Filtered by vendor Mozilla
Subscribe
Total
3978 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-16371 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-24 | N/A | 8.8 HIGH |
| Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, Thunderbird 140.13, Firefox ESR 140.15, and Thunderbird 140.15. | |||||
| CVE-2026-16370 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-24 | N/A | 9.1 CRITICAL |
| Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. | |||||
| CVE-2026-16393 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-24 | N/A | 9.1 CRITICAL |
| Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. | |||||
| CVE-2026-16354 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-24 | N/A | 7.5 HIGH |
| Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. | |||||
| CVE-2026-16373 | 1 Mozilla | 1 Firefox Mobile | 2026-10-24 | N/A | 7.5 HIGH |
| Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153. | |||||
| CVE-2026-16349 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-24 | N/A | 9.8 CRITICAL |
| Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. | |||||
| CVE-2026-16356 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-24 | N/A | 9.8 CRITICAL |
| Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. | |||||
| CVE-2026-16364 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-24 | N/A | 9.1 CRITICAL |
| Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. | |||||
| CVE-2026-16389 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-24 | N/A | 9.8 CRITICAL |
| Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153. | |||||
| CVE-2026-16374 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-24 | N/A | 7.5 HIGH |
| Information disclosure in the Framework component in DevTools. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. | |||||
| CVE-2026-16355 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-24 | N/A | 9.8 CRITICAL |
| JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. | |||||
| CVE-2026-16359 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-24 | N/A | 9.1 CRITICAL |
| Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. | |||||
| CVE-2026-16383 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-24 | N/A | 9.8 CRITICAL |
| Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. | |||||
| CVE-2026-16407 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-24 | N/A | 9.8 CRITICAL |
| Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. | |||||
| CVE-2026-16375 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-24 | N/A | 9.8 CRITICAL |
| Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. | |||||
| CVE-2026-16386 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-24 | N/A | 7.5 HIGH |
| Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. | |||||
| CVE-2026-16410 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-24 | N/A | 9.8 CRITICAL |
| JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. | |||||
| CVE-2026-16406 | 1 Mozilla | 1 Firefox | 2026-10-24 | N/A | 9.1 CRITICAL |
| Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. | |||||
| CVE-2026-16350 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-24 | N/A | 9.8 CRITICAL |
| Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. | |||||
| CVE-2026-16400 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-24 | N/A | 7.5 HIGH |
| Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. | |||||