| CVE-2026-8956 |
Integer overflow in the Networking: JAR component
|
9.8
Critique
|
19 mai 2026 |
| CVE-2026-8953 |
Sandbox escape due to use-after-free in the Disability Access APIs component
|
9.6
Critique
|
19 mai 2026 |
| CVE-2026-8950 |
Same-origin policy bypass in the Networking: HTTP component
|
9.3
Critique
|
19 mai 2026 |
| CVE-2026-8948 |
Same-origin policy bypass in the DOM: Networking component
|
9.1
Critique
|
19 mai 2026 |
| CVE-2026-8401 |
Sandbox escape in the Profile Backup component
|
9.8
Critique
|
12 mai 2026 |
| CVE-2026-8094 |
Other issue in the WebRTC component
|
9.8
Critique
|
7 mai 2026 |
| CVE-2026-8091 |
Incorrect boundary conditions in the Audio/Video: Playback component
|
9.8
Critique
|
7 mai 2026 |
| CVE-2026-7321 |
Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component
|
9.6
Critique
|
28 avr. 2026 |
| CVE-2026-6771 |
Mitigation bypass in the DOM: Security component
|
9.8
Critique
|
21 avr. 2026 |
| CVE-2026-6768 |
Mitigation bypass in the Networking: Cookies component
|
9.8
Critique
|
21 avr. 2026 |
| CVE-2026-6760 |
Mitigation bypass in the Networking: Cookies component
|
9.8
Critique
|
21 avr. 2026 |
| CVE-2026-6748 |
Uninitialized memory in the Audio/Video: Web Codecs component
|
9.8
Critique
|
21 avr. 2026 |
| CVE-2026-5731 |
Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and…
|
9.8
Critique
|
7 avr. 2026 |
| CVE-2026-4721 |
Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and…
|
9.8
Critique
|
24 mars 2026 |
| CVE-2026-4720 |
Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148
|
9.8
Critique
|
24 mars 2026 |
| CVE-2026-4729 |
Memory safety bugs present in Firefox 148 and Thunderbird 148
|
9.8
Critique
|
24 mars 2026 |
| CVE-2026-4717 |
Privilege escalation in the Netmonitor component
|
9.8
Critique
|
24 mars 2026 |
| CVE-2026-4716 |
Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component
|
9.1
Critique
|
24 mars 2026 |
| CVE-2026-4715 |
Uninitialized memory in the Graphics: Canvas2D component
|
9.1
Critique
|
24 mars 2026 |
| CVE-2026-4711 |
Use-after-free in the Widget: Cocoa component
|
9.8
Critique
|
24 mars 2026 |
| CVE-2026-4725 |
Sandbox escape due to use-after-free in the Graphics: Canvas2D component
|
9.3
Critique
|
24 mars 2026 |
| CVE-2026-4710 |
Incorrect boundary conditions in the Audio/Video component
|
9.8
Critique
|
24 mars 2026 |
| CVE-2026-4705 |
Undefined behavior in the WebRTC: Signaling component
|
9.8
Critique
|
24 mars 2026 |
| CVE-2026-4723 |
Use-after-free in the JavaScript Engine component
|
9.8
Critique
|
24 mars 2026 |
| CVE-2026-4724 |
Undefined behavior in the Audio/Video component
|
9.1
Critique
|
24 mars 2026 |