| CVE-2026-92020 |
Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component
|
8.8
High
|
Sep 15, 2026 |
| CVE-2026-92019 |
Mitigation bypass in the Remote Settings Client component
|
8.1
High
|
Sep 15, 2026 |
| CVE-2026-92018 |
Sandbox escape in the DOM: Core & HTML component
|
9.6
Critical
|
Sep 15, 2026 |
| CVE-2026-92017 |
Privilege escalation in the DOM: Service Workers component
|
8.8
High
|
Sep 15, 2026 |
| CVE-2026-92016 |
Use-after-free in the Disability Access APIs component
|
8.8
High
|
Sep 15, 2026 |
| CVE-2026-92015 |
Privilege escalation in the WebExtensions component
|
8.8
High
|
Sep 15, 2026 |
| CVE-2026-92014 |
Privilege escalation due to incorrect boundary conditions in the Graphics component
|
8.8
High
|
Sep 15, 2026 |
| CVE-2026-92013 |
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
|
8.8
High
|
Sep 15, 2026 |
| CVE-2026-92012 |
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
|
8.8
High
|
Sep 15, 2026 |
| CVE-2026-92011 |
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
|
8.8
High
|
Sep 15, 2026 |
| CVE-2026-92010 |
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
|
8.8
High
|
Sep 15, 2026 |
| CVE-2026-92009 |
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
|
8.8
High
|
Sep 15, 2026 |
| CVE-2026-92008 |
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
|
8.8
High
|
Sep 15, 2026 |
| CVE-2026-92007 |
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
|
8.8
High
|
Sep 15, 2026 |
| CVE-2026-92006 |
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
|
8.8
High
|
Sep 15, 2026 |
| CVE-2026-92005 |
Use-after-free in the Audio/Video: Web Codecs component
|
5.3
Medium
|
Sep 15, 2026 |
| CVE-2026-84641 |
A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response
|
7.5
High
|
Sep 1, 2026 |
| CVE-2026-84642 |
The values of the mail.allowed_attachment_hostnames advanced config setting were used in a regular expression without…
|
7.5
High
|
Sep 1, 2026 |
| CVE-2026-84639 |
Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used
|
9.1
Critical
|
Sep 1, 2026 |
| CVE-2026-84640 |
A maliciously constructed mail header could lead to a one byte read past the end of a buffer
|
7.5
High
|
Sep 1, 2026 |
| CVE-2026-84637 |
Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on…
|
9.8
Critical
|
Sep 1, 2026 |
| CVE-2026-84144 |
Internally found bugs present in Thunderbird 154 and Thunderbird ESR 153.1
|
7.5
High
|
Sep 1, 2026 |
| CVE-2026-84143 |
Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14
|
9.8
Critical
|
Sep 1, 2026 |
| CVE-2026-84142 |
Internally found bugs present in Thunderbird 154
|
9.8
Critical
|
Sep 1, 2026 |
| CVE-2026-84141 |
Integer overflow in the Graphics: ImageLib component
|
9.8
Critical
|
Sep 1, 2026 |