| CVE-2026-2775 |
Mitigation bypass in the DOM: HTML Parser component
|
9.8
Critique
|
24 févr. 2026 |
| CVE-2026-2773 |
Incorrect boundary conditions in the Web Audio component
|
9.8
Critique
|
24 févr. 2026 |
| CVE-2026-2774 |
Integer overflow in the Audio/Video component
|
8.8
Élevée
|
24 févr. 2026 |
| CVE-2026-2772 |
Use-after-free in the Audio/Video: Playback component
|
8.8
Élevée
|
24 févr. 2026 |
| CVE-2026-2771 |
Undefined behavior in the DOM: Core & HTML component
|
9.8
Critique
|
24 févr. 2026 |
| CVE-2026-2770 |
Use-after-free in the DOM: Bindings (WebIDL) component
|
8.8
Élevée
|
24 févr. 2026 |
| CVE-2026-2768 |
Sandbox escape in the Storage: IndexedDB component
|
10.0
Critique
|
24 févr. 2026 |
| CVE-2026-2769 |
Use-after-free in the Storage: IndexedDB component
|
8.8
Élevée
|
24 févr. 2026 |
| CVE-2026-2767 |
Use-after-free in the JavaScript: WebAssembly component
|
8.8
Élevée
|
24 févr. 2026 |
| CVE-2026-2766 |
Use-after-free in the JavaScript Engine: JIT component
|
9.8
Critique
|
24 févr. 2026 |
| CVE-2026-2764 |
JIT miscompilation, use-after-free in the JavaScript Engine: JIT component
|
9.8
Critique
|
24 févr. 2026 |
| CVE-2026-2765 |
Use-after-free in the JavaScript Engine component
|
9.8
Critique
|
24 févr. 2026 |
| CVE-2026-2763 |
Use-after-free in the JavaScript Engine component
|
9.8
Critique
|
24 févr. 2026 |
| CVE-2026-2761 |
Sandbox escape in the Graphics: WebRender component
|
10.0
Critique
|
24 févr. 2026 |
| CVE-2026-2762 |
Integer overflow in the JavaScript: Standard Library component
|
9.8
Critique
|
24 févr. 2026 |
| CVE-2026-2760 |
Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component
|
10.0
Critique
|
24 févr. 2026 |
| CVE-2026-2759 |
Incorrect boundary conditions in the Graphics: ImageLib component
|
9.8
Critique
|
24 févr. 2026 |
| CVE-2026-2758 |
Use-after-free in the JavaScript: GC component
|
9.8
Critique
|
24 févr. 2026 |
| CVE-2026-2757 |
Incorrect boundary conditions in the WebRTC: Audio/Video component
|
9.8
Critique
|
24 févr. 2026 |
| CVE-2026-2447 |
Heap buffer overflow in libvpx
|
8.8
Élevée
|
16 févr. 2026 |
| CVE-2026-0818 |
When a user explicitly requested Thunderbird to decrypt an inline OpenPGP message that was embedded in a text section of…
|
4.3
Moyenne
|
28 janv. 2026 |
| CVE-2026-0890 |
Spoofing issue in the DOM: Copy & Paste and Drag & Drop component
|
5.4
Moyenne
|
13 janv. 2026 |
| CVE-2026-0891 |
Memory safety bugs present in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146
|
8.1
Élevée
|
13 janv. 2026 |
| CVE-2026-0892 |
Memory safety bugs present in Firefox 146 and Thunderbird 146
|
9.8
Critique
|
13 janv. 2026 |
| CVE-2026-0888 |
Information disclosure in the XML component
|
5.3
Moyenne
|
13 janv. 2026 |