← Back

Firefox

firefox

Vendor: Mozilla • 3,473 CVEs

CVEs (3,473)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Mitigation bypass in the Popup Blocker component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
8.0 HIGH· v3
N/A· v2
Incorrect boundary conditions in the Safe Browsing component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
9.6 CRITICAL· v3
N/A· v2
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Information disclosure in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Spoofing issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Site isolation issue in the Reader Mode component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Denial-of-service in the Audio/Video component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Privilege escalation in the Session Restore component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Incorrect boundary conditions in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
9.3 CRITICAL· v3
N/A· v2
Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
1Mozilla
2Firefox
Thunderbird
Oct 5, 2026
Sep 15, 2026
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.