| CVE-2026-5734 |
Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1
|
8.1
High
|
Apr 7, 2026 |
| CVE-2026-5732 |
Incorrect boundary conditions, integer overflow in the Graphics: Text component
|
8.8
High
|
Apr 7, 2026 |
| CVE-2026-5731 |
Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and…
|
9.8
Critical
|
Apr 7, 2026 |
| CVE-2026-2447 |
Heap buffer overflow in libvpx
|
8.8
High
|
Feb 16, 2026 |
| CVE-2026-0890 |
Spoofing issue in the DOM: Copy & Paste and Drag & Drop component
|
5.4
Medium
|
Jan 13, 2026 |
| CVE-2026-0891 |
Memory safety bugs present in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146
|
8.1
High
|
Jan 13, 2026 |
| CVE-2026-0886 |
Incorrect boundary conditions in the Graphics component
|
5.3
Medium
|
Jan 13, 2026 |
| CVE-2026-0887 |
Clickjacking issue, information disclosure in the PDF Viewer component
|
4.3
Medium
|
Jan 13, 2026 |
| CVE-2026-0883 |
Information disclosure in the Networking component
|
5.3
Medium
|
Jan 13, 2026 |
| CVE-2026-0884 |
Use-after-free in the JavaScript Engine component
|
9.8
Critical
|
Jan 13, 2026 |
| CVE-2026-0885 |
Use-after-free in the JavaScript: GC component
|
6.5
Medium
|
Jan 13, 2026 |
| CVE-2026-0882 |
Use-after-free in the IPC component
|
8.8
High
|
Jan 13, 2026 |
| CVE-2026-0879 |
Sandbox escape due to incorrect boundary conditions in the Graphics component
|
9.8
Critical
|
Jan 13, 2026 |
| CVE-2026-0880 |
Sandbox escape due to integer overflow in the Graphics component
|
8.8
High
|
Jan 13, 2026 |
| CVE-2026-0878 |
Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component
|
8.0
High
|
Jan 13, 2026 |
| CVE-2026-0877 |
Mitigation bypass in the DOM: Security component
|
8.1
High
|
Jan 13, 2026 |
| CVE-2025-14333 |
Memory safety bugs present in Firefox ESR 140.5, Thunderbird ESR 140.5, Firefox 145 and Thunderbird 145
|
8.1
High
|
Dec 9, 2025 |
| CVE-2025-14331 |
Same-origin policy bypass in the Request Handling component
|
6.5
Medium
|
Dec 9, 2025 |
| CVE-2025-14330 |
JIT miscompilation in the JavaScript Engine: JIT component
|
9.8
Critical
|
Dec 9, 2025 |
| CVE-2025-14329 |
Privilege escalation in the Netmonitor component
|
8.8
High
|
Dec 9, 2025 |
| CVE-2025-14328 |
Privilege escalation in the Netmonitor component
|
8.8
High
|
Dec 9, 2025 |
| CVE-2025-14327 |
Spoofing issue in the Downloads Panel component
|
7.5
High
|
Dec 9, 2025 |
| CVE-2025-14325 |
JIT miscompilation in the JavaScript Engine: JIT component
|
7.3
High
|
Dec 9, 2025 |
| CVE-2025-14324 |
JIT miscompilation in the JavaScript Engine: JIT component
|
9.8
Critical
|
Dec 9, 2025 |
| CVE-2025-14323 |
Privilege escalation in the DOM: Notifications component
|
8.8
High
|
Dec 9, 2025 |