Mozilla Uses LLMs for vuln discovery
CPE vendor key: mozilla ·
926 CVEs published in the last 24 months.
CVEs (365 d)
711
▼ -10 vs prior 30d
Avg CVSS (365 d)
8.01
over 711 CVEs
Avg EPSS pct (365 d)
0.26
higher = more likely exploited
KEV hit rate (365 d)
0.0%
0 of 711 added to CISA KEV
LLM-credited CVEs
141
Anthropic 141
Monthly CVE volume — last 24 months
Each point is one calendar month. Bars in the
severity card to the right slice the same volume by CVSS band.
Severity mix
Stacked by CVSS band (Critical / High / Medium /
Low) using the best available metric per CVE.
Top affected products (24 mo)
759
637
15
8
1
1
1
1
1
1
Distinct CVEs that include each product in their
CPE configuration.
Top CWEs (24 mo)
169
123
60
58
49
49
39
28
25
24
Distinct CVEs assigned each weakness.
Known exploited, all time (15)
| Published | CVE |
|---|---|
| 2024-10-09 | CVE-2024-9680 |
| 2023-09-28 | CVE-2023-5217 |
| 2023-09-12 | CVE-2023-4863 |
| 2022-12-22 | CVE-2022-26485 |
| 2022-12-22 | CVE-2022-26486 |
| 2020-04-24 | CVE-2020-6819 |
| 2020-04-24 | CVE-2020-6820 |
| 2020-03-02 | CVE-2019-17026 |
| 2019-07-23 | CVE-2019-11707 |
| 2019-07-23 | CVE-2019-11708 |
| 2018-06-11 | CVE-2016-9079 |
| 2015-08-08 | CVE-2015-4495 |
| 2013-06-26 | CVE-2013-1690 |
| 2013-05-16 | CVE-2013-1675 |
| 2010-10-28 | CVE-2010-3765 |
Attributed by CPE rather than by CISA's vendor name, so it includes
CVEs filed under another vendor whose affected-product list names this
one — shared library code is the usual reason. Broader, and
noisier, than the name-matched card above on purpose.
LLM-credited CVEs from this vendor
| Published | CVE | LLM family | Model(s) |
|---|---|---|---|
| 2026-05-07 | CVE-2026-8091 | anthropic | Claude |
| 2026-04-28 | CVE-2026-7321 | anthropic | Claude |
| 2026-04-26 | CVE-2026-6786 | anthropic | Claude |
| 2026-04-26 | CVE-2026-6785 | anthropic | Claude |
| 2026-04-21 | CVE-2026-6784 | anthropic | Claude |
| 2026-04-21 | CVE-2026-6783 | anthropic | Claude |
| 2026-04-21 | CVE-2026-6782 | anthropic | Claude |
| 2026-04-21 | CVE-2026-6781 | anthropic | Claude |
| 2026-04-21 | CVE-2026-6780 | anthropic | Claude |
| 2026-04-21 | CVE-2026-6779 | anthropic | Claude |
| 2026-04-21 | CVE-2026-6778 | anthropic | Claude |
| 2026-04-21 | CVE-2026-6777 | anthropic | Claude |
| 2026-04-21 | CVE-2026-6776 | anthropic | Claude |
| 2026-04-21 | CVE-2026-6775 | anthropic | Claude |
| 2026-04-21 | CVE-2026-6774 | anthropic | Claude |
| 2026-04-21 | CVE-2026-6773 | anthropic | Claude |
| 2026-04-21 | CVE-2026-6772 | anthropic | Claude |
| 2026-04-21 | CVE-2026-6771 | anthropic | Claude |
| 2026-04-21 | CVE-2026-6770 | anthropic | Claude |
| 2026-04-21 | CVE-2026-6769 | anthropic | Claude |
| 2026-04-21 | CVE-2026-6768 | anthropic | Claude |
| 2026-04-21 | CVE-2026-6767 | anthropic | Claude |
| 2026-04-21 | CVE-2026-6766 | anthropic | Claude |
| 2026-04-21 | CVE-2026-6765 | anthropic | Claude |
| 2026-04-21 | CVE-2026-6764 | anthropic | Claude |
From
mythos_attributed_cves: CVEs whose NVD description
or vendor advisory credits an LLM-assisted discovery. Confidence is
high for every row.
Generated 16 October 2026 12:22 UTC .