| CVE-2026-109730 |
Integer overflow in the Graphics component
|
8.8
High
|
Oct 13, 2026 |
| CVE-2026-109722 |
JIT miscompilation in the JavaScript Engine: JIT component
|
8.1
High
|
Oct 13, 2026 |
| CVE-2026-109725 |
Use-after-free in the DOM: Core & HTML component
|
5.4
Medium
|
Oct 13, 2026 |
| CVE-2026-109726 |
Use-after-free in the SVG component
|
5.4
Medium
|
Oct 13, 2026 |
| CVE-2026-109719 |
Race condition, use-after-free in the Graphics: CanvasWebGL component
|
4.2
Medium
|
Oct 13, 2026 |
| CVE-2026-109712 |
Sandbox escape due to uninitialized memory in the Graphics component
|
7.1
High
|
Oct 13, 2026 |
| CVE-2026-109715 |
Incorrect boundary conditions in the JavaScript Engine component
|
8.1
High
|
Oct 13, 2026 |
| CVE-2026-109716 |
Incorrect boundary conditions in the JavaScript Engine component
|
8.1
High
|
Oct 13, 2026 |
| CVE-2026-109718 |
Use-after-free in the XML component
|
5.4
Medium
|
Oct 13, 2026 |
| CVE-2026-109706 |
Use-after-free in the Storage: IndexedDB component
|
5.4
Medium
|
Oct 13, 2026 |
| CVE-2026-109710 |
Use-after-free in the Graphics: Text component
|
5.4
Medium
|
Oct 13, 2026 |
| CVE-2026-106016 |
Mitigation bypass in the File Handling component
|
9.8
Critical
|
Oct 6, 2026 |
| CVE-2026-103500 |
An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB…
|
6.3
Medium
|
Sep 30, 2026 |
| CVE-2026-100831 |
Use-after-free in the DOM: UI Events & Focus Handling component
|
8.8
High
|
Sep 29, 2026 |
| CVE-2026-100832 |
Use-after-free in the Graphics: Canvas2D component
|
8.8
High
|
Sep 29, 2026 |
| CVE-2026-100829 |
Mitigation bypass in the DOM: Security component
|
9.6
Critical
|
Sep 29, 2026 |
| CVE-2026-100830 |
Mitigation bypass in the DOM: Navigation component
|
8.1
High
|
Sep 29, 2026 |
| CVE-2026-100826 |
Denial-of-service in the Storage: StorageManager component
|
6.5
Medium
|
Sep 29, 2026 |
| CVE-2026-100828 |
Mitigation bypass in the Bookmarks & History component
|
9.6
Critical
|
Sep 29, 2026 |
| CVE-2026-100824 |
Privilege escalation in the Places component
|
8.8
High
|
Sep 29, 2026 |
| CVE-2026-100825 |
Use-after-free in the JavaScript Engine: JIT component
|
8.8
High
|
Sep 29, 2026 |
| CVE-2026-100821 |
Site isolation issue in the Panning and Zooming component
|
4.7
Medium
|
Sep 29, 2026 |
| CVE-2026-100822 |
Spoofing issue in the Networking: HTTP component
|
5.4
Medium
|
Sep 29, 2026 |
| CVE-2026-100819 |
Sandbox escape due to incorrect boundary conditions in the XPCOM component
|
9.6
Critical
|
Sep 29, 2026 |
| CVE-2026-100820 |
Privilege escalation in the Address Bar component
|
8.8
High
|
Sep 29, 2026 |