Firefox

firefox

Vendor: Mozilla • 3,473 CVEs

CVEs (3,473)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-92015 1Mozilla 2Firefox Thunderbird Oct 6, 2026 Sep 15, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92014 1Mozilla 2Firefox Thunderbird Oct 6, 2026 Sep 15, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16.
CVE-2026-92013 1Mozilla 2Firefox Thunderbird Oct 6, 2026 Sep 15, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, T...Show more Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.Show less
CVE-2026-92012 1Mozilla 2Firefox Thunderbird Oct 6, 2026 Sep 15, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, T...Show more Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.Show less
CVE-2026-92011 1Mozilla 2Firefox Thunderbird Oct 6, 2026 Sep 15, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, T...Show more Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.Show less
CVE-2026-92010 1Mozilla 2Firefox Thunderbird Oct 6, 2026 Sep 15, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, T...Show more Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.Show less
CVE-2026-92009 1Mozilla 2Firefox Thunderbird Oct 6, 2026 Sep 15, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, T...Show more Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.Show less
CVE-2026-92008 1Mozilla 2Firefox Thunderbird Oct 6, 2026 Sep 15, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, T...Show more Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.Show less
CVE-2026-92007 1Mozilla 2Firefox Thunderbird Oct 6, 2026 Sep 15, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, T...Show more Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.Show less
CVE-2026-92006 1Mozilla 2Firefox Thunderbird Oct 6, 2026 Sep 15, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, T...Show more Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.Show less
CVE-2026-92005 1Mozilla 2Firefox Thunderbird Oct 6, 2026 Sep 15, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-84145 1Mozilla 2Firefox Thunderbird Sep 3, 2026 Sep 1, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with eno...Show more Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.Show less
CVE-2026-84144 1Mozilla 2Firefox Thunderbird Sep 3, 2026 Sep 1, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Internally found bugs present in Thunderbird 154 and Thunderbird ESR 153.1. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these...Show more Internally found bugs present in Thunderbird 154 and Thunderbird ESR 153.1. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.Show less
CVE-2026-84143 1Mozilla 2Firefox Thunderbird Sep 3, 2026 Sep 1, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with eno...Show more Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.Show less
CVE-2026-84142 1Mozilla 2Firefox Thunderbird Sep 3, 2026 Sep 1, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Internally found bugs present in Thunderbird 154. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited...Show more Internally found bugs present in Thunderbird 154. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155 and Thunderbird 155.Show less
CVE-2026-84141 1Mozilla 2Firefox Thunderbird Sep 3, 2026 Sep 1, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84140 1Mozilla 2Firefox Thunderbird Sep 3, 2026 Sep 1, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84139 1Mozilla 2Firefox Thunderbird Sep 3, 2026 Sep 1, 2026 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Clickjacking issue in the DOM: Events component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84138 1Mozilla 2Firefox Thunderbird Sep 3, 2026 Sep 1, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 155 and Thunderbird 155.
CVE-2026-84137 1Mozilla 2Firefox Thunderbird Sep 3, 2026 Sep 1, 2026 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

Previous 1...789...174 Next