Skip to contentMozilla Firefox vulnerabilities
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Networking componentCVE-2026-109708Fix available9.6 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Networking componentCVE-2026-109707Fix available9.6 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the Storage: IndexedDB componentCVE-2026-109706Fix available5.4 Medium
- mozilla firefox, thunderbird +1 moreSandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking componentCVE-2026-109705Fix available9.6 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Application Update componentCVE-2026-1097048.8 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the File Handling componentCVE-2026-1060169.8 Critical
- mozilla firefox, firefox mobile +1 moreSpoofing issue in the Downloads component in Firefox for AndroidCVE-2026-1008235.4 Medium
- mozilla firefox, thunderbird +1 moreOther issue in the JavaScript: WebAssembly componentCVE-2026-1008175.4 Medium
- mozilla firefox, thunderbird +1 moreInvalid pointer in the JavaScript Engine: JIT componentCVE-2026-1008138.8 High
- mozilla firefox, thunderbird +1 moreOther issue in the DevTools componentCVE-2026-1008109.8 Critical
- mozilla firefox, thunderbird +1 moreRace condition, use-after-free in the Audio/Video componentCVE-2026-1008057.5 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Preferences: Backend componentCVE-2026-1008049.6 Critical
- mozilla firefox, thunderbird +1 moreUninitialized memory in the Graphics: WebGPU componentCVE-2026-1008024.3 Medium
- mozilla firefox, thunderbird +1 moreUninitialized memory in the Graphics: WebGPU componentCVE-2026-1007994.3 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: WebAssembly componentCVE-2026-1007968.8 High
- mozilla firefox, thunderbird +1 moreDenial-of-service in the Networking componentCVE-2026-1007956.5 Medium
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine componentCVE-2026-1007936.5 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics: WebGPU componentCVE-2026-1007688.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Graphics: WebGPU componentCVE-2026-1007648.8 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics: WebGPU componentCVE-2026-1007639.1 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation due to use-after-free in the Graphics: WebGPU componentCVE-2026-1007618.8 High
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Networking componentCVE-2026-96869Fix available4.3 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics: Canvas2D componentCVE-2026-100832Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: UI Events & Focus Handling componentCVE-2026-100831Fix available8.8 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Navigation componentCVE-2026-100830Fix available8.1 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security componentCVE-2026-100829Fix available9.6 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Bookmarks & History componentCVE-2026-100828Fix available9.6 Critical
- mozilla firefox, thunderbird +1 moreDenial-of-service in the Storage: StorageManager componentCVE-2026-100826Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript Engine: JIT componentCVE-2026-100825Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Places componentCVE-2026-100824Fix available8.8 High
- mozilla firefox, thunderbird +1 moreSpoofing issue in the Networking: HTTP componentCVE-2026-100822Fix available5.4 Medium
- mozilla firefox, thunderbird +1 moreSite isolation issue in the Panning and Zooming componentCVE-2026-100821Fix available4.7 Medium
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Address Bar componentCVE-2026-100820Fix available8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the XPCOM componentCVE-2026-100819Fix available9.6 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Widget: Gtk componentCVE-2026-100818Fix available9.6 Critical
- mozilla firefox, thunderbird +1 moreSite isolation issue in the DOM: Networking componentCVE-2026-100816Fix available8.1 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the CSS Parsing and Computation componentCVE-2026-100815Fix available8.8 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the JavaScript Engine: JIT componentCVE-2026-100814Fix available8.8 High
- mozilla firefox, thunderbird +1 moreDenial-of-service in the Graphics componentCVE-2026-100812Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the DOM: Core & HTML componentCVE-2026-100811Fix available9.6 Critical
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the DevTools componentCVE-2026-100809Fix available8.1 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Service Workers componentCVE-2026-100808Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Service Workers componentCVE-2026-100807Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUninitialized memory in the Graphics: WebGPU componentCVE-2026-100806Fix available4.3 Medium
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the WebExtensions componentCVE-2026-100803Fix available8.1 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DLL Services componentCVE-2026-100801Fix available8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Disability Access APIs componentCVE-2026-100800Fix available9.6 Critical
- mozilla firefox, thunderbird +1 moreCryptography misuse in Storage: Quota Manager componentCVE-2026-100798Fix available8.1 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to use-after-free in the Graphics: WebRender componentCVE-2026-100797Fix available8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Internationalization componentCVE-2026-100794Fix available9.6 Critical
- Show moreLoading…