| CVE-2026-84122 |
Use-after-free in the Audio/Video component
|
5.4
Medium
|
Sep 1, 2026 |
| CVE-2026-84118 |
Use-after-free in the JavaScript: GC component
|
5.4
Medium
|
Sep 1, 2026 |
| CVE-2026-84117 |
Privilege escalation in Firefox for Android
|
8.8
High
|
Sep 1, 2026 |
| CVE-2026-84145 |
Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14
|
7.5
High
|
Sep 1, 2026 |
| CVE-2026-84131 |
Privilege escalation due to invalid pointer in the Graphics component
|
8.8
High
|
Sep 1, 2026 |
| CVE-2026-84121 |
Sandbox escape due to use-after-free in the DOM: Security component
|
9.6
Critical
|
Sep 1, 2026 |
| CVE-2026-84120 |
Use-after-free in the Audio/Video component
|
5.4
Medium
|
Sep 1, 2026 |
| CVE-2026-84119 |
Sandbox escape due to use-after-free in the DOM: Navigation component
|
9.6
Critical
|
Sep 1, 2026 |
| CVE-2026-74985 |
Privilege escalation in the Enterprise Policies component
|
9.8
Critical
|
Aug 18, 2026 |
| CVE-2026-74986 |
Site isolation issue in the CSS Parsing and Computation component
|
9.1
Critical
|
Aug 18, 2026 |
| CVE-2026-74988 |
Internally found bugs present in Firefox ESR 153.0 and Firefox 153
|
9.8
Critical
|
Aug 18, 2026 |
| CVE-2026-74989 |
Internally found bugs present in Firefox 153
|
9.8
Critical
|
Aug 18, 2026 |
| CVE-2026-74984 |
Race condition in the JavaScript Engine component
|
6.8
Medium
|
Aug 18, 2026 |
| CVE-2026-74980 |
Clickjacking issue in the Downloads component in Firefox for Android
|
6.5
Medium
|
Aug 18, 2026 |
| CVE-2026-74981 |
Site isolation issue in the Audio/Video: Web Codecs component
|
8.1
High
|
Aug 18, 2026 |
| CVE-2026-74982 |
Denial-of-service in the Widget component
|
7.5
High
|
Aug 18, 2026 |
| CVE-2026-74975 |
Spoofing issue in the Downloads component in Firefox for Android
|
5.4
Medium
|
Aug 18, 2026 |
| CVE-2026-74977 |
Integer overflow in the Graphics component
|
7.5
High
|
Aug 18, 2026 |
| CVE-2026-74978 |
Clickjacking issue in the Widget component
|
8.1
High
|
Aug 18, 2026 |
| CVE-2026-74979 |
Mitigation bypass in the Add-ons Manager component
|
9.8
Critical
|
Aug 18, 2026 |
| CVE-2026-74966 |
Information disclosure in the Form Autofill component
|
7.5
High
|
Aug 18, 2026 |
| CVE-2026-74968 |
Site isolation issue in the Graphics: WebRender component
|
5.4
Medium
|
Aug 18, 2026 |
| CVE-2026-74970 |
Site isolation issue in the Graphics component
|
5.4
Medium
|
Aug 18, 2026 |
| CVE-2026-74961 |
Side-channel in the Web Audio component
|
9.1
Critical
|
Aug 18, 2026 |
| CVE-2026-74954 |
Information disclosure due to side-channel in the Storage: Cache API component
|
7.5
High
|
Aug 18, 2026 |