Browse CVEs

CRITICAL 9.1 CVE-2026-16364 Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. Firefox 153.0 / 153.0.0+ Fix from $2,3002026-07-21 HIGH 8.1 CVE-2026-12328 Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151. Some of these bugs sho… Firefox 115.37.0 / 140.12.0+ Fix from $1,9502026-06-16 HIGH 8.1 CVE-2026-8093 Memory safety bugs present in Firefox 150.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of… Firefox 150.0.2+ Fix from $1,9502026-05-07 CRITICAL 9.6 CVE-2026-7321 Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Thunderbird 150… Firefox 140.10.1 / 150.0+ Fix from $2,3002026-04-28 CRITICAL 9.8 CVE-2026-5734 Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed eviden… Firefox 140.9.1 / 149.0.2+ Fix from $2,3002026-04-07 CRITICAL 9.8 CVE-2026-4729 Memory safety bugs present in Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enoug… Firefox 149.0+ Fix from $2,3002026-03-24 CRITICAL 9.8 CVE-2026-4720 Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory… Firefox 140.9.0 / 149.0+ Fix from $2,3002026-03-24 CRITICAL 9.8 CVE-2026-4721 Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showe… Firefox 115.34.0 / 140.9.0+ Fix from $2,3002026-03-24 CRITICAL 10.0 CVE-2026-4689 Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability was fixed in Firefox 149, Firefox ES… Firefox 115.34.0 / 140.9.0+ Fix from $2,3002026-03-24 HIGH 8.6 CVE-2026-4687 Sandbox escape due to incorrect boundary conditions in the Telemetry component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Fire… Firefox 115.34.0 / 140.9.0+ Fix from $1,9502026-03-24 HIGH 8.6 CVE-2026-4690 Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability was fixed in Firefox 149, Firefox ES… Firefox 115.34.0 / 140.9.0+ Fix from $1,9502026-03-24 HIGH 8.8 CVE-2024-10467 Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of these bugs showed evidence of memory corruption and we p… Firefox 128.4.0 / 132.0+ Fix from $1,9502024-10-29 HIGH 7.5 CVE-2024-6604 Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bugs showed evidence of memory corruption and we… Firefox 115.13 / 126.0+ Fix from $1,9502024-07-09 HIGH 8.8 CVE-2023-4582 Due to large allocation checks in Angle for glsl shaders being too lenient a buffer overflow could have occurred when allocating too much private sha… Firefox 115.2 / 117.0+ Fix from $1,9502023-09-11 HIGH 7.5 CVE-2023-4055 When the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar sent to the host was no longer consistent with expecte… Firefox 102.14 / 115.1+ Fix from $1,9502023-08-01 HIGH 8.8 CVE-2019-11759 An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the stack. This could be used by an attacker to… Firefox 68.2 / 70.0+ Fix from $1,9502020-01-08 CRITICAL 9.8 CVE-2014-1524EPSS 8% The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonk… Firefox 24.5 / 29.0+ Fix from $2,3002014-04-30 HIGH 8.8 CVE-2014-1509EPSS 5% Buffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo, as used in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunder… Firefox 24.4 / 28.0+ Fix from $1,9502014-03-19 HIGH 9.3 CVE-2013-0760EPSS 5% Buffer overflow in the CharDistributionAnalysis::HandleOneChar function in Mozilla Firefox before 18.0, Thunderbird before 17.0.2, and SeaMonkey befo… Firefox 2.15 / 10.0.11+ Fix from $1,9502013-01-13