CVE Daily – Firefox (High+Critical) https://cvedaily.com/pages/tags/firefox.html CVE Daily – Firefox (High+Critical) en Wed, 03 Jun 2026 21:26:33 +0000 [High] CVE-2026-10701 – Incorrect boundary conditions in the Graphics: Text component. This vulnerabilit... https://nvd.nist.gov/vuln/detail/CVE-2026-10701 https://nvd.nist.gov/vuln/detail/CVE-2026-10701 Tue, 02 Jun 2026 20:16:33 +0000 High CVE-2026-10701

Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 151.0.3.

CVSS: 7.5 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-8975 – Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 and Firefox... https://nvd.nist.gov/vuln/detail/CVE-2026-8975 https://nvd.nist.gov/vuln/detail/CVE-2026-8975 Tue, 19 May 2026 14:16:54 +0000 High CVE-2026-8975

Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

CVSS: 8.8 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-8974 – Memory safety bugs present in Firefox ESR 140.10 and Firefox 150. Some of these ... https://nvd.nist.gov/vuln/detail/CVE-2026-8974 https://nvd.nist.gov/vuln/detail/CVE-2026-8974 Tue, 19 May 2026 14:16:53 +0000 High CVE-2026-8974

Memory safety bugs present in Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

CVSS: 8.8 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-8973 – Memory safety bugs present in Firefox 150. Some of these bugs showed evidence of... https://nvd.nist.gov/vuln/detail/CVE-2026-8973 https://nvd.nist.gov/vuln/detail/CVE-2026-8973 Tue, 19 May 2026 14:16:53 +0000 High CVE-2026-8973

Memory safety bugs present in Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 151 and Thunderbird 151.

CVSS: 8.8 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-8972 – Privilege escalation in the WebRTC: Audio/Video component. This vulnerability wa... https://nvd.nist.gov/vuln/detail/CVE-2026-8972 https://nvd.nist.gov/vuln/detail/CVE-2026-8972 Tue, 19 May 2026 14:16:53 +0000 High CVE-2026-8972

Privilege escalation in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.

CVSS: 8.8 · CWE: CWE-269

View on NVD

]]> [High] CVE-2026-8970 – Privilege escalation in the Security component. This vulnerability was fixed in ... https://nvd.nist.gov/vuln/detail/CVE-2026-8970 https://nvd.nist.gov/vuln/detail/CVE-2026-8970 Tue, 19 May 2026 14:16:53 +0000 High CVE-2026-8970

Privilege escalation in the Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

CVSS: 8.8 · CWE: CWE-269

View on NVD

]]> [High] CVE-2026-8969 – Mitigation bypass in the DOM: Security component. This vulnerability was fixed i... https://nvd.nist.gov/vuln/detail/CVE-2026-8969 https://nvd.nist.gov/vuln/detail/CVE-2026-8969 Tue, 19 May 2026 14:16:53 +0000 High CVE-2026-8969

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.

CVSS: 8.1 · CWE: CWE-693

View on NVD

]]> [High] CVE-2026-8968 – Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs componen... https://nvd.nist.gov/vuln/detail/CVE-2026-8968 https://nvd.nist.gov/vuln/detail/CVE-2026-8968 Tue, 19 May 2026 14:16:53 +0000 High CVE-2026-8968

Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

CVSS: 7.5 · CWE: CWE-400

View on NVD

]]> [High] CVE-2026-8967 – Information disclosure in the Graphics: WebGPU component. This vulnerability was... https://nvd.nist.gov/vuln/detail/CVE-2026-8967 https://nvd.nist.gov/vuln/detail/CVE-2026-8967 Tue, 19 May 2026 14:16:53 +0000 High CVE-2026-8967

Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.

