Search Results (3404 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-74989 1 Mozilla 1 Firefox 2026-08-18 N/A
Internally found bugs present in Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154 and Thunderbird 154.
CVE-2026-74978 1 Mozilla 1 Firefox 2026-08-18 8.1 High
Clickjacking issue in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74936 1 Mozilla 1 Firefox 2026-08-18 7.5 High
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74977 1 Mozilla 1 Firefox 2026-08-18 7.5 High
Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74960 1 Mozilla 1 Firefox 2026-08-18 6.1 Medium
Site isolation issue in the WebExtensions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74948 1 Mozilla 1 Firefox 2026-08-18 7.5 High
Information disclosure in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74970 1 Mozilla 1 Firefox 2026-08-18 5.4 Medium
Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74968 1 Mozilla 1 Firefox 2026-08-18 5.4 Medium
Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74975 1 Mozilla 1 Firefox 2026-08-18 5.4 Medium
Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.
CVE-2026-74980 1 Mozilla 1 Firefox 2026-08-18 N/A
Clickjacking issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.
CVE-2026-8091 1 Mozilla 2 Firefox, Thunderbird 2026-08-11 9.8 Critical
Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, Thunderbird 140.10.1, and Firefox ESR 115.35.2.
CVE-2026-18809 1 Mozilla 1 Firefox 2026-08-04 6.5 Medium
Information disclosure in Firefox for Android and Firefox Focus for Android. This vulnerability was fixed in Firefox 153.0.3.
CVE-2026-16392 1 Mozilla 2 Firefox, Thunderbird 2026-07-30 9.1 Critical
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16364 1 Mozilla 2 Firefox, Thunderbird 2026-07-27 9.1 Critical
Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16365 1 Mozilla 2 Firefox, Thunderbird 2026-07-27 8.8 High
Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16367 1 Mozilla 2 Firefox, Thunderbird 2026-07-27 10 Critical
Sandbox escape due to invalid pointer in the Disability Access APIs component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16373 1 Mozilla 2 Firefox, Firefox Mobile 2026-07-27 7.5 High
Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153.
CVE-2026-16376 1 Mozilla 2 Firefox, Thunderbird 2026-07-27 7.5 High
Denial-of-service in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16380 1 Mozilla 2 Firefox, Thunderbird 2026-07-27 9.1 Critical
Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16382 1 Mozilla 2 Firefox, Thunderbird 2026-07-27 9.8 Critical
Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.