| CVE-2026-4722 |
Privilege escalation in the IPC component
|
8.8
High
|
Mar 24, 2026 |
| CVE-2026-4701 |
Use-after-free in the JavaScript Engine component
|
9.8
Critical
|
Mar 24, 2026 |
| CVE-2026-4699 |
Incorrect boundary conditions in the Layout: Text and Fonts component
|
7.5
High
|
Mar 24, 2026 |
| CVE-2026-4700 |
Mitigation bypass in the Networking: HTTP component
|
9.8
Critical
|
Mar 24, 2026 |
| CVE-2026-4697 |
Incorrect boundary conditions in the Audio/Video: Web Codecs component
|
7.5
High
|
Mar 24, 2026 |
| CVE-2026-4698 |
JIT miscompilation in the JavaScript Engine: JIT component
|
8.8
High
|
Mar 24, 2026 |
| CVE-2026-4695 |
Incorrect boundary conditions in the Audio/Video: Web Codecs component
|
7.5
High
|
Mar 24, 2026 |
| CVE-2026-4696 |
Use-after-free in the Layout: Text and Fonts component
|
9.8
Critical
|
Mar 24, 2026 |
| CVE-2026-4693 |
Incorrect boundary conditions in the Audio/Video: Playback component
|
7.5
High
|
Mar 24, 2026 |
| CVE-2026-4694 |
Incorrect boundary conditions, integer overflow in the Graphics component
|
7.5
High
|
Mar 24, 2026 |
| CVE-2026-4691 |
Use-after-free in the CSS Parsing and Computation component
|
9.8
Critical
|
Mar 24, 2026 |
| CVE-2026-4692 |
Sandbox escape in the Responsive Design Mode component
|
9.6
Critical
|
Mar 24, 2026 |
| CVE-2026-4689 |
Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component
|
10.0
Critical
|
Mar 24, 2026 |
| CVE-2026-4690 |
Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component
|
9.6
Critical
|
Mar 24, 2026 |
| CVE-2026-4687 |
Sandbox escape due to incorrect boundary conditions in the Telemetry component
|
9.6
Critical
|
Mar 24, 2026 |
| CVE-2026-4688 |
Sandbox escape due to use-after-free in the Disability Access APIs component
|
9.6
Critical
|
Mar 24, 2026 |
| CVE-2026-4685 |
Incorrect boundary conditions in the Graphics: Canvas2D component
|
7.5
High
|
Mar 24, 2026 |
| CVE-2026-4686 |
Incorrect boundary conditions in the Graphics: Canvas2D component
|
7.5
High
|
Mar 24, 2026 |
| CVE-2026-4684 |
Race condition, use-after-free in the Graphics: WebRender component
|
7.5
High
|
Mar 24, 2026 |
| CVE-2026-2807 |
Memory safety bugs present in Firefox 147 and Thunderbird 147
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2806 |
Uninitialized memory in the Graphics: Text component
|
9.1
Critical
|
Feb 24, 2026 |
| CVE-2026-2804 |
Use-after-free in the JavaScript: WebAssembly component
|
5.4
Medium
|
Feb 24, 2026 |
| CVE-2026-2805 |
Invalid pointer in the DOM: Core & HTML component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2803 |
Information disclosure, mitigation bypass in the Settings UI component
|
7.5
High
|
Feb 24, 2026 |
| CVE-2026-2802 |
Race condition in the JavaScript: GC component
|
4.2
Medium
|
Feb 24, 2026 |