| CVE-2026-4691 |
Use-after-free in the CSS Parsing and Computation component
|
9.8
Critical
|
Mar 24, 2026 |
| CVE-2026-4692 |
Sandbox escape in the Responsive Design Mode component
|
9.6
Critical
|
Mar 24, 2026 |
| CVE-2026-4689 |
Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component
|
10.0
Critical
|
Mar 24, 2026 |
| CVE-2026-4690 |
Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component
|
9.6
Critical
|
Mar 24, 2026 |
| CVE-2026-4687 |
Sandbox escape due to incorrect boundary conditions in the Telemetry component
|
9.6
Critical
|
Mar 24, 2026 |
| CVE-2026-4688 |
Sandbox escape due to use-after-free in the Disability Access APIs component
|
9.6
Critical
|
Mar 24, 2026 |
| CVE-2026-2807 |
Memory safety bugs present in Firefox 147 and Thunderbird 147
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2806 |
Uninitialized memory in the Graphics: Text component
|
9.1
Critical
|
Feb 24, 2026 |
| CVE-2026-2805 |
Invalid pointer in the DOM: Core & HTML component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2800 |
Spoofing issue in the WebAuthn component in Firefox for Android
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2796 |
JIT miscompilation in the JavaScript: WebAssembly component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2793 |
Memory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and…
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2791 |
Mitigation bypass in the Networking: Cache component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2792 |
Memory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2788 |
Incorrect boundary conditions in the Audio/Video: GMP component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2784 |
Mitigation bypass in the DOM: Security component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2779 |
Incorrect boundary conditions in the Networking: JAR component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2778 |
Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component
|
10.0
Critical
|
Feb 24, 2026 |
| CVE-2026-2776 |
Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software
|
10.0
Critical
|
Feb 24, 2026 |
| CVE-2026-2777 |
Privilege escalation in the Messaging System component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2775 |
Mitigation bypass in the DOM: HTML Parser component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2773 |
Incorrect boundary conditions in the Web Audio component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2771 |
Undefined behavior in the DOM: Core & HTML component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2768 |
Sandbox escape in the Storage: IndexedDB component
|
10.0
Critical
|
Feb 24, 2026 |
| CVE-2026-2766 |
Use-after-free in the JavaScript Engine: JIT component
|
9.8
Critical
|
Feb 24, 2026 |