| CVE-2026-2764 |
JIT miscompilation, use-after-free in the JavaScript Engine: JIT component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2765 |
Use-after-free in the JavaScript Engine component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2763 |
Use-after-free in the JavaScript Engine component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2761 |
Sandbox escape in the Graphics: WebRender component
|
10.0
Critical
|
Feb 24, 2026 |
| CVE-2026-2762 |
Integer overflow in the JavaScript: Standard Library component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2760 |
Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component
|
10.0
Critical
|
Feb 24, 2026 |
| CVE-2026-2759 |
Incorrect boundary conditions in the Graphics: ImageLib component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2758 |
Use-after-free in the JavaScript: GC component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2757 |
Incorrect boundary conditions in the WebRTC: Audio/Video component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-0892 |
Memory safety bugs present in Firefox 146 and Thunderbird 146
|
9.8
Critical
|
Jan 13, 2026 |
| CVE-2026-0884 |
Use-after-free in the JavaScript Engine component
|
9.8
Critical
|
Jan 13, 2026 |
| CVE-2026-0881 |
Sandbox escape in the Messaging System component
|
10.0
Critical
|
Jan 13, 2026 |
| CVE-2026-0879 |
Sandbox escape due to incorrect boundary conditions in the Graphics component
|
9.8
Critical
|
Jan 13, 2026 |
| CVE-2025-14860 |
Use-after-free in the Disability Access APIs component
|
9.8
Critical
|
Dec 18, 2025 |
| CVE-2025-14330 |
JIT miscompilation in the JavaScript Engine: JIT component
|
9.8
Critical
|
Dec 9, 2025 |
| CVE-2025-14326 |
Use-after-free in the Audio/Video: GMP component
|
9.8
Critical
|
Dec 9, 2025 |
| CVE-2025-14324 |
JIT miscompilation in the JavaScript Engine: JIT component
|
9.8
Critical
|
Dec 9, 2025 |
| CVE-2025-14321 |
Use-after-free in the WebRTC: Signaling component
|
9.8
Critical
|
Dec 9, 2025 |
| CVE-2025-13026 |
Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component
|
9.8
Critical
|
Nov 11, 2025 |
| CVE-2025-13024 |
JIT miscompilation in the JavaScript Engine: JIT component
|
9.8
Critical
|
Nov 11, 2025 |
| CVE-2025-13023 |
Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component
|
9.8
Critical
|
Nov 11, 2025 |
| CVE-2025-13022 |
Incorrect boundary conditions in the Graphics: WebGPU component
|
9.8
Critical
|
Nov 11, 2025 |
| CVE-2025-13021 |
Incorrect boundary conditions in the Graphics: WebGPU component
|
9.8
Critical
|
Nov 11, 2025 |
| CVE-2025-12380 |
Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or…
|
9.8
Critical
|
Oct 28, 2025 |
| CVE-2025-11721 |
Memory safety bug present in Firefox 143 and Thunderbird 143
|
9.8
Critical
|
Oct 14, 2025 |