| CVE-2026-16406 |
Mitigation bypass in the Networking component
|
9.1
Critical
|
Jul 21, 2026 |
| CVE-2026-16405 |
Information disclosure in the Networking: WebSockets component
|
7.5
High
|
Jul 21, 2026 |
| CVE-2026-16404 |
Spoofing issue in Firefox for Android
|
7.4
High
|
Jul 21, 2026 |
| CVE-2026-16403 |
Spoofing issue in the Address Bar component
|
6.5
Medium
|
Jul 21, 2026 |
| CVE-2026-16401 |
Privilege escalation in the Data Loss Prevention component
|
8.8
High
|
Jul 21, 2026 |
| CVE-2026-16402 |
Integer overflow in the Graphics: ImageLib component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16400 |
Information disclosure in the DOM: Security component
|
7.5
High
|
Jul 21, 2026 |
| CVE-2026-16399 |
Site isolation issue in the DOM: Navigation component
|
7.5
High
|
Jul 21, 2026 |
| CVE-2026-16398 |
Site isolation issue in the Graphics component
|
7.5
High
|
Jul 21, 2026 |
| CVE-2026-16397 |
Clickjacking issue in the WebExtensions component in Firefox for Android
|
6.5
Medium
|
Jul 21, 2026 |
| CVE-2026-16395 |
Integer overflow in the Audio/Video component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16396 |
Privilege escalation in WebExtensions
|
8.8
High
|
Jul 21, 2026 |
| CVE-2026-16394 |
Mitigation bypass in the DOM: Security component
|
9.1
Critical
|
Jul 21, 2026 |
| CVE-2026-16359 |
Incorrect boundary conditions in the Audio/Video: GMP component
|
9.1
Critical
|
Jul 21, 2026 |
| CVE-2026-16393 |
Incorrect boundary conditions in the Graphics: WebGPU component
|
9.1
Critical
|
Jul 21, 2026 |
| CVE-2026-16392 |
JIT miscompilation in the JavaScript Engine: JIT component
|
9.1
Critical
|
Jul 21, 2026 |
| CVE-2026-16390 |
Mitigation bypass in the Enterprise Policies component
|
9.1
Critical
|
Jul 21, 2026 |
| CVE-2026-16391 |
Information disclosure in the Storage: IndexedDB component
|
7.5
High
|
Jul 21, 2026 |
| CVE-2026-16389 |
Incorrect boundary conditions, integer overflow in the Libraries component in NSS
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16388 |
Sandbox escape in the DOM: Networking component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16387 |
Site isolation issue in the Networking component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16386 |
Information disclosure due to uninitialized memory in the Graphics: WebGPU component
|
7.5
High
|
Jul 21, 2026 |
| CVE-2026-16385 |
Information disclosure due to uninitialized memory in the Graphics: WebGPU component
|
7.5
High
|
Jul 21, 2026 |
| CVE-2026-16383 |
Mitigation bypass in the DOM: Networking component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16384 |
Information disclosure due to uninitialized memory in the Graphics: WebGPU component
|
7.5
High
|
Jul 21, 2026 |