Skip to contentMozilla Firefox vulnerabilities
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreInformation disclosure due to uninitialized memory in the Graphics: Canvas2D componentCVE-2026-6749Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreUninitialized memory in the Audio/Video: Web Codecs componentCVE-2026-6748Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreUse-after-free in the WebRTC componentCVE-2026-6747Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreUse-after-free in the DOM: Core & HTML componentCVE-2026-6746Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Firefox 149.0.2 and Thunderbird 149.0.2CVE-2026-57359.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMemory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2CVE-2026-5734Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreIncorrect boundary conditions in the Graphics: WebGPU componentCVE-2026-57338.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +19 more +21 moreIncorrect boundary conditions, integer overflow in the Graphics: Text componentCVE-2026-5732Fix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMemory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2CVE-2026-5731Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Firefox 149 and Thunderbird 149CVE-2026-47299.8 Critical
- mozilla firefox, thunderbird +1 moreSpoofing issue in the Privacy: Anti-Tracking componentCVE-2026-47286.5 Medium
- mozilla firefox, thunderbird +1 moreDenial-of-service in the Libraries component in NSSCVE-2026-47277.5 High
- mozilla firefox, thunderbird +1 moreDenial-of-service in the XML componentCVE-2026-47267.5 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Graphics: Canvas2D componentCVE-2026-472510.0 Critical
- mozilla firefox, thunderbird +1 moreUndefined behavior in the Audio/Video componentCVE-2026-47249.1 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript Engine componentCVE-2026-47239.8 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the IPC componentCVE-2026-47228.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMemory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149CVE-2026-4721Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMemory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149CVE-2026-4720Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics: Text componentCVE-2026-4719Fix available7.5 High
- mozilla firefox, thunderbird +1 moreUndefined behavior in the WebRTC: Signaling componentCVE-2026-4718Fix available8.1 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Netmonitor componentCVE-2026-4717Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions, uninitialized memory in the JavaScript Engine componentCVE-2026-4716Fix available9.1 Critical
- mozilla firefox, thunderbird +1 moreUninitialized memory in the Graphics: Canvas2D componentCVE-2026-4715Fix available9.1 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Audio/Video componentCVE-2026-4714Fix available7.5 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics componentCVE-2026-4713Fix available7.5 High
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Widget: Cocoa componentCVE-2026-47127.5 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Widget: Cocoa componentCVE-2026-47119.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Audio/Video componentCVE-2026-4710Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Audio/Video: GMP componentCVE-2026-4709Fix available7.5 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics componentCVE-2026-4708Fix available7.5 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics: Canvas2D componentCVE-2026-4707Fix available7.5 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics: Canvas2D componentCVE-2026-4706Fix available7.5 High
- mozilla firefox, thunderbird +1 moreUndefined behavior in the WebRTC: Signaling componentCVE-2026-4705Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreDenial-of-service in the WebRTC: Signaling componentCVE-2026-4704Fix available7.5 High
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine componentCVE-2026-4702Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript Engine componentCVE-2026-4701Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMitigation bypass in the Networking: HTTP componentCVE-2026-4700Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Layout: Text and Fonts componentCVE-2026-4699Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2026-4698Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Audio/Video: Web Codecs componentCVE-2026-4697Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the Layout: Text and Fonts componentCVE-2026-4696Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Audio/Video: Web Codecs componentCVE-2026-4695Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions, integer overflow in the Graphics componentCVE-2026-4694Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Audio/Video: Playback componentCVE-2026-4693Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape in the Responsive Design Mode componentCVE-2026-4692Public exploitFix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the CSS Parsing and Computation componentCVE-2026-4691Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM componentCVE-2026-4690Fix available8.6 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM componentCVE-2026-4689Fix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to use-after-free in the Disability Access APIs componentCVE-2026-4688Fix available10.0 Critical
- Show moreLoading…