[ Vendor · 185 CVEs ]
Mozilla
CVEs affecting Mozilla published in the last 30 days, plus any Mozilla CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-113866 | 20 Oct 2026 | CVSS 5.9 | Mozilla ThunderbirdWhen setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover service over plain HTTP. Due to a bug… | Fix |
| CVE-2026-113867 | 20 Oct 2026 | Not scored yet | Mozilla ThunderbirdThunderbird did not escape attribute values when serializing outgoing XMPP stanzas. Because values from incoming requests were echoed back in… | Fix |
| CVE-2026-113868 | 20 Oct 2026 | CVSS 5.3 | Mozilla ThunderbirdWhen authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was valid base64. A malicious… | Fix |
| CVE-2026-113869 | 20 Oct 2026 | CVSS 5.4 | Mozilla ThunderbirdWhen Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Password) while decrypting an S/MIME message, the… | Fix |
| CVE-2026-113400 | 20 Oct 2026 | CVSS 5.4 | Mozilla FirefoxUninitialized memory in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1. | Fix |
| CVE-2026-113401 | 20 Oct 2026 | CVSS 6.5 | Mozilla FirefoxDenial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1. | Fix |
| CVE-2026-113470 | 20 Oct 2026 | CVSS 5.4 | Mozilla FirefoxCryptographic issue in the Security Block-lists, Allow-lists, and other State component. This vulnerability was fixed in Firefox 158.0.1, Firefox ESR… | Fix |
| CVE-2026-113399 | 20 Oct 2026 | Not scored yet | Mozilla FirefoxIncorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1. | Fix |
| CVE-2026-110247 | 13 Oct 2026 | CVSS 8.4 | Mozilla ThunderbirdSeveral buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow checks. On a sufficiently large message the growth… | |
| CVE-2026-110249 | 13 Oct 2026 | CVSS 8.6 | Mozilla ThunderbirdA malicious, compromised, or MITM-controlled Exchange server can return a single well-formed SOAP response containing an element with enough… | |
| CVE-2026-109781 | 13 Oct 2026 | CVSS 6.5 | Mozilla FirefoxDenial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird… | |
| CVE-2026-109782 | 13 Oct 2026 | Not scored yet | Mozilla FirefoxMitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5. | |
| CVE-2026-109783 | 13 Oct 2026 | Not scored yet | Mozilla FirefoxMitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5. | |
| CVE-2026-109772 | 13 Oct 2026 | Not scored yet | Mozilla FirefoxSame-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | |
| CVE-2026-109773 | 13 Oct 2026 | CVSS 6.5 | Mozilla FirefoxDenial-of-service in the Sync component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | |
| CVE-2026-109774 | 13 Oct 2026 | Not scored yet | Mozilla FirefoxInvalid pointer, undefined behavior in the DOM: Notifications component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | |
| CVE-2026-109775 | 13 Oct 2026 | CVSS 6.5 | Mozilla FirefoxDenial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | |
| CVE-2026-109776 | 13 Oct 2026 | CVSS 4.2 | Mozilla FirefoxRace condition in the XPCOM component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | |
| CVE-2026-109777 | 13 Oct 2026 | CVSS 4.3 | Mozilla FirefoxInformation disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and… | |
| CVE-2026-109778 | 13 Oct 2026 | CVSS 8.8 | Mozilla FirefoxPrivilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird… | |
| CVE-2026-109779 | 13 Oct 2026 | CVSS 4.2 | Mozilla FirefoxRace condition in the Networking: DNS component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | |
| CVE-2026-109780 | 13 Oct 2026 | Not scored yet | Mozilla FirefoxMitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | |
| CVE-2026-109762 | 13 Oct 2026 | CVSS 8.8 | Mozilla FirefoxIncorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird… | |
| CVE-2026-109763 | 13 Oct 2026 | Not scored yet | Mozilla FirefoxMitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird… | |
| CVE-2026-109764 | 13 Oct 2026 | CVSS 5.4 | Mozilla FirefoxMitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and… | |
| CVE-2026-109765 | 13 Oct 2026 | CVSS 4.2 | Mozilla FirefoxRace condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and… | |
| CVE-2026-109766 | 13 Oct 2026 | CVSS 8.1 | Mozilla FirefoxMitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and… | |
| CVE-2026-109767 | 13 Oct 2026 | CVSS 4.3 | Mozilla FirefoxInformation disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird… | |
| CVE-2026-109768 | 13 Oct 2026 | CVSS 6.5 | Mozilla FirefoxDenial-of-service in the Site Reports component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | |
| CVE-2026-109769 | 13 Oct 2026 | CVSS 4.3 | Mozilla FirefoxInformation disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | |
| CVE-2026-109770 | 13 Oct 2026 | CVSS 6.1 | Mozilla FirefoxSpoofing issue in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird… | |
