| CVE-2026-84140 |
Site isolation issue in the DOM: Navigation component
|
9.8
Critical
|
Sep 1, 2026 |
| CVE-2026-84139 |
Clickjacking issue in the DOM: Events component
|
9.8
Critical
|
Sep 1, 2026 |
| CVE-2026-84138 |
Denial-of-service in the PDF Viewer component
|
7.5
High
|
Sep 1, 2026 |
| CVE-2026-84137 |
Spoofing issue in the DOM: Core & HTML component
|
9.8
Critical
|
Sep 1, 2026 |
| CVE-2026-84136 |
Other issue in the DOM: Navigation component
|
9.8
Critical
|
Sep 1, 2026 |
| CVE-2026-84134 |
Other issue in the Profile Backup component
|
9.8
Critical
|
Sep 1, 2026 |
| CVE-2026-84133 |
Site isolation issue in the DOM: Push Subscriptions component
|
9.8
Critical
|
Sep 1, 2026 |
| CVE-2026-84132 |
Information disclosure in the Networking: HTTP component
|
7.5
High
|
Sep 1, 2026 |
| CVE-2026-84130 |
Information disclosure in the Graphics: WebGPU component
|
7.5
High
|
Sep 1, 2026 |
| CVE-2026-84129 |
Site isolation issue in the DOM: Navigation component
|
9.8
Critical
|
Sep 1, 2026 |
| CVE-2026-84128 |
Privilege escalation in the WebDriver BiDi component
|
8.8
High
|
Sep 1, 2026 |
| CVE-2026-84126 |
Incorrect boundary conditions in the Layout: Grid component
|
4.3
Medium
|
Sep 1, 2026 |
| CVE-2026-84125 |
Use-after-free in the DOM: Core & HTML component
|
5.4
Medium
|
Sep 1, 2026 |
| CVE-2026-84124 |
Use-after-free in the DOM: Core & HTML component
|
5.4
Medium
|
Sep 1, 2026 |
| CVE-2026-84123 |
Privilege escalation due to use-after-free in the Graphics: WebGPU component
|
8.8
High
|
Sep 1, 2026 |
| CVE-2026-84122 |
Use-after-free in the Audio/Video component
|
5.4
Medium
|
Sep 1, 2026 |
| CVE-2026-84118 |
Use-after-free in the JavaScript: GC component
|
5.4
Medium
|
Sep 1, 2026 |
| CVE-2026-84145 |
Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14
|
7.5
High
|
Sep 1, 2026 |
| CVE-2026-84131 |
Privilege escalation due to invalid pointer in the Graphics component
|
8.8
High
|
Sep 1, 2026 |
| CVE-2026-84121 |
Sandbox escape due to use-after-free in the DOM: Security component
|
9.6
Critical
|
Sep 1, 2026 |
| CVE-2026-84120 |
Use-after-free in the Audio/Video component
|
5.4
Medium
|
Sep 1, 2026 |
| CVE-2026-84119 |
Sandbox escape due to use-after-free in the DOM: Navigation component
|
9.6
Critical
|
Sep 1, 2026 |
| CVE-2026-74985 |
Privilege escalation in the Enterprise Policies component
|
9.8
Critical
|
Aug 18, 2026 |
| CVE-2026-74986 |
Site isolation issue in the CSS Parsing and Computation component
|
9.1
Critical
|
Aug 18, 2026 |
| CVE-2026-74988 |
Internally found bugs present in Firefox ESR 153.0 and Firefox 153
|
9.8
Critical
|
Aug 18, 2026 |