| CVE-2026-12289 |
Privilege escalation in the Graphics: WebRender component
|
8.8
High
|
Jun 16, 2026 |
| CVE-2026-10702 |
JIT miscompilation in the JavaScript Engine: JIT component
|
4.3
Medium
|
Jun 2, 2026 |
| CVE-2026-10701 |
Incorrect boundary conditions in the Graphics: Text component
|
7.5
High
|
Jun 2, 2026 |
| CVE-2026-8975 |
Memory safety bugs present in Thunderbird 140.10 and Thunderbird 150
|
8.8
High
|
May 19, 2026 |
| CVE-2026-8974 |
Memory safety bugs present in Thunderbird 140.10 and Thunderbird 150
|
8.8
High
|
May 19, 2026 |
| CVE-2026-8973 |
Memory safety bugs present in Thunderbird 150
|
8.8
High
|
May 19, 2026 |
| CVE-2026-8972 |
Privilege escalation in the WebRTC: Audio/Video component
|
8.8
High
|
May 19, 2026 |
| CVE-2026-8971 |
Same-origin policy bypass in the Networking: JAR component
|
6.5
Medium
|
May 19, 2026 |
| CVE-2026-8970 |
Privilege escalation in the Security component
|
8.8
High
|
May 19, 2026 |
| CVE-2026-8969 |
Mitigation bypass in the DOM: Security component
|
8.1
High
|
May 19, 2026 |
| CVE-2026-8968 |
Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component
|
7.5
High
|
May 19, 2026 |
| CVE-2026-8967 |
Information disclosure in the Graphics: WebGPU component
|
7.5
High
|
May 19, 2026 |
| CVE-2026-8966 |
Information disclosure in the IP Protection component
|
7.5
High
|
May 19, 2026 |
| CVE-2026-8965 |
Information disclosure in the DOM: Security component
|
7.5
High
|
May 19, 2026 |
| CVE-2026-8964 |
Spoofing issue in the Popup Blocker component
|
7.5
High
|
May 19, 2026 |
| CVE-2026-8963 |
Spoofing issue in the Web Speech component
|
7.5
High
|
May 19, 2026 |
| CVE-2026-8962 |
Mitigation bypass in the DOM: Security component
|
8.1
High
|
May 19, 2026 |
| CVE-2026-8961 |
Spoofing issue in the Form Autofill component
|
6.5
Medium
|
May 19, 2026 |
| CVE-2026-8960 |
Spoofing issue in WebExtensions
|
7.5
High
|
May 19, 2026 |
| CVE-2026-8959 |
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
|
9.6
Critical
|
May 19, 2026 |
| CVE-2026-8958 |
Information disclosure, sandbox escape in the Security: Process Sandboxing component
|
8.6
High
|
May 19, 2026 |
| CVE-2026-8957 |
Privilege escalation in the Enterprise Policies component
|
8.8
High
|
May 19, 2026 |
| CVE-2026-8956 |
Integer overflow in the Networking: JAR component
|
9.8
Critical
|
May 19, 2026 |
| CVE-2026-8955 |
Privilege escalation in the DOM: Workers component
|
8.8
High
|
May 19, 2026 |
| CVE-2026-8954 |
Incorrect boundary conditions, integer overflow in the Audio/Video component
|
7.5
High
|
May 19, 2026 |