| CVE-2026-12289 |
Privilege escalation in the Graphics: WebRender component
|
8.8
Élevée
|
16 juin 2026 |
| CVE-2026-10702 |
JIT miscompilation in the JavaScript Engine: JIT component
|
4.3
Moyenne
|
2 juin 2026 |
| CVE-2026-10701 |
Incorrect boundary conditions in the Graphics: Text component
|
7.5
Élevée
|
2 juin 2026 |
| CVE-2026-8975 |
Memory safety bugs present in Thunderbird 140.10 and Thunderbird 150
|
8.8
Élevée
|
19 mai 2026 |
| CVE-2026-8974 |
Memory safety bugs present in Thunderbird 140.10 and Thunderbird 150
|
8.8
Élevée
|
19 mai 2026 |
| CVE-2026-8973 |
Memory safety bugs present in Thunderbird 150
|
8.8
Élevée
|
19 mai 2026 |
| CVE-2026-8972 |
Privilege escalation in the WebRTC: Audio/Video component
|
8.8
Élevée
|
19 mai 2026 |
| CVE-2026-8971 |
Same-origin policy bypass in the Networking: JAR component
|
6.5
Moyenne
|
19 mai 2026 |
| CVE-2026-8970 |
Privilege escalation in the Security component
|
8.8
Élevée
|
19 mai 2026 |
| CVE-2026-8969 |
Mitigation bypass in the DOM: Security component
|
8.1
Élevée
|
19 mai 2026 |
| CVE-2026-8968 |
Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component
|
7.5
Élevée
|
19 mai 2026 |
| CVE-2026-8967 |
Information disclosure in the Graphics: WebGPU component
|
7.5
Élevée
|
19 mai 2026 |
| CVE-2026-8966 |
Information disclosure in the IP Protection component
|
7.5
Élevée
|
19 mai 2026 |
| CVE-2026-8965 |
Information disclosure in the DOM: Security component
|
7.5
Élevée
|
19 mai 2026 |
| CVE-2026-8964 |
Spoofing issue in the Popup Blocker component
|
7.5
Élevée
|
19 mai 2026 |
| CVE-2026-8963 |
Spoofing issue in the Web Speech component
|
7.5
Élevée
|
19 mai 2026 |
| CVE-2026-8962 |
Mitigation bypass in the DOM: Security component
|
8.1
Élevée
|
19 mai 2026 |
| CVE-2026-8961 |
Spoofing issue in the Form Autofill component
|
6.5
Moyenne
|
19 mai 2026 |
| CVE-2026-8960 |
Spoofing issue in WebExtensions
|
7.5
Élevée
|
19 mai 2026 |
| CVE-2026-8959 |
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
|
9.6
Critique
|
19 mai 2026 |
| CVE-2026-8958 |
Information disclosure, sandbox escape in the Security: Process Sandboxing component
|
8.6
Élevée
|
19 mai 2026 |
| CVE-2026-8957 |
Privilege escalation in the Enterprise Policies component
|
8.8
Élevée
|
19 mai 2026 |
| CVE-2026-8956 |
Integer overflow in the Networking: JAR component
|
9.8
Critique
|
19 mai 2026 |
| CVE-2026-8955 |
Privilege escalation in the DOM: Workers component
|
8.8
Élevée
|
19 mai 2026 |
| CVE-2026-8954 |
Incorrect boundary conditions, integer overflow in the Audio/Video component
|
7.5
Élevée
|
19 mai 2026 |