Firefox

firefox

Vendor: Mozilla • 3,473 CVEs

CVEs (3,473)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-100792 1Mozilla 2Firefox Thunderbird Oct 19, 2026 Sep 29, 2026 N/A· v4 7.1 HIGH· v3 N/A· v2 JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.
CVE-2026-100791 1Mozilla 2Firefox Thunderbird Oct 19, 2026 Sep 29, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100790 1Mozilla 2Firefox Thunderbird Oct 19, 2026 Sep 29, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100789 1Mozilla 2Firefox Thunderbird Oct 19, 2026 Sep 29, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100788 1Mozilla 2Firefox Thunderbird Oct 19, 2026 Sep 29, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.
CVE-2026-100787 1Mozilla 2Firefox Thunderbird Oct 5, 2026 Sep 29, 2026 N/A· v4 9.6 CRITICAL· v3 N/A· v2 Sandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100786 1Mozilla 2Firefox Thunderbird Oct 5, 2026 Sep 29, 2026 N/A· v4 9.6 CRITICAL· v3 N/A· v2 Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR...Show more Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.Show less
CVE-2026-100785 1Mozilla 2Firefox Thunderbird Oct 5, 2026 Sep 29, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100784 1Mozilla 2Firefox Thunderbird Oct 5, 2026 Sep 29, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100783 1Mozilla 2Firefox Thunderbird Oct 5, 2026 Sep 29, 2026 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100782 1Mozilla 2Firefox Thunderbird Oct 5, 2026 Sep 29, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115...Show more Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.Show less
CVE-2026-100781 1Mozilla 2Firefox Thunderbird Oct 5, 2026 Sep 29, 2026 N/A· v4 9.6 CRITICAL· v3 N/A· v2 Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ES...Show more Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.Show less
CVE-2026-100780 1Mozilla 2Firefox Thunderbird Oct 5, 2026 Sep 29, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100779 1Mozilla 2Firefox Thunderbird Oct 5, 2026 Sep 29, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100778 1Mozilla 2Firefox Thunderbird Oct 5, 2026 Sep 29, 2026 N/A· v4 9.6 CRITICAL· v3 N/A· v2 Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Fire...Show more Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.Show less
CVE-2026-100777 1Mozilla 2Firefox Thunderbird Oct 5, 2026 Sep 29, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100776 1Mozilla 2Firefox Thunderbird Oct 6, 2026 Sep 29, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.
CVE-2026-100775 1Mozilla 2Firefox Thunderbird Oct 6, 2026 Sep 29, 2026 N/A· v4 9.6 CRITICAL· v3 N/A· v2 Sandbox escape in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100774 1Mozilla 2Firefox Thunderbird Oct 6, 2026 Sep 29, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100773 1Mozilla 2Firefox Thunderbird Oct 6, 2026 Sep 29, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

Previous 1 234 5...174 Next