| CVE-2026-109730 |
Integer overflow in the Graphics component
|
8.8
Élevée
|
13 oct. 2026 |
| CVE-2026-109722 |
JIT miscompilation in the JavaScript Engine: JIT component
|
8.1
Élevée
|
13 oct. 2026 |
| CVE-2026-109725 |
Use-after-free in the DOM: Core & HTML component
|
5.4
Moyenne
|
13 oct. 2026 |
| CVE-2026-109726 |
Use-after-free in the SVG component
|
5.4
Moyenne
|
13 oct. 2026 |
| CVE-2026-109719 |
Race condition, use-after-free in the Graphics: CanvasWebGL component
|
4.2
Moyenne
|
13 oct. 2026 |
| CVE-2026-109712 |
Sandbox escape due to uninitialized memory in the Graphics component
|
7.1
Élevée
|
13 oct. 2026 |
| CVE-2026-109715 |
Incorrect boundary conditions in the JavaScript Engine component
|
8.1
Élevée
|
13 oct. 2026 |
| CVE-2026-109716 |
Incorrect boundary conditions in the JavaScript Engine component
|
8.1
Élevée
|
13 oct. 2026 |
| CVE-2026-109718 |
Use-after-free in the XML component
|
5.4
Moyenne
|
13 oct. 2026 |
| CVE-2026-109706 |
Use-after-free in the Storage: IndexedDB component
|
5.4
Moyenne
|
13 oct. 2026 |
| CVE-2026-109710 |
Use-after-free in the Graphics: Text component
|
5.4
Moyenne
|
13 oct. 2026 |
| CVE-2026-106016 |
Mitigation bypass in the File Handling component
|
9.8
Critique
|
6 oct. 2026 |
| CVE-2026-103500 |
An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB…
|
6.3
Moyenne
|
30 sept. 2026 |
| CVE-2026-100831 |
Use-after-free in the DOM: UI Events & Focus Handling component
|
8.8
Élevée
|
29 sept. 2026 |
| CVE-2026-100832 |
Use-after-free in the Graphics: Canvas2D component
|
8.8
Élevée
|
29 sept. 2026 |
| CVE-2026-100829 |
Mitigation bypass in the DOM: Security component
|
9.6
Critique
|
29 sept. 2026 |
| CVE-2026-100830 |
Mitigation bypass in the DOM: Navigation component
|
8.1
Élevée
|
29 sept. 2026 |
| CVE-2026-100826 |
Denial-of-service in the Storage: StorageManager component
|
6.5
Moyenne
|
29 sept. 2026 |
| CVE-2026-100828 |
Mitigation bypass in the Bookmarks & History component
|
9.6
Critique
|
29 sept. 2026 |
| CVE-2026-100824 |
Privilege escalation in the Places component
|
8.8
Élevée
|
29 sept. 2026 |
| CVE-2026-100825 |
Use-after-free in the JavaScript Engine: JIT component
|
8.8
Élevée
|
29 sept. 2026 |
| CVE-2026-100821 |
Site isolation issue in the Panning and Zooming component
|
4.7
Moyenne
|
29 sept. 2026 |
| CVE-2026-100822 |
Spoofing issue in the Networking: HTTP component
|
5.4
Moyenne
|
29 sept. 2026 |
| CVE-2026-100819 |
Sandbox escape due to incorrect boundary conditions in the XPCOM component
|
9.6
Critique
|
29 sept. 2026 |
| CVE-2026-100820 |
Privilege escalation in the Address Bar component
|
8.8
Élevée
|
29 sept. 2026 |