Skip to contentMozilla Firefox vulnerabilities
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentCVE-2026-92012Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentCVE-2026-92011Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentCVE-2026-92010Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentCVE-2026-92009Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentCVE-2026-92008Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentCVE-2026-92007Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentCVE-2026-92006Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Audio/Video: Web Codecs componentCVE-2026-92005Fix available5.3 Medium
- mozilla firefox for ios, firefox mobile +1 moreRepeated external URL scheme launches could potentially cause a denial of service in Firefox for iOSCVE-2026-868534.3 Medium
- mozilla firefox, thunderbird +1 moreInternally found bugs fixed in Thunderbird 155 and Thunderbird ESR 153.2CVE-2026-841447.5 High
- mozilla firefox, thunderbird +1 moreInternally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15CVE-2026-84143Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreInternally found bugs fixed in Thunderbird 155CVE-2026-841429.8 Critical
- mozilla firefox, thunderbird +1 moreInteger overflow in the Graphics: ImageLib componentCVE-2026-841419.8 Critical
- mozilla firefox, thunderbird +1 moreSite isolation issue in the DOM: Navigation componentCVE-2026-841409.8 Critical
- mozilla firefox, thunderbird +1 moreClickjacking issue in the DOM: Events componentCVE-2026-841396.1 Medium
- mozilla firefox, thunderbird +1 moreDenial-of-service in the PDF Viewer componentCVE-2026-841386.5 Medium
- mozilla firefox, thunderbird +1 moreSpoofing issue in the DOM: Core & HTML componentCVE-2026-841374.3 Medium
- mozilla firefox, thunderbird +1 moreOther issue in the DOM: Navigation componentCVE-2026-841366.1 Medium
- mozilla firefox, firefox mobile +1 moreOther issue in Firefox Focus for AndroidCVE-2026-841359.8 Critical
- mozilla firefox, thunderbird +1 moreOther issue in the Profile Backup componentCVE-2026-841349.8 Critical
- mozilla firefox, thunderbird +1 moreSite isolation issue in the DOM: Push Subscriptions componentCVE-2026-841339.8 Critical
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Networking: HTTP componentCVE-2026-841327.5 High
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Graphics: WebGPU componentCVE-2026-841307.5 High
- mozilla firefox, thunderbird +1 moreSite isolation issue in the DOM: Navigation componentCVE-2026-841299.8 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the WebDriver BiDi componentCVE-2026-841288.8 High
- mozilla firefox, firefox mobile +1 moreInformation disclosure in the WebExtensions component in Firefox for AndroidCVE-2026-841274.3 Medium
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Layout: Grid componentCVE-2026-841264.3 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Core & HTML componentCVE-2026-841255.4 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Core & HTML componentCVE-2026-84124Fix available5.4 Medium
- mozilla firefox, thunderbird +1 morePrivilege escalation due to use-after-free in the Graphics: WebGPU componentCVE-2026-841238.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Audio/Video componentCVE-2026-84122Fix available5.4 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: GC componentCVE-2026-84118Public exploit5.4 Medium
- mozilla firefox, firefox mobile +1 morePrivilege escalation in Firefox for AndroidCVE-2026-841178.8 High
- mozilla firefox, thunderbird +1 moreInternally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15CVE-2026-84145Fix available7.5 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to invalid pointer in the Graphics componentCVE-2026-84131Fix available8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the DOM: Security componentCVE-2026-84121Fix available9.6 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the Audio/Video componentCVE-2026-84120Fix available5.4 Medium
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the DOM: Navigation componentCVE-2026-84119Fix available9.6 Critical
- mozilla firefox for ios, firefox mobile +1 moreStalled popup navigation could allow address bar origin spoofing in Firefox for iOSCVE-2026-812675.4 Medium
- mozilla firefox, thunderbird +1 moreInternally found bugs fixed in Firefox 154CVE-2026-749899.8 Critical
- mozilla firefox, thunderbird +1 moreInternally found bugs fixed in Firefox ESR 153.1 and Firefox 154CVE-2026-749889.8 Critical
- mozilla firefox, thunderbird +1 moreSite isolation issue in the CSS Parsing and Computation componentCVE-2026-749869.1 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Enterprise Policies componentCVE-2026-749859.8 Critical
- mozilla firefox, thunderbird +1 moreRace condition in the JavaScript Engine componentCVE-2026-749846.8 Medium
- mozilla firefox, thunderbird +1 moreDenial-of-service in the Widget componentCVE-2026-749827.5 High
- mozilla firefox, thunderbird +1 moreSite isolation issue in the Audio/Video: Web Codecs componentCVE-2026-749818.1 High
- mozilla firefox, firefox mobile +1 moreClickjacking issue in the Downloads component in Firefox for AndroidCVE-2026-749806.5 Medium
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Add-ons Manager componentCVE-2026-749799.8 Critical
- mozilla firefox, thunderbird +1 moreClickjacking issue in the Widget componentCVE-2026-749788.1 High
- mozilla firefox, thunderbird +1 moreInteger overflow in the Graphics componentCVE-2026-749777.5 High
- Show moreLoading…