Skip to contentMozilla Firefox vulnerabilities
- mozilla firefox, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreUse-after-free in the JavaScript: WebAssembly componentCVE-2026-83907.3 High
- mozilla firefox, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2026-8389Public exploit8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreIncorrect boundary conditions in the JavaScript Engine: JIT componentCVE-2026-8388Public exploitFix available6.5 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreOther issue in the WebRTC componentCVE-2026-8094Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Thunderbird 150.0.2CVE-2026-80938.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bugs fixed in Thunderbird ESR 140.10.2 and Thunderbird 150.0.2CVE-2026-8092Fix available8.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +16 more +18 moreIncorrect boundary conditions in the Audio/Video: Playback componentCVE-2026-8091Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreUse-after-free in the DOM: Networking componentCVE-2026-8090Fix available7.3 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the WebRTC: Networking componentCVE-2026-7321Fix available9.6 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Thunderbird 150.0.1CVE-2026-73247.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +16 more +18 moreMemory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1CVE-2026-7323Fix available7.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +16 more +18 moreMemory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1CVE-2026-7322Fix available7.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +16 more +18 moreInformation disclosure due to incorrect boundary conditions in the Audio/Video componentCVE-2026-7320Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreMemory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150CVE-2026-6786Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreMemory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150CVE-2026-6785Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Firefox 150 and Thunderbird 150CVE-2026-67847.5 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions, integer overflow in the Audio/Video: Playback componentCVE-2026-67835.3 Medium
- mozilla firefox, thunderbird +1 moreInformation disclosure in the IP Protection componentCVE-2026-67827.5 High
- mozilla firefox, thunderbird +1 moreDenial-of-service in the Audio/Video: Playback componentCVE-2026-67817.5 High
- mozilla firefox, thunderbird +1 moreDenial-of-service in the Audio/Video: Playback componentCVE-2026-67807.5 High
- mozilla firefox, thunderbird +1 moreOther issue in the JavaScript Engine componentCVE-2026-67795.3 Medium
- mozilla firefox, thunderbird +1 moreInvalid pointer in the Audio/Video: Playback componentCVE-2026-67785.3 Medium
- mozilla firefox, thunderbird +1 moreOther issue in the Networking: DNS componentCVE-2026-67775.3 Medium
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the WebRTC: Networking componentCVE-2026-6776Fix available7.8 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the WebRTC componentCVE-2026-67755.3 Medium
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security componentCVE-2026-67745.4 Medium
- mozilla firefox, thunderbird +1 moreDenial-of-service due to integer overflow in the Graphics: WebGPU componentCVE-2026-67737.5 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Libraries component in NSSCVE-2026-6772Fix available7.5 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security componentCVE-2026-6771Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreOther issue in the Storage: IndexedDB componentCVE-2026-6770Public exploitFix available6.5 Medium
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Debugger componentCVE-2026-6769Fix available8.8 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Networking: Cookies componentCVE-2026-67689.8 Critical
- mozilla firefox, thunderbird +1 moreOther issue in the Libraries component in NSSCVE-2026-6767Fix available5.3 Medium
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Libraries component in NSSCVE-2026-6766Fix available7.5 High
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Form Autofill componentCVE-2026-6765Public exploitFix available5.3 Medium
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the DOM: Device Interfaces componentCVE-2026-6764Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreMitigation bypass in the File Handling componentCVE-2026-6763Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreSpoofing issue in the DOM: Core & HTML componentCVE-2026-6762Fix available6.3 Medium
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Networking componentCVE-2026-6761Fix available8.8 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Networking: Cookies componentCVE-2026-67609.8 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the Widget: Cocoa componentCVE-2026-67597.5 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: WebAssembly componentCVE-2026-67587.5 High
- mozilla firefox, thunderbird +1 moreInvalid pointer in the JavaScript: WebAssembly componentCVE-2026-6757Fix available6.3 Medium
- mozilla firefoxMitigation bypass in Firefox for AndroidCVE-2026-67567.5 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: postMessage componentCVE-2026-67556.5 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreUse-after-free in the JavaScript Engine componentCVE-2026-6754Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreIncorrect boundary conditions in the WebRTC componentCVE-2026-6753Fix available7.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreIncorrect boundary conditions in the WebRTC componentCVE-2026-6752Fix available7.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreUninitialized memory in the Audio/Video: Web Codecs componentCVE-2026-6751Fix available7.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 morePrivilege escalation in the Graphics: WebRender componentCVE-2026-6750Fix available8.8 High
- Show moreLoading…