| CVE-2026-4720 |
Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148
|
9.8
Critical
|
Mar 24, 2026 |
| CVE-2026-4729 |
Memory safety bugs present in Firefox 148 and Thunderbird 148
|
9.8
Critical
|
Mar 24, 2026 |
| CVE-2026-4718 |
Undefined behavior in the WebRTC: Signaling component
|
8.1
High
|
Mar 24, 2026 |
| CVE-2026-4719 |
Incorrect boundary conditions in the Graphics: Text component
|
7.5
High
|
Mar 24, 2026 |
| CVE-2026-4727 |
Denial-of-service in the Libraries component in NSS
|
7.5
High
|
Mar 24, 2026 |
| CVE-2026-4728 |
Spoofing issue in the Privacy: Anti-Tracking component
|
6.5
Medium
|
Mar 24, 2026 |
| CVE-2026-4717 |
Privilege escalation in the Netmonitor component
|
9.8
Critical
|
Mar 24, 2026 |
| CVE-2026-4726 |
Denial-of-service in the XML component
|
7.5
High
|
Mar 24, 2026 |
| CVE-2026-4716 |
Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component
|
9.1
Critical
|
Mar 24, 2026 |
| CVE-2026-4714 |
Incorrect boundary conditions in the Audio/Video component
|
7.5
High
|
Mar 24, 2026 |
| CVE-2026-4715 |
Uninitialized memory in the Graphics: Canvas2D component
|
9.1
Critical
|
Mar 24, 2026 |
| CVE-2026-4712 |
Information disclosure in the Widget: Cocoa component
|
7.5
High
|
Mar 24, 2026 |
| CVE-2026-4713 |
Incorrect boundary conditions in the Graphics component
|
7.5
High
|
Mar 24, 2026 |
| CVE-2026-4711 |
Use-after-free in the Widget: Cocoa component
|
9.8
Critical
|
Mar 24, 2026 |
| CVE-2026-4725 |
Sandbox escape due to use-after-free in the Graphics: Canvas2D component
|
9.3
Critical
|
Mar 24, 2026 |
| CVE-2026-4710 |
Incorrect boundary conditions in the Audio/Video component
|
9.8
Critical
|
Mar 24, 2026 |
| CVE-2026-4709 |
Incorrect boundary conditions in the Audio/Video: GMP component
|
7.5
High
|
Mar 24, 2026 |
| CVE-2026-4708 |
Incorrect boundary conditions in the Graphics component
|
7.5
High
|
Mar 24, 2026 |
| CVE-2026-4706 |
Incorrect boundary conditions in the Graphics: Canvas2D component
|
7.5
High
|
Mar 24, 2026 |
| CVE-2026-4707 |
Incorrect boundary conditions in the Graphics: Canvas2D component
|
7.5
High
|
Mar 24, 2026 |
| CVE-2026-4704 |
Denial-of-service in the WebRTC: Signaling component
|
7.5
High
|
Mar 24, 2026 |
| CVE-2026-4705 |
Undefined behavior in the WebRTC: Signaling component
|
9.8
Critical
|
Mar 24, 2026 |
| CVE-2026-4723 |
Use-after-free in the JavaScript Engine component
|
9.8
Critical
|
Mar 24, 2026 |
| CVE-2026-4724 |
Undefined behavior in the Audio/Video component
|
9.1
Critical
|
Mar 24, 2026 |
| CVE-2026-4702 |
JIT miscompilation in the JavaScript Engine component
|
9.8
Critical
|
Mar 24, 2026 |