CVE-2026-113399 N/A Firefox — Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1 and Thunde… 2026-10-20 CVE-2026-113400 MEDIUM 5.4 Firefox — Uninitialized memory in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 158.0.1 and … 2026-10-20 CVE-2026-113401 MEDIUM 6.5 Firefox — Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird… 2026-10-20 CVE-2026-113470 MEDIUM 5.4 Firefox — Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was dist… 2026-10-20 CVE-2026-113866 MEDIUM 5.9 Thunderbird — When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover … 2026-10-20 CVE-2026-113867 N/A Thunderbird — Thunderbird did not escape attribute values when serializing outgoing XMPP stanzas. Because values from incomi… 2026-10-20 CVE-2026-113868 MEDIUM 5.3 Thunderbird — When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challe… 2026-10-20 CVE-2026-113869 MEDIUM 5.4 Thunderbird — When Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Password) wh… 2026-10-20 CVE-2026-103417 MEDIUM 5.5 Firefox For Ios — Firefox for iOS could autofill saved credentials into a new page if cross-origin navigation occurred while the… 2026-10-13 CVE-2026-103418 HIGH 8.8 Firefox For Ios — Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing… 2026-10-13 CVE-2026-109704 HIGH 8.8 Firefox — Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox… 2026-10-13 CVE-2026-109705 CRITICAL 9.6 Firefox — Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking co… 2026-10-13 CVE-2026-109706 MEDIUM 5.4 Firefox — Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 1… 2026-10-13 CVE-2026-109707 CRITICAL 9.6 Firefox — Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Firefox 158,… 2026-10-13 CVE-2026-109708 CRITICAL 9.6 Firefox — Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed … 2026-10-13 CVE-2026-109709 HIGH 8.8 Firefox — Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability… 2026-10-13 CVE-2026-109710 MEDIUM 5.4 Firefox — Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.4… 2026-10-13 CVE-2026-109711 MEDIUM 5.4 Firefox — Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 1… 2026-10-13 CVE-2026-109712 HIGH 7.1 Firefox — Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox … 2026-10-13 CVE-2026-109713 MEDIUM 5.4 Firefox — Use-after-free in the Crash Reporting component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.… 2026-10-13 CVE-2026-109714 MEDIUM 5.4 Firefox — Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158 and Thunder… 2026-10-13 CVE-2026-109715 HIGH 8.1 Firefox — Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158,… 2026-10-13 CVE-2026-109716 HIGH 8.1 Firefox — Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158,… 2026-10-13 CVE-2026-109717 MEDIUM 5.4 Firefox — Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 158, Firefox E… 2026-10-13 CVE-2026-109718 MEDIUM 5.4 Firefox — Use-after-free in the XML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox … 2026-10-13 CVE-2026-109719 MEDIUM 4.2 Firefox — Race condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox… 2026-10-13 CVE-2026-109720 HIGH 7.1 Firefox — JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158, Fire… 2026-10-13 CVE-2026-109721 MEDIUM 5.4 Firefox — Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox… 2026-10-13 CVE-2026-109722 HIGH 8.1 Firefox — JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firef… 2026-10-13 CVE-2026-109723 MEDIUM 5.4 Firefox — Integer overflow in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 158, Firefox… 2026-10-13 CVE-2026-109724 MEDIUM 5.4 Firefox — Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 153… 2026-10-13 CVE-2026-109725 MEDIUM 5.4 Firefox — Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115… 2026-10-13 CVE-2026-109726 MEDIUM 5.4 Firefox — Use-after-free in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox … 2026-10-13 CVE-2026-109727 MEDIUM 5.4 Firefox — Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, … 2026-10-13 CVE-2026-109728 MEDIUM 5.4 Firefox — Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.4… 2026-10-13 CVE-2026-109729 MEDIUM 5.4 Firefox — Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox E… 2026-10-13 CVE-2026-109730 HIGH 8.8 Firefox — Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, F… 2026-10-13 