Skip to content

Known vulnerabilities in Mozilla Firefox

Is your version affected?

CVE Summary Score Published
CVE-2026-92008 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component 8.8 High Sep 15, 2026
CVE-2026-92007 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component 8.8 High Sep 15, 2026
CVE-2026-92006 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component 8.8 High Sep 15, 2026
CVE-2026-92005 Use-after-free in the Audio/Video: Web Codecs component 5.3 Medium Sep 15, 2026
CVE-2026-84144 Internally found bugs present in Thunderbird 154 and Thunderbird ESR 153.1 7.5 High Sep 1, 2026
CVE-2026-84143 Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14 9.8 Critical Sep 1, 2026
CVE-2026-84142 Internally found bugs present in Thunderbird 154 9.8 Critical Sep 1, 2026
CVE-2026-84141 Integer overflow in the Graphics: ImageLib component 9.8 Critical Sep 1, 2026
CVE-2026-84140 Site isolation issue in the DOM: Navigation component 9.8 Critical Sep 1, 2026
CVE-2026-84139 Clickjacking issue in the DOM: Events component 9.8 Critical Sep 1, 2026
CVE-2026-84138 Denial-of-service in the PDF Viewer component 7.5 High Sep 1, 2026
CVE-2026-84137 Spoofing issue in the DOM: Core & HTML component 9.8 Critical Sep 1, 2026
CVE-2026-84136 Other issue in the DOM: Navigation component 9.8 Critical Sep 1, 2026
CVE-2026-84135 Other issue in Firefox Focus for Android 9.8 Critical Sep 1, 2026
CVE-2026-84134 Other issue in the Profile Backup component 9.8 Critical Sep 1, 2026
CVE-2026-84133 Site isolation issue in the DOM: Push Subscriptions component 9.8 Critical Sep 1, 2026
CVE-2026-84132 Information disclosure in the Networking: HTTP component 7.5 High Sep 1, 2026
CVE-2026-84130 Information disclosure in the Graphics: WebGPU component 7.5 High Sep 1, 2026
CVE-2026-84129 Site isolation issue in the DOM: Navigation component 9.8 Critical Sep 1, 2026
CVE-2026-84128 Privilege escalation in the WebDriver BiDi component 8.8 High Sep 1, 2026
CVE-2026-84127 Information disclosure in the WebExtensions component in Firefox for Android 4.3 Medium Sep 1, 2026
CVE-2026-84126 Incorrect boundary conditions in the Layout: Grid component 4.3 Medium Sep 1, 2026
CVE-2026-84125 Use-after-free in the DOM: Core & HTML component 5.4 Medium Sep 1, 2026
CVE-2026-84124 Use-after-free in the DOM: Core & HTML component 5.4 Medium Sep 1, 2026
CVE-2026-84123 Privilege escalation due to use-after-free in the Graphics: WebGPU component 8.8 High Sep 1, 2026

Other Mozilla products