Skip to contentMozilla Firefox vulnerabilities
- mozilla firefox, thunderbird +1 moreSandbox escape due to invalid pointer in the Disability Access APIs componentCVE-2026-1636710.0 Critical
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Graphics: ImageLib componentCVE-2026-16354Fix available7.5 High
- mozilla firefox, thunderbird +1 moreInvalid pointer in the DOM: Bindings (WebIDL) componentCVE-2026-16353Fix available9.8 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Navigation componentCVE-2026-163668.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Workers componentCVE-2026-16365Fix available8.8 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Audio/Video: Playback componentCVE-2026-163649.1 Critical
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript: WebAssembly componentCVE-2026-16363Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Disability Access APIs componentCVE-2026-16352Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the DOM: Navigation componentCVE-2026-16351Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the WebRTC: Audio/Video componentCVE-2026-16362Fix available8.8 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Audio/Video: cubeb componentCVE-2026-16350Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the DOM: Navigation componentCVE-2026-16349Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreSite isolation issue in the DOM: Navigation componentCVE-2026-15719Fix available5.4 Medium
- mozilla firefox, thunderbird +1 moreInvalid pointer in the JavaScript: WebAssembly componentCVE-2026-15718Public exploitFix available4.3 Medium
- mozilla firefox for ios, firefox mobile +1 moreMalicious webpage titles could allow overwriting of bundled PDF resources when saving webpages as PDFs in Firefox for iOSCVE-2026-149065.3 Medium
- mozilla firefox, firefox for ios +1 moreInterrupted navigation could allow address bar origin spoofing in Firefox for iOSCVE-2026-133566.3 Medium
- mozilla firefoxMemory safety bugs fixed in Firefox 152.0.4CVE-2026-14241Fix available9.8 Critical
- mozilla firefox for ios, firefox mobile +1 moreCookie injection was possible when opening a PDF linkCVE-2026-539004.3 Medium
- mozilla firefox for ios, firefox mobile +1 moreCross-origin cookies could be leaked when opening a PDF linkCVE-2026-538996.5 Medium
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Internationalization componentCVE-2026-12330Fix available5.4 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bug fixed in Thunderbird ESR 140.12CVE-2026-12329Fix available5.3 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152CVE-2026-12328Fix available8.1 High
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152CVE-2026-12327Fix available8.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Firefox 152 and Thunderbird 152CVE-2026-123268.1 High
- mozilla firefox, thunderbird +1 moreDenial-of-service in the Graphics: ImageLib componentCVE-2026-12325Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics: CanvasWebGL componentCVE-2026-12324Fix available7.3 High
- mozilla firefox, thunderbird +1 moreSpoofing issue in the DOM: Core & HTML componentCVE-2026-123235.4 Medium
- mozilla firefox, thunderbird +1 moreClickjacking issue in the Widget: Gtk componentCVE-2026-123225.4 Medium
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript: WebAssembly componentCVE-2026-123215.4 Medium
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Password Manager componentCVE-2026-123204.3 Medium
- mozilla firefox, thunderbird +1 moreDenial-of-service in the Audio/Video: Playback componentCVE-2026-123196.5 Medium
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Libraries component in NSSCVE-2026-12318Fix available7.3 High
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Thunderbird 152CVE-2026-123177.5 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security componentCVE-2026-123169.1 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security componentCVE-2026-12315Fix available9.1 Critical
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Thunderbird 152CVE-2026-12314Fix available7.5 High
- mozilla firefox, thunderbird +1 moreInformation disclosure, sandbox escape in the Security: Process Sandboxing componentCVE-2026-12313Fix available4.7 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Thunderbird 152CVE-2026-12312Fix available7.5 High
- mozilla firefox, thunderbird +1 moreInformation disclosure, sandbox escape in the Security: Process Sandboxing componentCVE-2026-12311Fix available4.7 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Thunderbird 152CVE-2026-12310Fix available7.5 High
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Thunderbird 152CVE-2026-12309Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Thunderbird 152CVE-2026-12308Fix available5.3 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Thunderbird 152CVE-2026-12307Fix available5.3 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Thunderbird 152CVE-2026-12306Fix available5.3 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Thunderbird 152CVE-2026-12305Fix available7.5 High
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the Networking: Cookies componentCVE-2026-12304Fix available9.1 Critical
- mozilla firefox, thunderbird +1 moreInformation disclosure due to incorrect boundary conditions in the Graphics: WebGPU componentCVE-2026-123034.3 Medium
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security componentCVE-2026-12302Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Thunderbird 152CVE-2026-123015.3 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Thunderbird 152CVE-2026-123005.3 Medium
- Show moreLoading…