Skip to contentMozilla Firefox vulnerabilities
- mozilla firefox, firefox mobile +1 moreSpoofing issue in the Downloads component in Firefox for AndroidCVE-2026-749755.4 Medium
- mozilla firefox, thunderbird +1 moreSite isolation issue in the Graphics componentCVE-2026-74970Public exploit5.4 Medium
- mozilla firefox, thunderbird +1 moreSite isolation issue in the Graphics: WebRender componentCVE-2026-749685.4 Medium
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Form Autofill componentCVE-2026-749667.5 High
- mozilla firefox, thunderbird +1 moreSide-channel in the Web Audio componentCVE-2026-749619.1 Critical
- mozilla firefox, thunderbird +1 moreInformation disclosure in the WebRTC componentCVE-2026-749587.5 High
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the DOM: Service Workers componentCVE-2026-749569.1 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Request Handling componentCVE-2026-749558.8 High
- mozilla firefox, thunderbird +1 moreInformation disclosure due to side-channel in the Storage: Cache API componentCVE-2026-749547.5 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Application Update componentCVE-2026-749528.8 High
- mozilla firefox, firefox mobile +1 moreClickjacking issue in Firefox for AndroidCVE-2026-749516.5 Medium
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Downloads API componentCVE-2026-749508.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to invalid pointer in the Graphics componentCVE-2026-749478.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape in the Remote Settings Client componentCVE-2026-75874Fix available10.0 Critical
- mozilla firefox, thunderbird +1 moreInternally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154CVE-2026-74990Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the JavaScript: GC componentCVE-2026-749389.1 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: GC componentCVE-2026-749378.8 High
- mozilla firefox, thunderbird +1 moreInternally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154CVE-2026-74987Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Data Loss Prevention componentCVE-2026-74983Fix available8.1 High
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2026-74976Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the Graphics: ImageLib componentCVE-2026-74974Fix available5.4 Medium
- mozilla firefox, thunderbird +1 moreRace condition, use-after-free in the Graphics componentCVE-2026-74973Fix available4.2 Medium
- mozilla firefox, thunderbird +1 moreInformation disclosure in the DOM: Push Subscriptions componentCVE-2026-74972Fix available4.3 Medium
- mozilla firefox, thunderbird +1 moreInformation disclosure in the DOM: UI Events & Focus Handling componentCVE-2026-74971Fix available4.3 Medium
- mozilla firefox, thunderbird +1 moreRace condition, use-after-free in the Layout: Text and Fonts componentCVE-2026-74969Fix available8.8 High
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the Audio/Video: Playback componentCVE-2026-74967Fix available5.4 Medium
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Shell Integration componentCVE-2026-74965Fix available8.8 High
- mozilla firefox, thunderbird +1 moreInteger overflow in the Graphics componentCVE-2026-74964Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the Networking: Cookies componentCVE-2026-74963Fix available5.4 Medium
- mozilla firefox, thunderbird +1 moreSite isolation issue in the Networking: Cookies componentCVE-2026-74962Fix available8.1 High
- mozilla firefox, thunderbird +1 moreSite isolation issue in the WebExtensions componentCVE-2026-74960Fix available8.1 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Storage: Cache API componentCVE-2026-74959Fix available9.1 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Safe Browsing componentCVE-2026-74957Fix available8.1 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Networking: Cookies componentCVE-2026-74953Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics: Canvas2D componentCVE-2026-74949Fix available8.8 High
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Graphics componentCVE-2026-74948Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreInformation disclosure due to incorrect boundary conditions in the Graphics: CanvasWebGL componentCVE-2026-74946Fix available8.8 High
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Graphics: Text componentCVE-2026-74945Public exploitFix available6.5 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Core & HTML componentCVE-2026-74944Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics: ImageLib componentCVE-2026-74943Public exploitFix available9.8 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Remote Settings Client componentCVE-2026-74942Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Graphics: CanvasWebGL componentCVE-2026-74941Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics: Text componentCVE-2026-74940Fix available9.8 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Navigation componentCVE-2026-74939Public exploitFix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: WebAssembly componentCVE-2026-74936Public exploitFix available9.8 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Networking componentCVE-2026-74935Fix available8.8 High
- mozilla firefox, thunderbird +1 moreSite isolation issue in the Graphics: CanvasWebGL componentCVE-2026-74934Fix available7.5 High
- mozilla firefoxInformation disclosure in Firefox for Android and Firefox Focus for AndroidCVE-2026-188096.5 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Thunderbird ESR 140.13CVE-2026-16361Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Thunderbird ESR 140.13 and Thunderbird 153CVE-2026-16360Fix available9.8 Critical
- Show moreLoading…