Filtered by vendor Mozilla
Subscribe
Total
3978 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-8960 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-14 | N/A | 7.5 HIGH |
| Spoofing issue in WebExtensions. This vulnerability was fixed in Firefox 151 and Thunderbird 151. | |||||
| CVE-2026-8953 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-14 | N/A | 9.6 CRITICAL |
| Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. | |||||
| CVE-2026-8949 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-14 | N/A | 7.5 HIGH |
| Integer overflow in the Widget: Win32 component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. | |||||
| CVE-2026-8952 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-14 | N/A | 8.8 HIGH |
| Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. | |||||
| CVE-2026-8945 | 1 Mozilla | 2 Firefox, Firefox Focus | 2026-10-14 | N/A | 7.5 HIGH |
| Sandbox escape in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 151. | |||||
| CVE-2026-8947 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-14 | N/A | 7.3 HIGH |
| Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. | |||||
| CVE-2026-8954 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-14 | N/A | 7.5 HIGH |
| Incorrect boundary conditions, integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. | |||||
| CVE-2026-8951 | 1 Mozilla | 1 Firefox | 2026-10-14 | N/A | 6.5 MEDIUM |
| Spoofing issue in the Toolbar component in Firefox for Android. This vulnerability was fixed in Firefox 151. | |||||
| CVE-2026-100757 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-13 | N/A | 8.8 HIGH |
| Use-after-free in the Widget component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17. | |||||
| CVE-2026-100758 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-13 | N/A | 9.6 CRITICAL |
| Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17. | |||||
| CVE-2026-100759 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-13 | N/A | 8.1 HIGH |
| Uninitialized memory in the Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17. | |||||
| CVE-2026-100760 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-13 | N/A | 9.6 CRITICAL |
| Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. | |||||
| CVE-2026-100761 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-13 | N/A | 8.8 HIGH |
| Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | |||||
| CVE-2026-106016 | 1 Mozilla | 1 Firefox | 2026-10-13 | N/A | 9.8 CRITICAL |
| Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1 and Thunderbird 158. | |||||
| CVE-2026-100762 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-13 | N/A | 9.6 CRITICAL |
| Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17. | |||||
| CVE-2026-100763 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-13 | N/A | 9.1 CRITICAL |
| Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | |||||
| CVE-2026-100764 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-13 | N/A | 8.8 HIGH |
| Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | |||||
| CVE-2026-100765 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-13 | N/A | 8.8 HIGH |
| Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. | |||||
| CVE-2026-100766 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-13 | N/A | 4.3 MEDIUM |
| Information disclosure in the Networking: JAR component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17. | |||||
| CVE-2026-100821 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-13 | N/A | 4.7 MEDIUM |
| Site isolation issue in the Panning and Zooming component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17. | |||||