| CVE-2026-8401 |
Sandbox escape in the Profile Backup component
|
9.8
Critical
|
May 12, 2026 |
| CVE-2026-8094 |
Other issue in the WebRTC component
|
9.8
Critical
|
May 7, 2026 |
| CVE-2026-8091 |
Incorrect boundary conditions in the Audio/Video: Playback component
|
9.8
Critical
|
May 7, 2026 |
| CVE-2026-7321 |
Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component
|
9.6
Critical
|
Apr 28, 2026 |
| CVE-2026-6771 |
Mitigation bypass in the DOM: Security component
|
9.8
Critical
|
Apr 21, 2026 |
| CVE-2026-6768 |
Mitigation bypass in the Networking: Cookies component
|
9.8
Critical
|
Apr 21, 2026 |
| CVE-2026-6760 |
Mitigation bypass in the Networking: Cookies component
|
9.8
Critical
|
Apr 21, 2026 |
| CVE-2026-6748 |
Uninitialized memory in the Audio/Video: Web Codecs component
|
9.8
Critical
|
Apr 21, 2026 |
| CVE-2026-5731 |
Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and…
|
9.8
Critical
|
Apr 7, 2026 |
| CVE-2026-4721 |
Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and…
|
9.8
Critical
|
Mar 24, 2026 |
| CVE-2026-4720 |
Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148
|
9.8
Critical
|
Mar 24, 2026 |
| CVE-2026-4729 |
Memory safety bugs present in Firefox 148 and Thunderbird 148
|
9.8
Critical
|
Mar 24, 2026 |
| CVE-2026-4717 |
Privilege escalation in the Netmonitor component
|
9.8
Critical
|
Mar 24, 2026 |
| CVE-2026-4716 |
Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component
|
9.1
Critical
|
Mar 24, 2026 |
| CVE-2026-4715 |
Uninitialized memory in the Graphics: Canvas2D component
|
9.1
Critical
|
Mar 24, 2026 |
| CVE-2026-4711 |
Use-after-free in the Widget: Cocoa component
|
9.8
Critical
|
Mar 24, 2026 |
| CVE-2026-4725 |
Sandbox escape due to use-after-free in the Graphics: Canvas2D component
|
9.3
Critical
|
Mar 24, 2026 |
| CVE-2026-4710 |
Incorrect boundary conditions in the Audio/Video component
|
9.8
Critical
|
Mar 24, 2026 |
| CVE-2026-4705 |
Undefined behavior in the WebRTC: Signaling component
|
9.8
Critical
|
Mar 24, 2026 |
| CVE-2026-4723 |
Use-after-free in the JavaScript Engine component
|
9.8
Critical
|
Mar 24, 2026 |
| CVE-2026-4724 |
Undefined behavior in the Audio/Video component
|
9.1
Critical
|
Mar 24, 2026 |
| CVE-2026-4702 |
JIT miscompilation in the JavaScript Engine component
|
9.8
Critical
|
Mar 24, 2026 |
| CVE-2026-4701 |
Use-after-free in the JavaScript Engine component
|
9.8
Critical
|
Mar 24, 2026 |
| CVE-2026-4700 |
Mitigation bypass in the Networking: HTTP component
|
9.8
Critical
|
Mar 24, 2026 |
| CVE-2026-4696 |
Use-after-free in the Layout: Text and Fonts component
|
9.8
Critical
|
Mar 24, 2026 |