Browse CVEs

CRITICAL 10.0 CVE-2026-75874 Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154 and Thunderbird 154. Firefox 154.0 / 154.0.0+ Fix from $5,7502026-08-18 CRITICAL 9.8 CVE-2026-74990 Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corr… Firefox 115.39.0 / 140.14.0+ Fix from $5,7502026-08-18 CRITICAL 9.8 CVE-2026-74987 Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corr… Firefox 140.14.0 / 153.1.0+ Fix from $5,7502026-08-18 CRITICAL 9.8 CVE-2026-74988 Internally found bugs present in Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another securi… Firefox 153.1.0+ Fix from $5,7502026-08-18 CRITICAL 9.8 CVE-2026-74989 Internally found bugs present in Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we … Firefox 154.0 / 154.0.0+ Fix from $5,7502026-08-18 CRITICAL 9.8 CVE-2026-74979 Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird … Firefox 153.1.0 / 154.0+ Fix from $5,7502026-08-18 CRITICAL 9.8 CVE-2026-74964 Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thun… Firefox 140.14.0 / 153.1.0+ Fix from $5,7502026-08-18 CRITICAL 9.1 CVE-2026-74961 Side-channel in the Web Audio component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. Firefox 153.1.0+ Fix from $5,7502026-08-18 CRITICAL 9.1 CVE-2026-74956 Same-origin policy bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and… Firefox 153.1.0 / 154.0+ Fix from $5,7502026-08-18 CRITICAL 9.8 CVE-2026-74940 Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.… Firefox 115.39.0 / 140.14.0+ Fix from $5,7502026-08-18 CRITICAL 9.8 CVE-2026-74943 Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR … Firefox 115.39.0 / 140.14.0+ Fix from $5,7502026-08-18 CRITICAL 9.8 CVE-2026-74944 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154… Firefox 140.14.0 / 153.1.0+ Fix from $5,7502026-08-18 CRITICAL 9.1 CVE-2026-74938 Mitigation bypass in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 1… Firefox 153.1.0 / 154.0+ Fix from $5,7502026-08-18 CRITICAL 9.8 CVE-2026-74936 Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderb… Firefox 140.14.0 / 153.1.0+ Fix from $5,7502026-08-18 CRITICAL 9.8 CVE-2026-16408 Integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. Firefox 153.0.0+ Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-16411 Memory safety bugs present in Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of the… Firefox 153.0.0+ Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-16412 Memory safety bugs present in Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with en… Firefox 140.13.0 / 153.0.0+ Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-16407 Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. Firefox 153.0 / 153.0.0+ Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-16410 JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. Firefox 153.0 / 153.0.0+ Fix from $2,3002026-07-21 CRITICAL 9.1 CVE-2026-16406 Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. Firefox 153.0.0+ Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-16402 Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. Firefox 153.0 / 153.0.0+ Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-16395 Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. Firefox 153.0.0+ Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-16389 Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153. Firefox 153.0 / 153.0.0+ Fix from $2,3002026-07-21 CRITICAL 9.1 CVE-2026-16394 Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. Firefox 153.0.0+ Fix from $2,3002026-07-21 CRITICAL 9.1 CVE-2026-16390 Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunder… Firefox 140.13.0 / 153.0+ Fix from $2,3002026-07-21 CRITICAL 9.1 CVE-2026-16393 Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. Firefox 153.0 / 153.0.0+ Fix from $2,3002026-07-21 CRITICAL 9.1 CVE-2026-16392 JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. Firefox 153.0 / 153.0.0+ Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-16382 Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. Firefox 153.0 / 153.0.0+ Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-16383 Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird… Firefox 140.13.0 / 153.0+ Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-16387 Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 1… Firefox 140.13.0 / 153.0+ Fix from $2,3002026-07-21