Search Results (3404 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-74942 1 Mozilla 1 Firefox 2026-08-18 8.8 High
Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-75874 1 Mozilla 1 Firefox 2026-08-18 10 Critical
Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154 and Thunderbird 154.
CVE-2026-74990 1 Mozilla 1 Firefox 2026-08-18 9.8 Critical
Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74972 1 Mozilla 1 Firefox 2026-08-18 4.3 Medium
Information disclosure in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74971 1 Mozilla 1 Firefox 2026-08-18 4.3 Medium
Information disclosure in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74951 1 Mozilla 1 Firefox 2026-08-18 6.5 Medium
Clickjacking issue in Firefox for Android. This vulnerability was fixed in Firefox 154.
CVE-2026-74952 1 Mozilla 1 Firefox 2026-08-18 8.8 High
Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 154 and Thunderbird 154.
CVE-2026-74983 1 Mozilla 1 Firefox 2026-08-18 3.4 Low
Mitigation bypass in the Data Loss Prevention component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74977 1 Mozilla 1 Firefox 2026-08-18 7.5 High
Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74964 1 Mozilla 1 Firefox 2026-08-18 6.1 Medium
Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74960 1 Mozilla 1 Firefox 2026-08-18 6.1 Medium
Site isolation issue in the WebExtensions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74948 1 Mozilla 1 Firefox 2026-08-18 7.5 High
Information disclosure in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74941 1 Mozilla 1 Firefox 2026-08-18 8.8 High
Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74939 1 Mozilla 1 Firefox 2026-08-18 8.8 High
Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74970 1 Mozilla 1 Firefox 2026-08-18 5.4 Medium
Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74968 1 Mozilla 1 Firefox 2026-08-18 5.4 Medium
Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74975 1 Mozilla 1 Firefox 2026-08-18 5.4 Medium
Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.
CVE-2026-74980 1 Mozilla 1 Firefox 2026-08-18 N/A
Clickjacking issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.
CVE-2026-8091 1 Mozilla 2 Firefox, Thunderbird 2026-08-11 9.8 Critical
Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, Thunderbird 140.10.1, and Firefox ESR 115.35.2.
CVE-2026-18809 1 Mozilla 1 Firefox 2026-08-04 6.5 Medium
Information disclosure in Firefox for Android and Firefox Focus for Android. This vulnerability was fixed in Firefox 153.0.3.