| CVE-2026-2801 |
Incorrect boundary conditions in the JavaScript: WebAssembly component
|
7.5
High
|
Feb 24, 2026 |
| CVE-2026-2798 |
Use-after-free in the DOM: Core & HTML component
|
8.8
High
|
Feb 24, 2026 |
| CVE-2026-2799 |
Use-after-free in the DOM: Core & HTML component
|
8.8
High
|
Feb 24, 2026 |
| CVE-2026-2797 |
Use-after-free in the JavaScript: GC component
|
8.8
High
|
Feb 24, 2026 |
| CVE-2026-2795 |
Use-after-free in the JavaScript: GC component
|
8.8
High
|
Feb 24, 2026 |
| CVE-2026-2796 |
JIT miscompilation in the JavaScript: WebAssembly component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2794 |
Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android
|
6.5
Medium
|
Feb 24, 2026 |
| CVE-2026-2793 |
Memory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and…
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2791 |
Mitigation bypass in the Networking: Cache component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2792 |
Memory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2790 |
Same-origin policy bypass in the Networking: JAR component
|
8.8
High
|
Feb 24, 2026 |
| CVE-2026-2788 |
Incorrect boundary conditions in the Audio/Video: GMP component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2789 |
Use-after-free in the Graphics: ImageLib component
|
8.8
High
|
Feb 24, 2026 |
| CVE-2026-2787 |
Use-after-free in the DOM: Window and Location component
|
8.8
High
|
Feb 24, 2026 |
| CVE-2026-2785 |
Invalid pointer in the JavaScript Engine component
|
8.8
High
|
Feb 24, 2026 |
| CVE-2026-2786 |
Use-after-free in the JavaScript Engine component
|
8.8
High
|
Feb 24, 2026 |
| CVE-2026-2784 |
Mitigation bypass in the DOM: Security component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2783 |
Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component
|
6.5
Medium
|
Feb 24, 2026 |
| CVE-2026-2782 |
Privilege escalation in the Netmonitor component
|
8.8
High
|
Feb 24, 2026 |
| CVE-2026-2781 |
Integer overflow in the Libraries component in NSS
|
8.8
High
|
Feb 24, 2026 |
| CVE-2026-2779 |
Incorrect boundary conditions in the Networking: JAR component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2780 |
Privilege escalation in the Netmonitor component
|
8.8
High
|
Feb 24, 2026 |
| CVE-2026-2778 |
Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component
|
10.0
Critical
|
Feb 24, 2026 |
| CVE-2026-2776 |
Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software
|
10.0
Critical
|
Feb 24, 2026 |
| CVE-2026-2777 |
Privilege escalation in the Messaging System component
|
9.8
Critical
|
Feb 24, 2026 |