| CVE-2026-8953 |
Sandbox escape due to use-after-free in the Disability Access APIs component
|
9.6
Critical
|
May 19, 2026 |
| CVE-2026-8952 |
Privilege escalation in the Application Update component
|
8.8
High
|
May 19, 2026 |
| CVE-2026-8951 |
Spoofing issue in the Toolbar component in Firefox for Android
|
6.5
Medium
|
May 19, 2026 |
| CVE-2026-8950 |
Same-origin policy bypass in the Networking: HTTP component
|
9.3
Critical
|
May 19, 2026 |
| CVE-2026-8949 |
Integer overflow in the Widget: Win32 component
|
7.5
High
|
May 19, 2026 |
| CVE-2026-8948 |
Same-origin policy bypass in the DOM: Networking component
|
9.1
Critical
|
May 19, 2026 |
| CVE-2026-8947 |
Use-after-free in the DOM: Bindings (WebIDL) component
|
7.3
High
|
May 19, 2026 |
| CVE-2026-8946 |
Incorrect boundary conditions in the Audio/Video: Web Codecs component
|
7.5
High
|
May 19, 2026 |
| CVE-2026-8945 |
Sandbox escape in Firefox and Firefox Focus for Android
|
7.5
High
|
May 19, 2026 |
| CVE-2026-8401 |
Sandbox escape in the Profile Backup component
|
9.8
Critical
|
May 12, 2026 |
| CVE-2026-8391 |
Other issue in the JavaScript Engine component
|
5.3
Medium
|
May 12, 2026 |
| CVE-2026-8390 |
Use-after-free in the JavaScript: WebAssembly component
|
7.3
High
|
May 12, 2026 |
| CVE-2026-8389 |
JIT miscompilation in the JavaScript Engine: JIT component
|
8.8
High
|
May 12, 2026 |
| CVE-2026-8388 |
Incorrect boundary conditions in the JavaScript Engine: JIT component
|
6.5
Medium
|
May 12, 2026 |
| CVE-2026-8094 |
Other issue in the WebRTC component
|
9.8
Critical
|
May 7, 2026 |
| CVE-2026-8093 |
Memory safety bugs present in Thunderbird 150.0.1
|
8.1
High
|
May 7, 2026 |
| CVE-2026-8092 |
Memory safety bugs present in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1
|
8.1
High
|
May 7, 2026 |
| CVE-2026-8091 |
Incorrect boundary conditions in the Audio/Video: Playback component
|
9.8
Critical
|
May 7, 2026 |
| CVE-2026-8090 |
Use-after-free in the DOM: Networking component
|
7.3
High
|
May 7, 2026 |
| CVE-2026-7321 |
Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component
|
9.6
Critical
|
Apr 28, 2026 |
| CVE-2026-7324 |
Memory safety bugs present in Thunderbird 150.0.0
|
7.3
High
|
Apr 28, 2026 |
| CVE-2026-7323 |
Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0
|
7.3
High
|
Apr 28, 2026 |
| CVE-2026-7322 |
Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0
|
7.3
High
|
Apr 28, 2026 |
| CVE-2026-7320 |
Information disclosure due to incorrect boundary conditions in the Audio/Video component
|
7.5
High
|
Apr 28, 2026 |
| CVE-2026-6786 |
Memory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149
|
7.5
High
|
Apr 21, 2026 |