Mozilla
CompanyThe Mozilla Corporation is a wholly owned taxable subsidiary of the Mozilla Foundation that coordinates and integrates the development of Internet-related applications such as the Firefox web browser, by a global community of open-source developers, some of whom are employed by the corporation itself. The corporation also distributes and promotes these products. Unlike the non-profit Mozilla Foundation, and the Mozilla open source project, founded by the now defunct Netscape Communications Corporation, the Mozilla Corporation is a for-profit entity. The Mozilla Corporation reinvests all of its profits back into the Mozilla projects. The Mozilla Corporation's stated aim is to work towards the Mozilla Foundation's public benefit to "promote choice and innovation on the Internet."
From Wikipedia, licensed under CC BY-SA 4.0. Shown as published there.
Facts
- Country
- United StatesSource: Wikidata
- Founded
- 2005Source: Wikidata
- Founded by
- Mozilla FoundationSource: Wikidata
- CEO
- Anthony Enzor-DeMeoSource: Wikidata
- Parent company
- Mozilla FoundationSource: Wikidata
- Owned by
- Mozilla FoundationSource: Wikidata
- Headquarters
- San FranciscoSource: Wikidata
- Sector
- Software industrySource: Wikidata
- Products
- Firefox Focus, Firefox for Android, Firefox OS, IRL: Online Life Is Real Life, Mozilla Firefox, Mozilla ThunderbirdSource: Wikidata
- Official website
- www.mozilla.orgSource: Wikidata
- Wikipedia
- Read on WikipediaSource: Wikidata
Vulnerabilities
3 CVEs in our records, 0 known exploited (on CISA's KEV list).
Source: NVD and CISA KEVProducts we track
Security timeline
- Vulnerability reported by Cloudflare Blog (Security)Cloudflare tracks exploitation and patching of eMudhra's weak intermediate CA keys
Recent news
OpenAI launches restricted GPT-6 Cyber model for finding and testing software flaws
OpenAI says GPT-6 Cyber, available through the API and Codex to approved Daybreak Red customers, found 81 high-severity Firefox bugs and developed working exploits for 948 Linux kernel vulnerabilities, 588 of them previously unknown. Noma Security's Chris Hughes said the results suggest a deeper pool of flaws in mature software, while Dragos's Rob T. Lee warned that AI could also create new exploitation paths that make detection harder. OpenAI has not published metrics showing how much its models speed up enterprise patch deployment.
OpenAI releases GPT-6 Cyber with restricted access for approved offensive security work
OpenAI has released GPT-6 Cyber, a cybersecurity-tuned model that scored 48.5 percent on its ExploitGym evaluation, compared with 32.1 percent for GPT-5.6 Cyber. OpenAI says it stayed within scope in over 99 percent of tests, but declined to say what happened in the remaining 0.07 percent. The model is rated Critical under OpenAI's Preparedness Framework and is limited to approved Daybreak Red customers via the API and Codex.
Cloudflare tracks exploitation and patching of eMudhra's weak intermediate CA keys
Cloudflare reports that eMudhra's eight intermediate private keys, one of which was simply the number 4, can be recovered from the public certificates, letting anyone forge certificates that unpatched clients not enforcing Certificate Transparency would accept. Cloudflare patched high-priority systems, including Pingora origin-facing proxies, within hours and logged about 22,000 handshakes using the weak keys, all refused where verification was enabled. About 160 handshakes carried forged certificates, one dated less than an hour after Mozilla's bug report went public, but they appeared to be servers' own default certificates rather than interception attempts.