Skip to content

Known vulnerabilities in Mozilla Firefox

Is your version affected?

CVE Summary Score Published
CVE-2026-100808 Mitigation bypass in the DOM: Service Workers component 8.8 High Sep 29, 2026
CVE-2026-100807 Privilege escalation in the DOM: Service Workers component 8.8 High Sep 29, 2026
CVE-2026-100805 Race condition, use-after-free in the Audio/Video component 7.5 High Sep 29, 2026
CVE-2026-100806 Uninitialized memory in the Graphics: WebGPU component 4.3 Medium Sep 29, 2026
CVE-2026-100803 Same-origin policy bypass in the WebExtensions component 8.1 High Sep 29, 2026
CVE-2026-100804 Sandbox escape due to use-after-free in the Preferences: Backend component 9.6 Critical Sep 29, 2026
CVE-2026-100801 Privilege escalation in the DLL Services component 8.8 High Sep 29, 2026
CVE-2026-100802 Uninitialized memory in the Graphics: WebGPU component 4.3 Medium Sep 29, 2026
CVE-2026-100800 Sandbox escape due to use-after-free in the Disability Access APIs component 9.6 Critical Sep 29, 2026
CVE-2026-100798 Cryptography misuse in Storage: Quota Manager component 8.1 High Sep 29, 2026
CVE-2026-100799 Uninitialized memory in the Graphics: WebGPU component 4.3 Medium Sep 29, 2026
CVE-2026-100796 Use-after-free in the JavaScript: WebAssembly component 8.8 High Sep 29, 2026
CVE-2026-100797 Privilege escalation due to use-after-free in the Graphics: WebRender component 8.8 High Sep 29, 2026
CVE-2026-100795 Denial-of-service in the Networking component 6.5 Medium Sep 29, 2026
CVE-2026-96869 Information disclosure in the Networking component 4.3 Medium Sep 29, 2026
CVE-2026-100793 JIT miscompilation in the JavaScript Engine component 6.5 Medium Sep 29, 2026
CVE-2026-100794 Sandbox escape due to incorrect boundary conditions in the Internationalization component 9.6 Critical Sep 29, 2026
CVE-2026-100792 JIT miscompilation in the JavaScript: WebAssembly component 7.1 High Sep 29, 2026
CVE-2026-100790 Use-after-free in the XSLT component 8.8 High Sep 29, 2026
CVE-2026-100791 Use-after-free in the DOM: Core & HTML component 8.8 High Sep 29, 2026
CVE-2026-100788 Invalid pointer in the JavaScript: WebAssembly component 9.8 Critical Sep 29, 2026
CVE-2026-100789 Use-after-free in the Graphics: Canvas2D component 8.8 High Sep 29, 2026
CVE-2026-100786 Sandbox escape due to use-after-free in the Graphics component 9.6 Critical Sep 29, 2026
CVE-2026-100787 Sandbox escape in the XUL component 9.6 Critical Sep 29, 2026
CVE-2026-100784 Use-after-free in the Layout: Text and Fonts component 8.8 High Sep 29, 2026

Other Mozilla products