln discovery

CPE vendor key: mozilla · 545 CVEs published in the last 24 months.

CVEs (365 d)
352
▼ -71 vs prior 30d
Avg CVSS (365 d)
7.99
over 352 CVEs
Avg EPSS pct (365 d)
0.24
higher = more likely exploited
KEV hit rate (365 d)
0.0%
0 of 352 added to CISA KEV
LLM-credited CVEs
141
Anthropic 141

Monthly CVE volume — last 24 months

202420252026054
Each point is one calendar month. Bars in the severity card to the right slice the same volume by CVSS band.

Severity mix

CritHighMedLow
Stacked by CVSS band (Critical / High / Medium / Low) using the best available metric per CVE.

Top affected products (24 mo)

firefox
513
thunderbird
372
firefox_esr
23
firefox_focus
9
convict
1
sccache
1
nunjucks
1
vpn
1
neqo
1
rhino
1
Distinct CVEs that include each product in their CPE configuration.

Top CWEs (24 mo)

CWE-416
73
CWE-119
67
CWE-787
36
CWE-200
25
CWE-754
23
CWE-451
21
CWE-290
21
CWE-125
18
CWE-79
18
CWE-693
18
Distinct CVEs assigned each weakness.

Recent CISA KEV adds (last 12 months)

No vendor-attributed KEV adds in the last 12 months.

Filtered to KEV rows where the CISA vendor name matches this vendor, to drop cross-OS noise (e.g. third-party Windows apps that CPE-map to Microsoft).

LLM-credited CVEs from this vendor

PublishedCVELLM familyModel(s)
2026-05-07CVE-2026-8091anthropicClaude
2026-04-28CVE-2026-7321anthropicClaude
2026-04-26CVE-2026-6785anthropicClaude
2026-04-26CVE-2026-6786anthropicClaude
2026-04-21CVE-2026-6746anthropicClaude
2026-04-21CVE-2026-6747anthropicClaude
2026-04-21CVE-2026-6748anthropicClaude
2026-04-21CVE-2026-6749anthropicClaude
2026-04-21CVE-2026-6750anthropicClaude
2026-04-21CVE-2026-6751anthropicClaude
2026-04-21CVE-2026-6752anthropicClaude
2026-04-21CVE-2026-6753anthropicClaude
2026-04-21CVE-2026-6754anthropicClaude
2026-04-21CVE-2026-6755anthropicClaude
2026-04-21CVE-2026-6756anthropicClaude
2026-04-21CVE-2026-6757anthropicClaude
2026-04-21CVE-2026-6758anthropicClaude
2026-04-21CVE-2026-6759anthropicClaude
2026-04-21CVE-2026-6760anthropicClaude
2026-04-21CVE-2026-6761anthropicClaude
2026-04-21CVE-2026-6762anthropicClaude
2026-04-21CVE-2026-6763anthropicClaude
2026-04-21CVE-2026-6764anthropicClaude
2026-04-21CVE-2026-6765anthropicClaude
2026-04-21CVE-2026-6766anthropicClaude
From mythos_attributed_cves: CVEs whose NVD description or vendor advisory credits an LLM-assisted discovery. Confidence is high for every row.

Generated 19 June 2026 13:18 UTC <span class="time-ago" data-iso="2026-06-19T13:18:30Z"></span>.