← Back

Firefox

firefox

Vendor: Mozilla • 3,473 CVEs

CVEs (3,473)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-74945
1Mozilla
2Firefox
Thunderbird
Aug 24, 2026
Aug 18, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Information disclosure in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74944
1Mozilla
2Firefox
Thunderbird
Aug 21, 2026
Aug 18, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74943
1Mozilla
2Firefox
Thunderbird
Aug 21, 2026
Aug 18, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74942
1Mozilla
2Firefox
Thunderbird
Aug 21, 2026
Aug 18, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 1...Show more
Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.Show less
CVE-2026-74941
1Mozilla
2Firefox
Thunderbird
Aug 21, 2026
Aug 18, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74940
1Mozilla
2Firefox
Thunderbird
Aug 21, 2026
Aug 18, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74939
1Mozilla
2Firefox
Thunderbird
Aug 21, 2026
Aug 18, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74938
1Mozilla
2Firefox
Thunderbird
Aug 19, 2026
Aug 18, 2026
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Mitigation bypass in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74937
1Mozilla
2Firefox
Thunderbird
Aug 19, 2026
Aug 18, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74936
1Mozilla
2Firefox
Thunderbird
Aug 21, 2026
Aug 18, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74935
1Mozilla
2Firefox
Thunderbird
Aug 21, 2026
Aug 18, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Privilege escalation in the DOM: Networking component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74934
1Mozilla
2Firefox
Thunderbird
Aug 24, 2026
Aug 18, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Site isolation issue in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 15...Show more
Site isolation issue in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.Show less
CVE-2026-16412
1Mozilla
1Firefox
Oct 21, 2026
Jul 21, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbi...Show more
Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.Show less
CVE-2026-16411
1Mozilla
1Firefox
Oct 21, 2026
Jul 21, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Memory safety bugs present in Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerabil...Show more
Memory safety bugs present in Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153 and Thunderbird 153.Show less
CVE-2026-16410
1Mozilla
2Firefox
Thunderbird
Oct 24, 2026
Jul 21, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16409
1Mozilla
2Firefox
Thunderbird
Oct 24, 2026
Jul 21, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16408
1Mozilla
1Firefox
Oct 24, 2026
Jul 21, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16407
1Mozilla
2Firefox
Thunderbird
Oct 24, 2026
Jul 21, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16406
1Mozilla
1Firefox
Oct 24, 2026
Jul 21, 2026
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16405
1Mozilla
1Firefox
Oct 24, 2026
Jul 21, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Information disclosure in the Networking: WebSockets component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.