| CVE-2026-16382 |
Mitigation bypass in the DOM: Service Workers component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16381 |
Same-origin policy bypass in the Networking: DNS component
|
9.1
Critical
|
Jul 21, 2026 |
| CVE-2026-16380 |
Mitigation bypass in the Networking component
|
9.1
Critical
|
Jul 21, 2026 |
| CVE-2026-16358 |
Site isolation issue in the Graphics: WebRender component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16379 |
Privilege escalation in the DOM: Content Processes component
|
8.8
High
|
Jul 21, 2026 |
| CVE-2026-16377 |
Mitigation bypass in the PDF Viewer component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16378 |
Other issue in the DOM: Copy & Paste and Drag & Drop component
|
7.5
High
|
Jul 21, 2026 |
| CVE-2026-16376 |
Denial-of-service in the Graphics: WebGPU component
|
7.5
High
|
Jul 21, 2026 |
| CVE-2026-16375 |
Site isolation issue in the Networking: HTTP component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16374 |
Information disclosure in the Framework component in DevTools
|
7.5
High
|
Jul 21, 2026 |
| CVE-2026-16373 |
Information disclosure in the Privacy component in Firefox for Android
|
7.5
High
|
Jul 21, 2026 |
| CVE-2026-16371 |
Privilege escalation in the DOM: Navigation component
|
8.8
High
|
Jul 21, 2026 |
| CVE-2026-16372 |
Privilege escalation in the DOM: Content Processes component
|
8.8
High
|
Jul 21, 2026 |
| CVE-2026-16370 |
Mitigation bypass in the DOM: Networking component
|
9.1
Critical
|
Jul 21, 2026 |
| CVE-2026-16357 |
Incorrect boundary conditions in the Graphics component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16356 |
Sandbox escape due to use-after-free in the Disability Access APIs component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16355 |
JIT miscompilation in the JavaScript Engine: JIT component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16369 |
Integer overflow in the JavaScript: WebAssembly component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16367 |
Sandbox escape due to invalid pointer in the Disability Access APIs component
|
10.0
Critical
|
Jul 21, 2026 |
| CVE-2026-16368 |
Incorrect boundary conditions in the JavaScript: WebAssembly component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16354 |
Information disclosure in the Graphics: ImageLib component
|
7.5
High
|
Jul 21, 2026 |
| CVE-2026-16353 |
Invalid pointer in the DOM: Bindings (WebIDL) component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16366 |
Privilege escalation in the DOM: Navigation component
|
8.8
High
|
Jul 21, 2026 |
| CVE-2026-16365 |
Privilege escalation in the DOM: Workers component
|
8.8
High
|
Jul 21, 2026 |
| CVE-2026-16363 |
JIT miscompilation in the JavaScript: WebAssembly component
|
9.8
Critical
|
Jul 21, 2026 |