CVE-2026-109731 MEDIUM 5.4 Firefox — Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158… 2026-10-13 CVE-2026-109732 MEDIUM 5.4 Firefox — Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43,… 2026-10-13 CVE-2026-109733 HIGH 8.1 Firefox — JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firef… 2026-10-13 CVE-2026-109734 HIGH 8.1 Firefox — Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158, Firefox ESR 153… 2026-10-13 CVE-2026-109735 MEDIUM 5.4 Firefox — Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158 and Thunderbird 15… 2026-10-13 CVE-2026-109736 HIGH 8.1 Firefox — Frame poisoning in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thund… 2026-10-13 CVE-2026-109737 HIGH 8.1 Firefox — Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox E… 2026-10-13 CVE-2026-109738 MEDIUM 5.4 Firefox — Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 158, Firefox ES… 2026-10-13 CVE-2026-109739 HIGH 8.8 Firefox — Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158 and Thunderbi… 2026-10-13 CVE-2026-109740 CRITICAL 9.6 Firefox — Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fix… 2026-10-13 CVE-2026-109741 MEDIUM 5.4 Firefox — Use-after-free in the Storage: Bucket File System component. This vulnerability was fixed in Firefox 158, Fire… 2026-10-13 CVE-2026-109742 MEDIUM 4.3 Firefox — Information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 158, Firefox ESR 1… 2026-10-13 CVE-2026-109743 HIGH 8.8 Firefox — Privilege escalation in the Panning and Zooming component. This vulnerability was fixed in Firefox 158, Firefo… 2026-10-13 CVE-2026-109744 HIGH 8.1 Firefox — Other issue in the DOM: File component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunde… 2026-10-13 CVE-2026-109745 CRITICAL 9.6 Firefox — Sandbox escape due to uninitialized memory in the DOM: Web Serial component. This vulnerability was fixed in F… 2026-10-13 CVE-2026-109746 HIGH 7.3 Firefox — Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158 and Thunderbird … 2026-10-13 CVE-2026-109747 HIGH 7.3 Firefox — Other issue in the Address Bar component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. 2026-10-13 CVE-2026-109748 MEDIUM 5.4 Firefox — Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thund… 2026-10-13 CVE-2026-109749 MEDIUM 5.4 Firefox — Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thund… 2026-10-13 CVE-2026-109750 CRITICAL 9.6 Firefox — Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and… 2026-10-13 CVE-2026-109751 MEDIUM 4.3 Firefox — Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 1… 2026-10-13 CVE-2026-109752 MEDIUM 5.4 Firefox — Use-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, … 2026-10-13 CVE-2026-109753 HIGH 8.1 Firefox — Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ES… 2026-10-13 CVE-2026-109754 HIGH 8.1 Firefox — Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 158, Firef… 2026-10-13 CVE-2026-109755 CRITICAL 9.6 Firefox — Sandbox escape in the DOM: Content Processes component. This vulnerability was fixed in Firefox 158 and Thunde… 2026-10-13 CVE-2026-109756 HIGH 8.8 Firefox — Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 158, Firefox ES… 2026-10-13 CVE-2026-109757 HIGH 8.3 Firefox — Sandbox escape due to race condition in the Networking component. This vulnerability was fixed in Firefox 158,… 2026-10-13 CVE-2026-109759 HIGH 8.1 Firefox — Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153… 2026-10-13 CVE-2026-109760 HIGH 8.1 Firefox — Mitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 158, Firefox ESR … 2026-10-13 CVE-2026-109761 MEDIUM 5.4 Firefox — Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thund… 2026-10-13 CVE-2026-109762 HIGH 8.8 Firefox — Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 1… 2026-10-13 CVE-2026-109763 N/A Firefox — Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 158, Firefox ESR 153… 2026-10-13 CVE-2026-109764 MEDIUM 5.4 Firefox — Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox E… 2026-10-13 CVE-2026-109765 MEDIUM 4.2 Firefox — Race condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, F… 2026-10-13 CVE-2026-109766 HIGH 8.1 Firefox — Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox E… 2026-10-13 CVE-2026-109767 MEDIUM 4.3 Firefox — Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 1… 2026-10-13 CVE-2026-109768 MEDIUM 6.5 Firefox — Denial-of-service in the Site Reports component. This vulnerability was fixed in Firefox 158 and Thunderbird 1… 2026-10-13 CVE-2026-109769 MEDIUM 4.3 Firefox — Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 158 and Thu… 2026-10-13 CVE-2026-109770 MEDIUM 6.1 Firefox — Spoofing issue in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.