| CVE-2026-74960 |
Site isolation issue in the WebExtensions component
|
8.1
High
|
Aug 18, 2026 |
| CVE-2026-74962 |
Site isolation issue in the Networking: Cookies component
|
8.1
High
|
Aug 18, 2026 |
| CVE-2026-74946 |
Information disclosure due to incorrect boundary conditions in the Graphics: CanvasWebGL component
|
8.8
High
|
Aug 18, 2026 |
| CVE-2026-74948 |
Information disclosure in the Graphics component
|
6.5
Medium
|
Aug 18, 2026 |
| CVE-2026-74949 |
Use-after-free in the Graphics: Canvas2D component
|
8.8
High
|
Aug 18, 2026 |
| CVE-2026-74953 |
Privilege escalation in the Networking: Cookies component
|
8.8
High
|
Aug 18, 2026 |
| CVE-2026-74944 |
Use-after-free in the DOM: Core & HTML component
|
9.8
Critical
|
Aug 18, 2026 |
| CVE-2026-74945 |
Information disclosure in the Graphics: Text component
|
6.5
Medium
|
Aug 18, 2026 |
| CVE-2026-74942 |
Privilege escalation in the Remote Settings Client component
|
8.8
High
|
Aug 18, 2026 |
| CVE-2026-74943 |
Use-after-free in the Graphics: ImageLib component
|
9.8
Critical
|
Aug 18, 2026 |
| CVE-2026-74939 |
Privilege escalation in the DOM: Navigation component
|
8.8
High
|
Aug 18, 2026 |
| CVE-2026-74940 |
Use-after-free in the Graphics: Text component
|
9.8
Critical
|
Aug 18, 2026 |
| CVE-2026-74941 |
Privilege escalation in the Graphics: CanvasWebGL component
|
8.8
High
|
Aug 18, 2026 |
| CVE-2026-74934 |
Site isolation issue in the Graphics: CanvasWebGL component
|
7.5
High
|
Aug 18, 2026 |
| CVE-2026-74935 |
Privilege escalation in the DOM: Networking component
|
8.8
High
|
Aug 18, 2026 |
| CVE-2026-74936 |
Use-after-free in the JavaScript: WebAssembly component
|
9.8
Critical
|
Aug 18, 2026 |
| CVE-2026-18809 |
Information disclosure in Firefox for Android and Firefox Focus for Android
|
6.5
Medium
|
Aug 4, 2026 |
| CVE-2026-16361 |
Memory safety bugs present in Thunderbird ESR 140.12
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16360 |
Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16412 |
Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16411 |
Memory safety bugs present in Thunderbird 152
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16410 |
JIT miscompilation in the JavaScript Engine: JIT component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16409 |
Invalid pointer in the Security: PSM component
|
7.5
High
|
Jul 21, 2026 |
| CVE-2026-16407 |
Mitigation bypass in the DOM: Service Workers component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16408 |
Integer overflow in the Audio/Video: Playback component
|
9.8
Critical
|
Jul 21, 2026 |