| CVE-2026-74989 |
Internally found bugs present in Firefox 153
|
9.8
Critical
|
Aug 18, 2026 |
| CVE-2026-74984 |
Race condition in the JavaScript Engine component
|
6.8
Medium
|
Aug 18, 2026 |
| CVE-2026-74981 |
Site isolation issue in the Audio/Video: Web Codecs component
|
8.1
High
|
Aug 18, 2026 |
| CVE-2026-74982 |
Denial-of-service in the Widget component
|
7.5
High
|
Aug 18, 2026 |
| CVE-2026-74977 |
Integer overflow in the Graphics component
|
7.5
High
|
Aug 18, 2026 |
| CVE-2026-74978 |
Clickjacking issue in the Widget component
|
8.1
High
|
Aug 18, 2026 |
| CVE-2026-74979 |
Mitigation bypass in the Add-ons Manager component
|
9.8
Critical
|
Aug 18, 2026 |
| CVE-2026-74966 |
Information disclosure in the Form Autofill component
|
7.5
High
|
Aug 18, 2026 |
| CVE-2026-74968 |
Site isolation issue in the Graphics: WebRender component
|
5.4
Medium
|
Aug 18, 2026 |
| CVE-2026-74970 |
Site isolation issue in the Graphics component
|
5.4
Medium
|
Aug 18, 2026 |
| CVE-2026-74961 |
Side-channel in the Web Audio component
|
9.1
Critical
|
Aug 18, 2026 |
| CVE-2026-74954 |
Information disclosure due to side-channel in the Storage: Cache API component
|
7.5
High
|
Aug 18, 2026 |
| CVE-2026-74955 |
Privilege escalation in the Request Handling component
|
8.8
High
|
Aug 18, 2026 |
| CVE-2026-74956 |
Same-origin policy bypass in the DOM: Service Workers component
|
9.1
Critical
|
Aug 18, 2026 |
| CVE-2026-74958 |
Information disclosure in the WebRTC component
|
7.5
High
|
Aug 18, 2026 |
| CVE-2026-74947 |
Privilege escalation due to invalid pointer in the Graphics component
|
8.8
High
|
Aug 18, 2026 |
| CVE-2026-74950 |
Privilege escalation in the Downloads API component
|
8.8
High
|
Aug 18, 2026 |
| CVE-2026-74952 |
Privilege escalation in the Application Update component
|
8.8
High
|
Aug 18, 2026 |
| CVE-2026-74937 |
Use-after-free in the JavaScript: GC component
|
8.8
High
|
Aug 18, 2026 |
| CVE-2026-74938 |
Mitigation bypass in the JavaScript: GC component
|
9.1
Critical
|
Aug 18, 2026 |
| CVE-2026-74990 |
Internally found bugs present in Firefox ESR 115.38, Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153
|
9.8
Critical
|
Aug 18, 2026 |
| CVE-2026-75874 |
Sandbox escape in the Remote Settings Client component
|
10.0
Critical
|
Aug 18, 2026 |
| CVE-2026-74974 |
Same-origin policy bypass in the Graphics: ImageLib component
|
5.4
Medium
|
Aug 18, 2026 |
| CVE-2026-74976 |
JIT miscompilation in the JavaScript Engine: JIT component
|
6.5
Medium
|
Aug 18, 2026 |
| CVE-2026-74987 |
Internally found bugs present in Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153
|
9.8
Critical
|
Aug 18, 2026 |