… 2026-10-13 CVE-2026-109771 MEDIUM 4.3 Firefox — Information disclosure in the WebRTC: Networking component. This vulnerability was fixed in Firefox 158 and Th… 2026-10-13 CVE-2026-109772 N/A Firefox — Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox 158 and Thunderbi… 2026-10-13 CVE-2026-109773 MEDIUM 6.5 Firefox — Denial-of-service in the Sync component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. 2026-10-13 CVE-2026-109774 N/A Firefox — Invalid pointer, undefined behavior in the DOM: Notifications component. This vulnerability was fixed in Firef… 2026-10-13 CVE-2026-109775 MEDIUM 6.5 Firefox — Denial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thu… 2026-10-13 CVE-2026-109776 MEDIUM 4.2 Firefox — Race condition in the XPCOM component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunder… 2026-10-13 CVE-2026-109777 MEDIUM 4.3 Firefox — Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firef… 2026-10-13 CVE-2026-109778 HIGH 8.8 Firefox — Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158, Firefox ESR … 2026-10-13 CVE-2026-109779 MEDIUM 4.2 Firefox — Race condition in the Networking: DNS component. This vulnerability was fixed in Firefox 158 and Thunderbird 1… 2026-10-13 CVE-2026-109780 N/A Firefox — Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158 and Thunderbi… 2026-10-13 CVE-2026-109781 MEDIUM 6.5 Firefox — Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158, Firefox ESR … 2026-10-13 CVE-2026-109782 N/A Firefox — Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunde… 2026-10-13 CVE-2026-109783 N/A Firefox — Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunde… 2026-10-13 CVE-2026-110247 HIGH 8.4 Thunderbird — Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow checks. On a… 2026-10-13 CVE-2026-110249 HIGH 8.6 Thunderbird — A malicious, compromised, or MITM-controlled Exchange server can return a single well-formed SOAP response con… 2026-10-13 CVE-2026-106016 CRITICAL 9.8 Firefox — Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1 and Thunderb… 2026-10-06 CVE-2026-106550 HIGH 7.5 Node Convict — Mozilla's Node-convict (version 6.2.2 and later) is vulnerable to a Denial of Service vulnerability caused by … 2026-10-06 CVE-2026-103500 MEDIUM 6.3 Thunderbird — An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equa… 2026-09-30 CVE-2026-100756 HIGH 8.1 Firefox — Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox … 2026-09-29 CVE-2026-100757 HIGH 8.8 Firefox — Use-after-free in the Widget component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Th… 2026-09-29 CVE-2026-100758 CRITICAL 9.6 Firefox — Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbir… 2026-09-29 CVE-2026-100759 HIGH 8.1 Firefox — Uninitialized memory in the Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.… 2026-09-29 CVE-2026-100760 CRITICAL 9.6 Firefox — Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox ESR 153.… 2026-09-29 CVE-2026-100761 HIGH 8.8 Thunderbird — Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in … 2026-09-29 CVE-2026-100762 CRITICAL 9.6 Firefox — Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in … 2026-09-29 CVE-2026-100763 CRITICAL 9.1 Thunderbird — Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 1… 2026-09-29 CVE-2026-100764 HIGH 8.8 Thunderbird — Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerabilit… 2026-09-29 CVE-2026-100765 HIGH 8.8 Firefox — Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Th… 2026-09-29 CVE-2026-100766 MEDIUM 4.3 Firefox — Information disclosure in the Networking: JAR component. This vulnerability was fixed in Firefox ESR 153.4, Th… 2026-09-29 CVE-2026-100767 HIGH 8.8 Firefox — Use-after-free in the Networking: Cache component. This vulnerability was fixed in Firefox ESR 153.4, Thunderb… 2026-09-29 CVE-2026-100768 HIGH 8.8 Thunderbird — Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox … 2026-09-29 CVE-2026-100769 HIGH 8.8 Thunderbird — Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Th… 2026-09-29 CVE-2026-100770 CRITICAL 9.6 Firefox — Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in … 2026-09-29 CVE-2026-100771 HIGH 8.1 Firefox — Undefined behavior in the DOM: Streams component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbi… 2026-09-29 CVE-2026-100772 HIGH 8.8 Thunderbird — Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbi… 2026-09-29 CVE-2026-100773 HIGH 8.8 Firefox — Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox ESR 153.4, Thunder… 2026-09-29 CVE-2026-100774 HIGH 8.8 Firefox — Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbi… 2026-09-29 CVE-2026-100775 CRITICAL 9.6 Firefox — Sandbox escape in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, … 2026-09-29 CVE-2026-100776 HIGH 8.8 Thunderbird — Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Th… 2026-09-29 CVE-2026-100777 HIGH 8.8 Firefox — Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunder… 2026-09-29 CVE-2026-100778 CRITICAL 9.6 Firefox — Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefo… 2026-09-29 CVE-2026-100779 HIGH 8.8 Firefox — Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thun… 2026-09-29 CVE-2026-100780 HIGH 8.8 Firefox — Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbi… 2026-09-29 CVE-2026-100781 CRITICAL 9.6 Firefox — Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability w… 2026-09-29 CVE-2026-100782 HIGH 8.8 Firefox — Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fi… 2026-09-29 CVE-2026-100783 MEDIUM 4.3 Firefox — Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Thunderb… 2026-09-29 CVE-2026-100784 HIGH 8.8 Firefox — Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox ESR 153.4, Thu… 2026-09-29 CVE-2026-100785 HIGH 8.8 Firefox — Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbi… 2026-09-29 CVE-2026-100786 CRITICAL 9.6 Firefox — Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 15… 2026-09-29 CVE-2026-100787 CRITICAL 9.6 Firefox — Sandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thund… 2026-09-29 CVE-2026-100788 CRITICAL 9.8 Thunderbird — Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, T… 2026-09-29 CVE-2026-100789 HIGH 8.8 Firefox — Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunder… 2026-09-29 CVE-2026-100790 HIGH 8.8 Firefox — Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thun… 2026-09-29 CVE-2026-100791 HIGH 8.8 Firefox — Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbi… 2026-09-29 CVE-2026-100792 HIGH 7.1 Thunderbird — JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4… 2026-09-29 CVE-2026-100793 MEDIUM 6.5 Thunderbird — JIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Thunderbird 157 and Fir… 2026-09-29 CVE-2026-100794 CRITICAL 9.6 Thunderbird — Sandbox escape due to incorrect boundary conditions in the Internationalization component. This vulnerability … 2026-09-29 CVE-2026-100795 MEDIUM 6.5 Thunderbird — Denial-of-service in the Networking component. This vulnerability was fixed in Thunderbird 157 and Firefox 157… 2026-09-29 CVE-2026-100796 HIGH 8.8 Thunderbird — Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Thunderbird 157 and F… 2026-09-29 CVE-2026-100797 HIGH 8.8 Firefox — Privilege escalation due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed … 2026-09-29 CVE-2026-100798 HIGH 8.1 Firefox — Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Th… 2026-09-29 CVE-2026-100799 MEDIUM 4.3 Thunderbird — Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Fi… 2026-09-29 CVE-2026-100800 CRITICAL 9.6 Firefox — Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in … 2026-09-29 CVE-2026-100801 HIGH 8.8 Thunderbird — Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Thunder… 2026-09-29 CVE-2026-100802 MEDIUM 4.3 Thunderbird — Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Fi… 2026-09-29 CVE-2026-100803 HIGH 8.1 Firefox — Same-origin policy bypass in the WebExtensions component. This vulnerability was fixed in Firefox ESR 153.4, T… 2026-09-29 CVE-2026-100804 CRITICAL 9.6 Thunderbird — Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Th… 2026-09-29 CVE-2026-100805 HIGH 7.5 Thunderbird — Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Thunderbird 157 a… 2026-09-29 CVE-2026-100806 MEDIUM 4.3 Firefox — Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox ESR 153.4, Thu… 2026-09-29 CVE-2026-100807 HIGH 8.8 Thunderbird — Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4,… 2026-09-29 CVE-2026-100808 HIGH 8.8 Firefox — Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Th… 2026-09-29 CVE-2026-100809 HIGH 8.1 Firefox — Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox ESR 153.4, Thunde… 2026-09-29 CVE-2026-100810 CRITICAL 9.8 Thunderbird — Other issue in the DevTools component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. 2026-09-29 CVE-2026-100811 CRITICAL 9.6 Thunderbird — Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefo… 2026-09-29 CVE-2026-100812 MEDIUM 6.5 Firefox — Denial-of-service in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 15… 2026-09-29 CVE-2026-100813 HIGH 8.8 Thunderbird — Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Thunderbird 157 and F… 2026-09-29 CVE-2026-100814 HIGH 8.8 Firefox — Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox… 2026-09-29 CVE-2026-100815 HIGH 8.8 Firefox — Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox ESR 153.4… 2026-09-29 CVE-2026-100816 HIGH 8.1 Firefox — Site isolation issue in the DOM: Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thun… 2026-09-29 CVE-2026-100817 MEDIUM 5.4 Thunderbird — Other issue in the JavaScript: WebAssembly component. This vulnerability was fixed in Thunderbird 157 and Fire… 2026-09-29 CVE-2026-100818 CRITICAL 9.6 Thunderbird — Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR… 2026-09-29 CVE-2026-100819 CRITICAL 9.6 Firefox — Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Fi… 2026-09-29 CVE-2026-100820 HIGH 8.8 Thunderbird — Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderb… 2026-09-29 CVE-2026-100821 MEDIUM 4.7 Firefox — Site isolation issue in the Panning and Zooming component. This vulnerability was fixed in Firefox ESR 153.4, … 2026-09-29 CVE-2026-100822 MEDIUM 5.4 Firefox — Spoofing issue in the Networking: HTTP component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbi… 2026-09-29 CVE-2026-100823 MEDIUM 5.4 Firefox — Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 157. 2026-09-29 CVE-2026-100824 HIGH 8.8 Firefox — Privilege escalation in the Places component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 1… 2026-09-29 CVE-2026-100825 HIGH 8.8 Firefox — Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thu… 2026-09-29 CVE-2026-100826 MEDIUM 6.5 Firefox — Denial-of-service in the Storage: StorageManager component. This vulnerability was fixed in Firefox ESR 153.4,… 2026-09-29 CVE-2026-100828 CRITICAL 9.6 Firefox — Mitigation bypass in the Bookmarks & History component. This vulnerability was fixed in Firefox ESR 153.4, Thu… 2026-09-29 CVE-2026-100829 CRITICAL 9.6 Firefox — Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbi… 2026-09-29 CVE-2026-100830 HIGH 8.1 Firefox — Mitigation bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunder… 2026-09-29 CVE-2026-100831 HIGH 8.8 Firefox — Use-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox ESR 1… 2026-09-29 CVE-2026-100832 HIGH 8.8 Firefox — Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunder… 2026-09-29 CVE-2026-96869 MEDIUM 4.3 Thunderbird — Information disclosure in the Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunder… 2026-09-29 CVE-2026-92005 MEDIUM 5.3 Firefox — Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox … 2026-09-15 CVE-2026-92006 HIGH 8.8 Firefox — Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnera… 2026-09-15 CVE-2026-92007 HIGH 8.8 Firefox — Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnera… 2026-09-15 CVE-2026-92008 HIGH 8.8 Firefox — Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnera… 2026-09-15 CVE-2026-92009 HIGH 8.8 Firefox — Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnera… 2026-09-15 CVE-2026-92010 HIGH 8.8 Firefox — Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnera… 2026-09-15 CVE-2026-92011 HIGH 8.8 Firefox — Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnera… 2026-09-15 CVE-2026-92012 HIGH 8.8 Firefox — Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnera… 2026-09-15 