Browse CVEs

MEDIUM 6.5 CVE-2026-12309 Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. Firefox 140.12.0 / 152.0.0+ Fix from $1,6002026-06-16 MEDIUM 5.3 CVE-2026-12308 Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. Firefox 140.12.0 / 152.0.0+ Fix from $1,6002026-06-16 CRITICAL 9.1 CVE-2026-12304 Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and… Firefox 140.12.0 / 152.0.0+ Fix from $2,3002026-06-16 HIGH 7.5 CVE-2026-12305 Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. Firefox 140.12.0 / 152.0.0+ Fix from $1,9502026-06-16 MEDIUM 6.5 CVE-2026-12302 Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 15… Firefox 140.12.0 / 152.0.0+ Fix from $1,6002026-06-16 MEDIUM 5.4 CVE-2026-12298 Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. Firefox 140.12.0 / 152.0+ Fix from $1,6002026-06-16 MEDIUM 5.4 CVE-2026-12299 JIT miscompilation in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbir… Firefox 115.37.0 / 140.12.0+ Fix from $1,6002026-06-16 MEDIUM 5.3 CVE-2026-12300 Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152. Firefox 152.0.0+ Fix from $1,6002026-06-16 MEDIUM 5.3 CVE-2026-12301 Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152. Firefox 152.0.0+ Fix from $1,6002026-06-16 MEDIUM 5.3 CVE-2026-12306 Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. Firefox 140.12.0 / 152.0.0+ Fix from $1,6002026-06-16 MEDIUM 5.3 CVE-2026-12307 Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. Firefox 140.12.0 / 152.0.0+ Fix from $1,6002026-06-16 CRITICAL 9.8 CVE-2026-12293 Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Thunderbird 152. Firefox 152.0.0+ Fix from $2,3002026-06-16 CRITICAL 9.6 CVE-2026-12294 Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, a… Firefox 115.37.0 / 140.12.0+ Fix from $2,3002026-06-16 CRITICAL 9.6 CVE-2026-12295 Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152… Firefox 115.37.0 / 140.12.0+ Fix from $2,3002026-06-16 CRITICAL 9.6 CVE-2026-12296 Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and T… Firefox 140.12.0 / 152.0.0+ Fix from $2,3002026-06-16 CRITICAL 9.6 CVE-2026-12297 Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Fir… Firefox 115.37.0 / 140.12.0+ Fix from $2,3002026-06-16 HIGH 8.8 CVE-2026-12289 Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thund… Firefox 115.37.0 / 140.12.0+ Fix from $1,9502026-06-16 HIGH 8.8 CVE-2026-12291 Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 15… Firefox 115.37.0 / 140.12.0+ Fix from $1,9502026-06-16 HIGH 8.1 CVE-2026-12290 Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thu… Firefox 115.37.0 / 140.12.0+ Fix from $1,9502026-06-16 HIGH 8.1 CVE-2026-12292 Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thund… Firefox 140.12.0 / 152.0.0+ Fix from $1,9502026-06-16 HIGH 7.5 CVE-2026-11799 UXSS in Focus for iOS / Klar Webkit navigation. This vulnerability was fixed in Focus for iOS 151.3.1 and Klar for iOS 151.3.1. Focus 151.3.1+ Fix from $1,9502026-06-09 HIGH 7.5 CVE-2026-10701 Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 151.0.3. Firefox 151.0.3+ Fix from $1,9502026-06-02 MEDIUM 5.4 CVE-2026-9308 Firefox for iOS Reader View replaced page content in its HTML template before replacing other internal placeholders. A malicious page could include a… Firefox 151.2+ Fix from $1,6002026-06-01 MEDIUM 5.4 CVE-2026-9309 Firefox for iOS Reader View did not properly escape HTML tags in JSON-LD metadata. A malicious page could inject markup that changed Reader View beha… Firefox 151.2+ Fix from $1,6002026-06-01 MEDIUM 5.4 CVE-2026-9078 Firefox for iOS displayed specially crafted right-to-left (RTL) and internationalized domain names (IDNs) incorrectly in link preview UI surfaces. A … Firefox 151.1+ Fix from $1,6002026-05-25 MEDIUM 6.5 CVE-2026-8706 Firefox for iOS hosted Reader mode on an unauthenticated local web server, allowing another application on the same device to request arbitrary URLs … Firefox 151.0+ Fix from $1,6002026-05-19 HIGH 8.8 CVE-2026-8975 Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we … Firefox 115.36.0 / 140.11+ Fix from $1,9502026-05-19 HIGH 8.8 CVE-2026-8970 Privilege escalation in the Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140… Firefox 140.11 / 140.11.0+ Fix from $1,9502026-05-19 HIGH 8.8 CVE-2026-8972 Privilege escalation in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. Firefox 151.0.0+ Fix from $1,9502026-05-19 HIGH 8.8 CVE-2026-8973 Memory safety bugs present in Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of the… Firefox 151.0.0+ Fix from $1,9502026-05-19