| CVE-2026-109710 |
Use-after-free in the Graphics: Text component
|
5.4
Medium
|
Oct 13, 2026 |
| CVE-2026-106016 |
Mitigation bypass in the File Handling component
|
9.8
Critical
|
Oct 6, 2026 |
| CVE-2026-100831 |
Use-after-free in the DOM: UI Events & Focus Handling component
|
8.8
High
|
Sep 29, 2026 |
| CVE-2026-100832 |
Use-after-free in the Graphics: Canvas2D component
|
8.8
High
|
Sep 29, 2026 |
| CVE-2026-100829 |
Mitigation bypass in the DOM: Security component
|
9.6
Critical
|
Sep 29, 2026 |
| CVE-2026-100830 |
Mitigation bypass in the DOM: Navigation component
|
8.1
High
|
Sep 29, 2026 |
| CVE-2026-100826 |
Denial-of-service in the Storage: StorageManager component
|
6.5
Medium
|
Sep 29, 2026 |
| CVE-2026-100828 |
Mitigation bypass in the Bookmarks & History component
|
9.6
Critical
|
Sep 29, 2026 |
| CVE-2026-100824 |
Privilege escalation in the Places component
|
8.8
High
|
Sep 29, 2026 |
| CVE-2026-100825 |
Use-after-free in the JavaScript Engine: JIT component
|
8.8
High
|
Sep 29, 2026 |
| CVE-2026-100823 |
Spoofing issue in the Downloads component in Firefox for Android
|
5.4
Medium
|
Sep 29, 2026 |
| CVE-2026-100821 |
Site isolation issue in the Panning and Zooming component
|
4.7
Medium
|
Sep 29, 2026 |
| CVE-2026-100822 |
Spoofing issue in the Networking: HTTP component
|
5.4
Medium
|
Sep 29, 2026 |
| CVE-2026-100819 |
Sandbox escape due to incorrect boundary conditions in the XPCOM component
|
9.6
Critical
|
Sep 29, 2026 |
| CVE-2026-100820 |
Privilege escalation in the Address Bar component
|
8.8
High
|
Sep 29, 2026 |
| CVE-2026-100817 |
Other issue in the JavaScript: WebAssembly component
|
5.4
Medium
|
Sep 29, 2026 |
| CVE-2026-100818 |
Sandbox escape due to use-after-free in the Widget: Gtk component
|
9.6
Critical
|
Sep 29, 2026 |
| CVE-2026-100816 |
Site isolation issue in the DOM: Networking component
|
8.1
High
|
Sep 29, 2026 |
| CVE-2026-100814 |
Incorrect boundary conditions in the JavaScript Engine: JIT component
|
8.8
High
|
Sep 29, 2026 |
| CVE-2026-100815 |
Use-after-free in the CSS Parsing and Computation component
|
8.8
High
|
Sep 29, 2026 |
| CVE-2026-100812 |
Denial-of-service in the Graphics component
|
6.5
Medium
|
Sep 29, 2026 |
| CVE-2026-100813 |
Invalid pointer in the JavaScript Engine: JIT component
|
8.8
High
|
Sep 29, 2026 |
| CVE-2026-100810 |
Other issue in the DevTools component
|
9.8
Critical
|
Sep 29, 2026 |
| CVE-2026-100811 |
Sandbox escape due to use-after-free in the DOM: Core & HTML component
|
9.6
Critical
|
Sep 29, 2026 |
| CVE-2026-100809 |
Same-origin policy bypass in the DevTools component
|
8.1
High
|
Sep 29, 2026 |