CVE-2026-92013 HIGH 8.8 Firefox — Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnera… 2026-09-15 CVE-2026-92014 HIGH 8.8 Firefox — Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fi… 2026-09-15 CVE-2026-92015 HIGH 8.8 Firefox — Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR … 2026-09-15 CVE-2026-92016 HIGH 8.8 Firefox — Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox E… 2026-09-15 CVE-2026-92017 HIGH 8.8 Firefox — Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156, Firef… 2026-09-15 CVE-2026-92018 CRITICAL 9.6 Firefox — Sandbox escape in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115… 2026-09-15 CVE-2026-92019 HIGH 8.1 Firefox — Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefo… 2026-09-15 CVE-2026-92020 HIGH 8.8 Firefox — Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerabi… 2026-09-15 CVE-2026-92021 HIGH 8.8 Firefox — Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and… 2026-09-15 CVE-2026-92022 HIGH 8.8 Firefox — Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 156, Firefox ESR 115… 2026-09-15 CVE-2026-92023 HIGH 8.8 Firefox — Use-after-free in the XML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox … 2026-09-15 CVE-2026-92024 HIGH 8.8 Firefox — Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox … 2026-09-15 CVE-2026-92025 HIGH 8.8 Firefox — Use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.… 2026-09-15 CVE-2026-92026 HIGH 8.8 Firefox — Use-after-free in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, F… 2026-09-15 CVE-2026-92027 HIGH 8.8 Firefox — Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41,… 2026-09-15 CVE-2026-92028 HIGH 8.8 Firefox — Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115… 2026-09-15 CVE-2026-92029 HIGH 8.8 Firefox — Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox … 2026-09-15 CVE-2026-92030 MEDIUM 5.4 Firefox — Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox … 2026-09-15 CVE-2026-92031 MEDIUM 6.5 Firefox — Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 156, Firef… 2026-09-15 CVE-2026-92032 CRITICAL 9.6 Firefox — Sandbox escape due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156, … 2026-09-15 CVE-2026-92033 HIGH 8.8 Firefox — Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 156. 2026-09-15 CVE-2026-92034 CRITICAL 9.1 Firefox — Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 15… 2026-09-15 CVE-2026-92035 CRITICAL 9.6 Firefox — Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in… 2026-09-15 CVE-2026-92036 CRITICAL 9.8 Firefox — Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 156 a… 2026-09-15 CVE-2026-92037 CRITICAL 9.8 Firefox — Incorrect boundary conditions in the DOM: Animation component. This vulnerability was fixed in Firefox 156 and… 2026-09-15 CVE-2026-92038 CRITICAL 9.1 Firefox — Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefo… 2026-09-15 CVE-2026-92039 MEDIUM 6.3 Firefox — Mitigation bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 156, Firefox ES… 2026-09-15 CVE-2026-92040 HIGH 8.8 Firefox — Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 156 and Thund… 2026-09-15 CVE-2026-92041 CRITICAL 9.1 Firefox — Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 1… 2026-09-15 CVE-2026-92042 HIGH 7.5 Firefox — Race condition in the DOM: Content Processes component. This vulnerability was fixed in Firefox 156, Firefox E… 2026-09-15 CVE-2026-92043 HIGH 8.8 Firefox — Privilege escalation due to incorrect boundary conditions in the Audio/Video component. This vulnerability was… 2026-09-15 CVE-2026-92044 HIGH 7.5 Firefox — Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 156, Firefox… 2026-09-15 CVE-2026-92045 CRITICAL 9.6 Firefox — Sandbox escape due to incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in F… 2026-09-15 CVE-2026-92046 HIGH 8.8 Firefox — Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thun… 2026-09-15 CVE-2026-92047 HIGH 8.8 Firefox — Privilege escalation in the Crash Reporting component. This vulnerability was fixed in Firefox 156, Firefox ES… 2026-09-15 CVE-2026-92048 CRITICAL 9 Firefox — Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fix… 2026-09-15 CVE-2026-92049 HIGH 8.8 Firefox — Use-after-free in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3,… 2026-09-15 