| CVE-2026-74955 |
Privilege escalation in the Request Handling component
|
8.8
High
|
Aug 18, 2026 |
| CVE-2026-74956 |
Same-origin policy bypass in the DOM: Service Workers component
|
9.1
Critical
|
Aug 18, 2026 |
| CVE-2026-74958 |
Information disclosure in the WebRTC component
|
7.5
High
|
Aug 18, 2026 |
| CVE-2026-74947 |
Privilege escalation due to invalid pointer in the Graphics component
|
8.8
High
|
Aug 18, 2026 |
| CVE-2026-74950 |
Privilege escalation in the Downloads API component
|
8.8
High
|
Aug 18, 2026 |
| CVE-2026-74951 |
Clickjacking issue in Firefox for Android
|
6.5
Medium
|
Aug 18, 2026 |
| CVE-2026-74952 |
Privilege escalation in the Application Update component
|
8.8
High
|
Aug 18, 2026 |
| CVE-2026-74937 |
Use-after-free in the JavaScript: GC component
|
8.8
High
|
Aug 18, 2026 |
| CVE-2026-74938 |
Mitigation bypass in the JavaScript: GC component
|
9.1
Critical
|
Aug 18, 2026 |
| CVE-2026-74990 |
Internally found bugs present in Firefox ESR 115.38, Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153
|
9.8
Critical
|
Aug 18, 2026 |
| CVE-2026-75874 |
Sandbox escape in the Remote Settings Client component
|
10.0
Critical
|
Aug 18, 2026 |
| CVE-2026-74974 |
Same-origin policy bypass in the Graphics: ImageLib component
|
5.4
Medium
|
Aug 18, 2026 |
| CVE-2026-74976 |
JIT miscompilation in the JavaScript Engine: JIT component
|
6.5
Medium
|
Aug 18, 2026 |
| CVE-2026-74987 |
Internally found bugs present in Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153
|
9.8
Critical
|
Aug 18, 2026 |
| CVE-2026-74983 |
Mitigation bypass in the Data Loss Prevention component
|
8.1
High
|
Aug 18, 2026 |
| CVE-2026-74969 |
Race condition, use-after-free in the Layout: Text and Fonts component
|
8.8
High
|
Aug 18, 2026 |
| CVE-2026-74971 |
Information disclosure in the DOM: UI Events & Focus Handling component
|
4.3
Medium
|
Aug 18, 2026 |
| CVE-2026-74972 |
Information disclosure in the DOM: Push Subscriptions component
|
4.3
Medium
|
Aug 18, 2026 |
| CVE-2026-74973 |
Race condition, use-after-free in the Graphics component
|
4.2
Medium
|
Aug 18, 2026 |
| CVE-2026-74964 |
Integer overflow in the Graphics component
|
9.8
Critical
|
Aug 18, 2026 |
| CVE-2026-74965 |
Privilege escalation in the Shell Integration component
|
8.8
High
|
Aug 18, 2026 |
| CVE-2026-74967 |
Same-origin policy bypass in the Audio/Video: Playback component
|
5.4
Medium
|
Aug 18, 2026 |
| CVE-2026-74963 |
Same-origin policy bypass in the Networking: Cookies component
|
5.4
Medium
|
Aug 18, 2026 |
| CVE-2026-74957 |
Mitigation bypass in the Safe Browsing component
|
8.1
High
|
Aug 18, 2026 |
| CVE-2026-74959 |
Mitigation bypass in the Storage: Cache API component
|
9.1
Critical
|
Aug 18, 2026 |