| CVE-2026-74940 |
Use-after-free in the Graphics: Text component
|
9.8
Critical
|
Aug 18, 2026 |
| CVE-2026-74936 |
Use-after-free in the JavaScript: WebAssembly component
|
9.8
Critical
|
Aug 18, 2026 |
| CVE-2026-16361 |
Memory safety bugs present in Thunderbird ESR 140.12
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16360 |
Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16412 |
Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16411 |
Memory safety bugs present in Thunderbird 152
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16410 |
JIT miscompilation in the JavaScript Engine: JIT component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16407 |
Mitigation bypass in the DOM: Service Workers component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16408 |
Integer overflow in the Audio/Video: Playback component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16406 |
Mitigation bypass in the Networking component
|
9.1
Critical
|
Jul 21, 2026 |
| CVE-2026-16402 |
Integer overflow in the Graphics: ImageLib component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16395 |
Integer overflow in the Audio/Video component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16394 |
Mitigation bypass in the DOM: Security component
|
9.1
Critical
|
Jul 21, 2026 |
| CVE-2026-16359 |
Incorrect boundary conditions in the Audio/Video: GMP component
|
9.1
Critical
|
Jul 21, 2026 |
| CVE-2026-16393 |
Incorrect boundary conditions in the Graphics: WebGPU component
|
9.1
Critical
|
Jul 21, 2026 |
| CVE-2026-16392 |
JIT miscompilation in the JavaScript Engine: JIT component
|
9.1
Critical
|
Jul 21, 2026 |
| CVE-2026-16390 |
Mitigation bypass in the Enterprise Policies component
|
9.1
Critical
|
Jul 21, 2026 |
| CVE-2026-16389 |
Incorrect boundary conditions, integer overflow in the Libraries component in NSS
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16388 |
Sandbox escape in the DOM: Networking component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16387 |
Site isolation issue in the Networking component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16383 |
Mitigation bypass in the DOM: Networking component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16382 |
Mitigation bypass in the DOM: Service Workers component
|
9.8
Critical
|
Jul 21, 2026 |
| CVE-2026-16381 |
Same-origin policy bypass in the Networking: DNS component
|
9.1
Critical
|
Jul 21, 2026 |
| CVE-2026-16380 |
Mitigation bypass in the Networking component
|
9.1
Critical
|
Jul 21, 2026 |
| CVE-2026-16358 |
Site isolation issue in the Graphics: WebRender component
|
9.8
Critical
|
Jul 21, 2026 |