Total
2070 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-92026 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-06 | N/A | 8.8 HIGH |
| Use-after-free in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. | |||||
| CVE-2026-92027 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-06 | N/A | 8.8 HIGH |
| Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. | |||||
| CVE-2026-92028 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-06 | N/A | 8.8 HIGH |
| Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. | |||||
| CVE-2026-92029 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-06 | N/A | 8.8 HIGH |
| Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. | |||||
| CVE-2026-92030 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-06 | N/A | 5.4 MEDIUM |
| Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. | |||||
| CVE-2026-92031 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-06 | N/A | 6.5 MEDIUM |
| Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. | |||||
| CVE-2026-92006 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-06 | N/A | 8.8 HIGH |
| Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. | |||||
| CVE-2026-92007 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-06 | N/A | 8.8 HIGH |
| Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. | |||||
| CVE-2026-92008 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-06 | N/A | 8.8 HIGH |
| Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. | |||||
| CVE-2026-92009 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-06 | N/A | 8.8 HIGH |
| Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. | |||||
| CVE-2026-92010 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-06 | N/A | 8.8 HIGH |
| Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. | |||||
| CVE-2026-92011 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-06 | N/A | 8.8 HIGH |
| Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. | |||||
| CVE-2026-92012 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-06 | N/A | 8.8 HIGH |
| Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. | |||||
| CVE-2026-92013 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-06 | N/A | 8.8 HIGH |
| Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. | |||||
| CVE-2026-92014 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-06 | N/A | 8.8 HIGH |
| Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16. | |||||
| CVE-2026-92015 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-06 | N/A | 8.8 HIGH |
| Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. | |||||
| CVE-2026-92005 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-06 | N/A | 5.3 MEDIUM |
| Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. | |||||
| CVE-2026-92016 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-06 | N/A | 8.8 HIGH |
| Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. | |||||
| CVE-2026-92017 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-06 | N/A | 8.8 HIGH |
| Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. | |||||
| CVE-2026-92018 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-06 | N/A | 9.6 CRITICAL |
| Sandbox escape in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. | |||||