| CVE-2026-109771 | 13 Oct 2026 | CVSS 4.3 | Mozilla FirefoxInformation disclosure in the WebRTC: Networking component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | |
| CVE-2026-109752 | 13 Oct 2026 | CVSS 5.4 | Mozilla FirefoxUse-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | |
| CVE-2026-109753 | 13 Oct 2026 | CVSS 8.1 | Mozilla FirefoxIncorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5… | |
| CVE-2026-109754 | 13 Oct 2026 | CVSS 8.1 | Mozilla FirefoxIncorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and… | |
| CVE-2026-109755 | 13 Oct 2026 | CVSS 9.6 | Mozilla FirefoxSandbox escape in the DOM: Content Processes component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | |
| CVE-2026-109756 | 13 Oct 2026 | CVSS 8.8 | Mozilla FirefoxPrivilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and… | |
| CVE-2026-109757 | 13 Oct 2026 | CVSS 8.3 | Mozilla FirefoxSandbox escape due to race condition in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158… | |
| CVE-2026-109759 | 13 Oct 2026 | CVSS 8.1 | Mozilla FirefoxSite isolation issue in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird… | |
| CVE-2026-109760 | 13 Oct 2026 | CVSS 8.1 | Mozilla FirefoxMitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird… | |
| CVE-2026-109761 | 13 Oct 2026 | CVSS 5.4 | Mozilla FirefoxUse-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | |
| CVE-2026-109743 | 13 Oct 2026 | CVSS 8.8 | Mozilla FirefoxPrivilege escalation in the Panning and Zooming component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and… | |
| CVE-2026-109744 | 13 Oct 2026 | CVSS 8.1 | Mozilla FirefoxOther issue in the DOM: File component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | |
| CVE-2026-109745 | 13 Oct 2026 | CVSS 9.6 | Mozilla FirefoxSandbox escape due to uninitialized memory in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5… | |
| CVE-2026-109746 | 13 Oct 2026 | CVSS 7.3 | Mozilla FirefoxMitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | |
| CVE-2026-109747 | 13 Oct 2026 | CVSS 7.3 | Mozilla FirefoxOther issue in the Address Bar component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | |
| CVE-2026-109748 | 13 Oct 2026 | CVSS 5.4 | Mozilla FirefoxUse-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | |
| CVE-2026-109749 | 13 Oct 2026 | CVSS 5.4 | Mozilla FirefoxUse-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | |
| CVE-2026-109750 | 13 Oct 2026 | CVSS 9.6 | Mozilla FirefoxSite isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | |
| CVE-2026-109751 | 13 Oct 2026 | CVSS 4.3 | Mozilla FirefoxInformation disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird… | |
| CVE-2026-109735 | 13 Oct 2026 | CVSS 5.4 | Mozilla FirefoxUse-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | |
| CVE-2026-109736 | 13 Oct 2026 | CVSS 8.1 | Mozilla FirefoxFrame poisoning in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | |
| CVE-2026-109737 | 13 Oct 2026 | CVSS 8.1 | Mozilla FirefoxMitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and… | |
| CVE-2026-109738 | 13 Oct 2026 | CVSS 5.4 | Mozilla FirefoxUse-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and… | |
| CVE-2026-109739 | 13 Oct 2026 | CVSS 8.8 | Mozilla FirefoxPrivilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | |
| CVE-2026-109740 | 13 Oct 2026 | CVSS 9.6 | Mozilla FirefoxSandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5… | |
| CVE-2026-109741 | 13 Oct 2026 | CVSS 5.4 | Mozilla FirefoxUse-after-free in the Storage: Bucket File System component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and… | |
| CVE-2026-109742 | 13 Oct 2026 | CVSS 4.3 | Mozilla FirefoxInformation disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird… | |
| CVE-2026-109725 | 13 Oct 2026 | CVSS 5.4 | Mozilla FirefoxUse-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird… | |
| CVE-2026-109726 | 13 Oct 2026 | CVSS 5.4 | Mozilla FirefoxUse-after-free in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and… | |
| CVE-2026-109727 | 13 Oct 2026 | CVSS 5.4 | Mozilla FirefoxUse-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and… | |
| CVE-2026-109728 | 13 Oct 2026 | CVSS 5.4 | Mozilla FirefoxUse-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158… | |
| CVE-2026-109729 | 13 Oct 2026 | CVSS 5.4 | Mozilla FirefoxUse-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5… | |
| CVE-2026-109730 | 13 Oct 2026 | CVSS 8.8 | Mozilla FirefoxInteger overflow in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and… | |
| CVE-2026-109731 | 13 Oct 2026 | CVSS 5.4 | Mozilla FirefoxIncorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158… | |
| CVE-2026-109732 | 13 Oct 2026 | CVSS 5.4 | Mozilla FirefoxUse-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158… | |
