| CVE-2026-84135 |
Other issue in Firefox Focus for Android
|
9.8
Critical
|
Sep 1, 2026 |
| CVE-2026-84134 |
Other issue in the Profile Backup component
|
9.8
Critical
|
Sep 1, 2026 |
| CVE-2026-84133 |
Site isolation issue in the DOM: Push Subscriptions component
|
9.8
Critical
|
Sep 1, 2026 |
| CVE-2026-84129 |
Site isolation issue in the DOM: Navigation component
|
9.8
Critical
|
Sep 1, 2026 |
| CVE-2026-84121 |
Sandbox escape due to use-after-free in the DOM: Security component
|
9.6
Critical
|
Sep 1, 2026 |
| CVE-2026-84119 |
Sandbox escape due to use-after-free in the DOM: Navigation component
|
9.6
Critical
|
Sep 1, 2026 |
| CVE-2026-74985 |
Privilege escalation in the Enterprise Policies component
|
9.8
Critical
|
Aug 18, 2026 |
| CVE-2026-74986 |
Site isolation issue in the CSS Parsing and Computation component
|
9.1
Critical
|
Aug 18, 2026 |
| CVE-2026-74988 |
Internally found bugs present in Firefox ESR 153.0 and Firefox 153
|
9.8
Critical
|
Aug 18, 2026 |
| CVE-2026-74989 |
Internally found bugs present in Firefox 153
|
9.8
Critical
|
Aug 18, 2026 |
| CVE-2026-74979 |
Mitigation bypass in the Add-ons Manager component
|
9.8
Critical
|
Aug 18, 2026 |
| CVE-2026-74961 |
Side-channel in the Web Audio component
|
9.1
Critical
|
Aug 18, 2026 |
| CVE-2026-74956 |
Same-origin policy bypass in the DOM: Service Workers component
|
9.1
Critical
|
Aug 18, 2026 |
| CVE-2026-74938 |
Mitigation bypass in the JavaScript: GC component
|
9.1
Critical
|
Aug 18, 2026 |
| CVE-2026-74990 |
Internally found bugs present in Firefox ESR 115.38, Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153
|
9.8
Critical
|
Aug 18, 2026 |
| CVE-2026-75874 |
Sandbox escape in the Remote Settings Client component
|
10.0
Critical
|
Aug 18, 2026 |
| CVE-2026-74987 |
Internally found bugs present in Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153
|
9.8
Critical
|
Aug 18, 2026 |
| CVE-2026-74964 |
Integer overflow in the Graphics component
|
9.8
Critical
|
Aug 18, 2026 |
| CVE-2026-74959 |
Mitigation bypass in the Storage: Cache API component
|
9.1
Critical
|
Aug 18, 2026 |
| CVE-2026-74944 |
Use-after-free in the DOM: Core & HTML component
|
9.8
Critical
|
Aug 18, 2026 |
| CVE-2026-74943 |
Use-after-free in the Graphics: ImageLib component
|
9.8
Critical
|
Aug 18, 2026 |
| CVE-2026-74940 |
Use-after-free in the Graphics: Text component
|
9.8
Critical
|
Aug 18, 2026 |
| CVE-2026-74936 |
Use-after-free in the JavaScript: WebAssembly component
|
9.8
Critical
|
Aug 18, 2026 |
| CVE-2026-16361 |
Memory safety bugs present in Thunderbird ESR 140.12
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16360 |
Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152
|
9.8
Critical
|
Jul 21, 2026 |