| CVE-2026-92075 |
Mitigation bypass in the Networking component
|
9.1
Critique
|
15 sept. 2026 |
| CVE-2026-92071 |
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
|
9.6
Critique
|
15 sept. 2026 |
| CVE-2026-92066 |
Sandbox escape in the Profile Backup component
|
9.8
Critique
|
15 sept. 2026 |
| CVE-2026-92061 |
Incorrect boundary conditions in the Security: Process Sandboxing component
|
9.8
Critique
|
15 sept. 2026 |
| CVE-2026-92059 |
Incorrect boundary conditions in the DOM: Editor component
|
9.3
Critique
|
15 sept. 2026 |
| CVE-2026-92057 |
Mitigation bypass in the Enterprise Policies component
|
9.1
Critique
|
15 sept. 2026 |
| CVE-2026-92051 |
Spoofing issue due to invalid pointer in the Graphics component
|
9.1
Critique
|
15 sept. 2026 |
| CVE-2026-92050 |
Sandbox escape due to race condition in the XPConnect component
|
9.1
Critique
|
15 sept. 2026 |
| CVE-2026-92048 |
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
|
9.0
Critique
|
15 sept. 2026 |
| CVE-2026-92045 |
Sandbox escape due to incorrect boundary conditions in the WebRTC component
|
9.6
Critique
|
15 sept. 2026 |
| CVE-2026-92041 |
Mitigation bypass in the DOM: Networking component
|
9.1
Critique
|
15 sept. 2026 |
| CVE-2026-92038 |
Mitigation bypass in the Remote Settings Client component
|
9.1
Critique
|
15 sept. 2026 |
| CVE-2026-92037 |
Incorrect boundary conditions in the DOM: Animation component
|
9.8
Critique
|
15 sept. 2026 |
| CVE-2026-92036 |
Incorrect boundary conditions in the Networking: HTTP component
|
9.8
Critique
|
15 sept. 2026 |
| CVE-2026-92035 |
Sandbox escape due to incorrect boundary conditions in the Graphics component
|
9.6
Critique
|
15 sept. 2026 |
| CVE-2026-92034 |
Site isolation issue in the Graphics component
|
9.1
Critique
|
15 sept. 2026 |
| CVE-2026-92032 |
Sandbox escape due to invalid pointer in the Graphics component
|
9.6
Critique
|
15 sept. 2026 |
| CVE-2026-92018 |
Sandbox escape in the DOM: Core & HTML component
|
9.6
Critique
|
15 sept. 2026 |
| CVE-2026-84143 |
Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14
|
9.8
Critique
|
1 sept. 2026 |
| CVE-2026-84142 |
Internally found bugs present in Thunderbird 154
|
9.8
Critique
|
1 sept. 2026 |
| CVE-2026-84141 |
Integer overflow in the Graphics: ImageLib component
|
9.8
Critique
|
1 sept. 2026 |
| CVE-2026-84140 |
Site isolation issue in the DOM: Navigation component
|
9.8
Critique
|
1 sept. 2026 |
| CVE-2026-84139 |
Clickjacking issue in the DOM: Events component
|
9.8
Critique
|
1 sept. 2026 |
| CVE-2026-84137 |
Spoofing issue in the DOM: Core & HTML component
|
9.8
Critique
|
1 sept. 2026 |
| CVE-2026-84136 |
Other issue in the DOM: Navigation component
|
9.8
Critique
|
1 sept. 2026 |