| CVE-2026-109733 | 13 Oct 2026 | CVSS 8.1 | Mozilla FirefoxJIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5… | |
| CVE-2026-109734 | 13 Oct 2026 | CVSS 8.1 | Mozilla FirefoxMitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird… | |
| CVE-2026-109716 | 13 Oct 2026 | CVSS 8.1 | Mozilla FirefoxIncorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5… | |
| CVE-2026-109717 | 13 Oct 2026 | CVSS 5.4 | Mozilla FirefoxUse-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and… | |
| CVE-2026-109718 | 13 Oct 2026 | CVSS 5.4 | Mozilla FirefoxUse-after-free in the XML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and… | |
| CVE-2026-109719 | 13 Oct 2026 | CVSS 4.2 | Mozilla FirefoxRace condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR… | |
| CVE-2026-109720 | 13 Oct 2026 | CVSS 7.1 | Mozilla FirefoxJIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and… | |
| CVE-2026-109721 | 13 Oct 2026 | CVSS 5.4 | Mozilla FirefoxIncorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird… | |
| CVE-2026-109722 | 13 Oct 2026 | CVSS 8.1 | Mozilla FirefoxJIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5… | |
| CVE-2026-109723 | 13 Oct 2026 | CVSS 5.4 | Mozilla FirefoxInteger overflow in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and… | |
| CVE-2026-109724 | 13 Oct 2026 | CVSS 5.4 | Mozilla FirefoxUse-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird… | |
| CVE-2026-109709 | 13 Oct 2026 | CVSS 8.8 | Mozilla FirefoxInformation disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 158, Firefox ESR… | |
| CVE-2026-109710 | 13 Oct 2026 | CVSS 5.4 | Mozilla FirefoxUse-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158… | |
| CVE-2026-109711 | 13 Oct 2026 | CVSS 5.4 | Mozilla FirefoxUse-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird… | |
| CVE-2026-109712 | 13 Oct 2026 | CVSS 7.1 | Mozilla FirefoxSandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR… | |
| CVE-2026-109713 | 13 Oct 2026 | CVSS 5.4 | Mozilla FirefoxUse-after-free in the Crash Reporting component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird… | |
| CVE-2026-109714 | 13 Oct 2026 | CVSS 5.4 | Mozilla FirefoxIncorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | |
| CVE-2026-109715 | 13 Oct 2026 | CVSS 8.1 | Mozilla FirefoxIncorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5… | |
| CVE-2026-109704 | 13 Oct 2026 | CVSS 8.8 | Mozilla FirefoxPrivilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and… | |
| CVE-2026-109705 | 13 Oct 2026 | CVSS 9.6 | Mozilla FirefoxSandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed… | |
| CVE-2026-109706 | 13 Oct 2026 | CVSS 5.4 | Mozilla FirefoxUse-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird… | |
| CVE-2026-109707 | 13 Oct 2026 | CVSS 9.6 | Mozilla FirefoxSandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158… | |
| CVE-2026-109708 | 13 Oct 2026 | CVSS 9.6 | Mozilla FirefoxSandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5… | |
| CVE-2026-103417 | 13 Oct 2026 | CVSS 5.5 | Mozilla Firefox for iOSFirefox for iOS could autofill saved credentials into a new page if cross-origin navigation occurred while the saved-login UI was open. Autofill was… | Fix |
| CVE-2026-103418 | 13 Oct 2026 | CVSS 8.8 | Mozilla Firefox for iOSFirefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing attacker-controlled markup to execute… | Fix |
| CVE-2026-106550 | 6 Oct 2026 | CVSS 7.5 | Mozilla Node-convictMozilla's Node-convict (version 6.2.2 and later) is vulnerable to a Denial of Service vulnerability caused by incomplete prototype‑pollution… | |
| CVE-2026-106016 | 6 Oct 2026 | CVSS 9.8 | Mozilla FirefoxMitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1 and Thunderbird 158. | Fix |
| CVE-2026-103500 | 30 Sep 2026 | CVSS 6.1 | Mozilla ThunderbirdAn attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size. This vulnerability… | |
| CVE-2026-96869 | 29 Sep 2026 | CVSS 4.3 | Mozilla ThunderbirdInformation disclosure in the Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17… | |
| CVE-2026-100828 | 29 Sep 2026 | CVSS 9.6 | Mozilla FirefoxMitigation bypass in the Bookmarks & History component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and… | |
| CVE-2026-100829 | 29 Sep 2026 | CVSS 9.6 | Mozilla FirefoxMitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox… | |
| CVE-2026-100830 | 29 Sep 2026 | CVSS 8.1 | Mozilla FirefoxMitigation bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and… | |
| CVE-2026-100831 | 29 Sep 2026 | CVSS 8.8 | Mozilla FirefoxUse-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird… | |
| CVE-2026-100832 | 29 Sep 2026 | CVSS 8.8 | Mozilla FirefoxUse-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4, Firefox… |
Page 1 of 2