CVE-2026-92050 CRITICAL 9.1 Firefox — Sandbox escape due to race condition in the XPConnect component. This vulnerability was fixed in Firefox 156 a… 2026-09-15 CVE-2026-92051 CRITICAL 9.1 Firefox — Spoofing issue due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156 a… 2026-09-15 CVE-2026-92052 HIGH 8.8 Firefox — Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. This vulnerability wa… 2026-09-15 CVE-2026-92053 HIGH 8.8 Firefox — Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Fire… 2026-09-15 CVE-2026-92054 HIGH 8.8 Firefox — Privilege escalation in the Memory component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, … 2026-09-15 CVE-2026-92055 HIGH 8.8 Firefox — Privilege escalation in the DevTools component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3… 2026-09-15 CVE-2026-92056 HIGH 8.8 Firefox — Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3… 2026-09-15 CVE-2026-92057 CRITICAL 9.1 Firefox — Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox E… 2026-09-15 CVE-2026-92058 HIGH 8.8 Firefox — Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thun… 2026-09-15 CVE-2026-92059 CRITICAL 9.3 Firefox — Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 156, Firef… 2026-09-15 CVE-2026-92060 HIGH 8.8 Firefox — Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 156, Firefox ESR… 2026-09-15 CVE-2026-92061 CRITICAL 9.8 Firefox — Incorrect boundary conditions in the Security: Process Sandboxing component. This vulnerability was fixed in F… 2026-09-15 CVE-2026-92062 HIGH 8.8 Firefox — Privilege escalation in the Session Restore component. This vulnerability was fixed in Firefox 156, Firefox ES… 2026-09-15 CVE-2026-92063 MEDIUM 6.5 Firefox — Denial-of-service in the Audio/Video component. This vulnerability was fixed in Firefox 156 and Thunderbird 15… 2026-09-15 CVE-2026-92064 HIGH 8.8 Firefox — Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fix… 2026-09-15 CVE-2026-92065 HIGH 8.8 Firefox — Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fix… 2026-09-15 CVE-2026-92066 CRITICAL 9.8 Firefox — Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 156 and Thunderbird 15… 2026-09-15 CVE-2026-92067 HIGH 8.8 Firefox — Use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, T… 2026-09-15 CVE-2026-92068 MEDIUM 5.4 Firefox — Site isolation issue in the Reader Mode component. This vulnerability was fixed in Firefox 156, Firefox ESR 15… 2026-09-15 CVE-2026-92069 MEDIUM 5.4 Firefox — Spoofing issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.… 2026-09-15 CVE-2026-92070 MEDIUM 4.3 Firefox — Information disclosure in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 1… 2026-09-15 CVE-2026-92071 CRITICAL 9.6 Firefox — Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fix… 2026-09-15 CVE-2026-92072 HIGH 8 Firefox — Incorrect boundary conditions in the Safe Browsing component. This vulnerability was fixed in Firefox 156, Fir… 2026-09-15 CVE-2026-92073 HIGH 8.8 Firefox — Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefo… 2026-09-15 CVE-2026-92074 HIGH 8.8 Firefox — Mitigation bypass in the Popup Blocker component. This vulnerability was fixed in Firefox 156, Firefox ESR 153… 2026-09-15 CVE-2026-92075 CRITICAL 9.1 Firefox — Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3,… 2026-09-15 CVE-2026-92076 HIGH 8.8 Firefox — Incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 156, Firefo… 2026-09-15 CVE-2026-92077 MEDIUM 6.5 Firefox — Denial-of-service in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunde… 2026-09-15 CVE-2026-92078 MEDIUM 6.5 Firefox — Denial-of-service in the Security component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, T… 2026-09-15 CVE-2026-92079 CRITICAL 9.1 Firefox — Mitigation bypass in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153… 2026-09-15 CVE-2026-92238 CRITICAL 9.8 Thunderbird — A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory s… 2026-09-15 CVE-2026-92239 HIGH 8.1 Thunderbird — A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in … 2026-09-15 CVE-2026-92240 CRITICAL 9.1 Thunderbird — A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sendin… 2026-09-15 CVE-2026-86853 MEDIUM 4.3 Firefox For Ios — A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external applicat… 2026-09-08