| CVE-2026-0888 |
Information disclosure in the XML component
|
5.3
Moyenne
|
13 janv. 2026 |
| CVE-2026-0889 |
Denial-of-service in the DOM: Service Workers component
|
7.5
Élevée
|
13 janv. 2026 |
| CVE-2026-0886 |
Incorrect boundary conditions in the Graphics component
|
5.3
Moyenne
|
13 janv. 2026 |
| CVE-2026-0887 |
Clickjacking issue, information disclosure in the PDF Viewer component
|
4.3
Moyenne
|
13 janv. 2026 |
| CVE-2026-0883 |
Information disclosure in the Networking component
|
5.3
Moyenne
|
13 janv. 2026 |
| CVE-2026-0884 |
Use-after-free in the JavaScript Engine component
|
9.8
Critique
|
13 janv. 2026 |
| CVE-2026-0885 |
Use-after-free in the JavaScript: GC component
|
6.5
Moyenne
|
13 janv. 2026 |
| CVE-2026-0881 |
Sandbox escape in the Messaging System component
|
10.0
Critique
|
13 janv. 2026 |
| CVE-2026-0882 |
Use-after-free in the IPC component
|
8.8
Élevée
|
13 janv. 2026 |
| CVE-2026-0879 |
Sandbox escape due to incorrect boundary conditions in the Graphics component
|
9.8
Critique
|
13 janv. 2026 |
| CVE-2026-0880 |
Sandbox escape due to integer overflow in the Graphics component
|
8.8
Élevée
|
13 janv. 2026 |
| CVE-2026-0878 |
Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component
|
8.0
Élevée
|
13 janv. 2026 |
| CVE-2026-0877 |
Mitigation bypass in the DOM: Security component
|
8.1
Élevée
|
13 janv. 2026 |
| CVE-2025-14861 |
Memory safety bugs present in Firefox 146
|
8.8
Élevée
|
18 déc. 2025 |
| CVE-2025-14860 |
Use-after-free in the Disability Access APIs component
|
9.8
Critique
|
18 déc. 2025 |
| CVE-2025-14333 |
Memory safety bugs present in Firefox ESR 140.5, Thunderbird ESR 140.5, Firefox 145 and Thunderbird 145
|
8.1
Élevée
|
9 déc. 2025 |
| CVE-2025-14332 |
Memory safety bugs present in Firefox 145 and Thunderbird 145
|
7.3
Élevée
|
9 déc. 2025 |
| CVE-2025-14331 |
Same-origin policy bypass in the Request Handling component
|
6.5
Moyenne
|
9 déc. 2025 |
| CVE-2025-14330 |
JIT miscompilation in the JavaScript Engine: JIT component
|
9.8
Critique
|
9 déc. 2025 |
| CVE-2025-14329 |
Privilege escalation in the Netmonitor component
|
8.8
Élevée
|
9 déc. 2025 |
| CVE-2025-14328 |
Privilege escalation in the Netmonitor component
|
8.8
Élevée
|
9 déc. 2025 |
| CVE-2025-14327 |
Spoofing issue in the Downloads Panel component
|
7.5
Élevée
|
9 déc. 2025 |
| CVE-2025-14326 |
Use-after-free in the Audio/Video: GMP component
|
9.8
Critique
|
9 déc. 2025 |
| CVE-2025-14325 |
JIT miscompilation in the JavaScript Engine: JIT component
|
7.3
Élevée
|
9 déc. 2025 |
| CVE-2025-14324 |
JIT miscompilation in the JavaScript Engine: JIT component
|
9.8
Critique
|
9 déc. 2025 |