| CVE-2026-2773 |
Incorrect boundary conditions in the Web Audio component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2771 |
Undefined behavior in the DOM: Core & HTML component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2768 |
Sandbox escape in the Storage: IndexedDB component
|
10.0
Critical
|
Feb 24, 2026 |
| CVE-2026-2766 |
Use-after-free in the JavaScript Engine: JIT component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2764 |
JIT miscompilation, use-after-free in the JavaScript Engine: JIT component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2765 |
Use-after-free in the JavaScript Engine component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2763 |
Use-after-free in the JavaScript Engine component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2761 |
Sandbox escape in the Graphics: WebRender component
|
10.0
Critical
|
Feb 24, 2026 |
| CVE-2026-2762 |
Integer overflow in the JavaScript: Standard Library component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2760 |
Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component
|
10.0
Critical
|
Feb 24, 2026 |
| CVE-2026-2759 |
Incorrect boundary conditions in the Graphics: ImageLib component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2758 |
Use-after-free in the JavaScript: GC component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2757 |
Incorrect boundary conditions in the WebRTC: Audio/Video component
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-0892 |
Memory safety bugs present in Firefox 146 and Thunderbird 146
|
9.8
Critical
|
Jan 13, 2026 |
| CVE-2026-0884 |
Use-after-free in the JavaScript Engine component
|
9.8
Critical
|
Jan 13, 2026 |
| CVE-2026-0881 |
Sandbox escape in the Messaging System component
|
10.0
Critical
|
Jan 13, 2026 |
| CVE-2026-0879 |
Sandbox escape due to incorrect boundary conditions in the Graphics component
|
9.8
Critical
|
Jan 13, 2026 |
| CVE-2025-14330 |
JIT miscompilation in the JavaScript Engine: JIT component
|
9.8
Critical
|
Dec 9, 2025 |
| CVE-2025-14326 |
Use-after-free in the Audio/Video: GMP component
|
9.8
Critical
|
Dec 9, 2025 |
| CVE-2025-14324 |
JIT miscompilation in the JavaScript Engine: JIT component
|
9.8
Critical
|
Dec 9, 2025 |
| CVE-2025-14321 |
Use-after-free in the WebRTC: Signaling component
|
9.8
Critical
|
Dec 9, 2025 |
| CVE-2025-13026 |
Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component
|
9.8
Critical
|
Nov 11, 2025 |
| CVE-2025-13024 |
JIT miscompilation in the JavaScript Engine: JIT component
|
9.8
Critical
|
Nov 11, 2025 |
| CVE-2025-13023 |
Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component
|
9.8
Critical
|
Nov 11, 2025 |
| CVE-2025-13022 |
Incorrect boundary conditions in the Graphics: WebGPU component
|
9.8
Critical
|
Nov 11, 2025 |