CVSS: 7.5 · CWE: CWE-200

View on NVD

]]> [High] CVE-2026-8966 – Information disclosure in the IP Protection component. This vulnerability was fi... https://nvd.nist.gov/vuln/detail/CVE-2026-8966 https://nvd.nist.gov/vuln/detail/CVE-2026-8966 Tue, 19 May 2026 14:16:53 +0000 High CVE-2026-8966

Information disclosure in the IP Protection component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.

CVSS: 7.5 · CWE: CWE-200

View on NVD

]]> [High] CVE-2026-8965 – Information disclosure in the DOM: Security component. This vulnerability was fi... https://nvd.nist.gov/vuln/detail/CVE-2026-8965 https://nvd.nist.gov/vuln/detail/CVE-2026-8965 Tue, 19 May 2026 14:16:52 +0000 High CVE-2026-8965

Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.

CVSS: 7.5 · CWE: CWE-200

View on NVD

]]> [High] CVE-2026-8964 – Spoofing issue in the Popup Blocker component. This vulnerability was fixed in F... https://nvd.nist.gov/vuln/detail/CVE-2026-8964 https://nvd.nist.gov/vuln/detail/CVE-2026-8964 Tue, 19 May 2026 14:16:52 +0000 High CVE-2026-8964

Spoofing issue in the Popup Blocker component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.

CVSS: 7.5 · CWE: CWE-451

View on NVD

]]> [High] CVE-2026-8963 – Spoofing issue in the Web Speech component. This vulnerability was fixed in Fire... https://nvd.nist.gov/vuln/detail/CVE-2026-8963 https://nvd.nist.gov/vuln/detail/CVE-2026-8963 Tue, 19 May 2026 14:16:52 +0000 High CVE-2026-8963

Spoofing issue in the Web Speech component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.

CVSS: 7.5 · CWE: CWE-290

View on NVD

]]> [High] CVE-2026-8962 – Mitigation bypass in the DOM: Security component. This vulnerability was fixed i... https://nvd.nist.gov/vuln/detail/CVE-2026-8962 https://nvd.nist.gov/vuln/detail/CVE-2026-8962 Tue, 19 May 2026 14:16:52 +0000 High CVE-2026-8962

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

CVSS: 8.1 · CWE: CWE-693

View on NVD

]]> [High] CVE-2026-8960 – Spoofing issue in WebExtensions. This vulnerability was fixed in Firefox 151 and... https://nvd.nist.gov/vuln/detail/CVE-2026-8960 https://nvd.nist.gov/vuln/detail/CVE-2026-8960 Tue, 19 May 2026 14:16:52 +0000 High CVE-2026-8960

Spoofing issue in WebExtensions. This vulnerability was fixed in Firefox 151 and Thunderbird 151.

CVSS: 7.5 · CWE: CWE-290

View on NVD

]]> [Critical] CVE-2026-8959 – Sandbox escape due to incorrect boundary conditions in the Widget: Win32 compone... https://nvd.nist.gov/vuln/detail/CVE-2026-8959 https://nvd.nist.gov/vuln/detail/CVE-2026-8959 Tue, 19 May 2026 14:16:52 +0000 Critical CVE-2026-8959

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

CVSS: 9.6 · CWE: CWE-20

View on NVD

]]> [High] CVE-2026-8958 – Information disclosure, sandbox escape in the Security: Process Sandboxing compo... https://nvd.nist.gov/vuln/detail/CVE-2026-8958 https://nvd.nist.gov/vuln/detail/CVE-2026-8958 Tue, 19 May 2026 14:16:52 +0000 High CVE-2026-8958

Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

CVSS: 8.6 · CWE: CWE-668

View on NVD

]]> [High] CVE-2026-8957 – Privilege escalation in the Enterprise Policies component. This vulnerability wa... https://nvd.nist.gov/vuln/detail/CVE-2026-8957 https://nvd.nist.gov/vuln/detail/CVE-2026-8957 Tue, 19 May 2026 14:16:52 +0000 High CVE-2026-8957

Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

CVSS: 8.8 · CWE: CWE-269

View on NVD

]]> [Critical] CVE-2026-8956 – Integer overflow in the Networking: JAR component. This vulnerability was fixed ... https://nvd.nist.gov/vuln/detail/CVE-2026-8956 https://nvd.nist.gov/vuln/detail/CVE-2026-8956 Tue, 19 May 2026 14:16:51 +0000 Critical CVE-2026-8956

Integer overflow in the Networking: JAR component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

CVSS: 9.8 · CWE: CWE-190

View on NVD

]]> [High] CVE-2026-8955 – Privilege escalation in the DOM: Workers component. This vulnerability was fixed... https://nvd.nist.gov/vuln/detail/CVE-2026-8955 https://nvd.nist.gov/vuln/detail/CVE-2026-8955 Tue, 19 May 2026 14:16:51 +0000 High CVE-2026-8955

Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

CVSS: 8.8 · CWE: CWE-269

View on NVD

]]> [High] CVE-2026-8954 – Incorrect boundary conditions, integer overflow in the Audio/Video component. Th... https://nvd.nist.gov/vuln/detail/CVE-2026-8954 https://nvd.nist.gov/vuln/detail/CVE-2026-8954 Tue, 19 May 2026 14:16:51 +0000 High CVE-2026-8954

Incorrect boundary conditions, integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

CVSS: 7.5 · CWE: CWE-119

View on NVD

]]> [Critical] CVE-2026-8953 – Sandbox escape due to use-after-free in the Disability Access APIs component. Th... https://nvd.nist.gov/vuln/detail/CVE-2026-8953 https://nvd.nist.gov/vuln/detail/CVE-2026-8953 Tue, 19 May 2026 14:16:51 +0000 Critical CVE-2026-8953

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

CVSS: 9.6 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-8952 – Privilege escalation in the Application Update component. This vulnerability was... https://nvd.nist.gov/vuln/detail/CVE-2026-8952 https://nvd.nist.gov/vuln/detail/CVE-2026-8952 Tue, 19 May 2026 14:16:51 +0000 High CVE-2026-8952

Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.

CVSS: 8.8 · CWE: CWE-269

View on NVD

]]> [Critical] CVE-2026-8950 – Same-origin policy bypass in the Networking: HTTP component. This vulnerability ... https://nvd.nist.gov/vuln/detail/CVE-2026-8950 https://nvd.nist.gov/vuln/detail/CVE-2026-8950 Tue, 19 May 2026 14:16:51 +0000 Critical CVE-2026-8950

Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

CVSS: 9.3 · CWE: CWE-346

View on NVD

]]> [High] CVE-2026-8949 – Integer overflow in the Widget: Win32 component. This vulnerability was fixed in... https://nvd.nist.gov/vuln/detail/CVE-2026-8949 https://nvd.nist.gov/vuln/detail/CVE-2026-8949 Tue, 19 May 2026 14:16:51 +0000 High CVE-2026-8949

Integer overflow in the Widget: Win32 component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

CVSS: 7.5 · CWE: CWE-190

View on NVD

]]> [Critical] CVE-2026-8948 – Same-origin policy bypass in the DOM: Networking component. This vulnerability w... https://nvd.nist.gov/vuln/detail/CVE-2026-8948 https://nvd.nist.gov/vuln/detail/CVE-2026-8948 Tue, 19 May 2026 14:16:51 +0000 Critical CVE-2026-8948

Same-origin policy bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.

CVSS: 9.1 · CWE: CWE-942

View on NVD

]]> [High] CVE-2026-8947 – Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was f... https://nvd.nist.gov/vuln/detail/CVE-2026-8947 https://nvd.nist.gov/vuln/detail/CVE-2026-8947 Tue, 19 May 2026 14:16:50 +0000 High CVE-2026-8947

Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

CVSS: 7.3 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-8946 – Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vul... https://nvd.nist.gov/vuln/detail/CVE-2026-8946 https://nvd.nist.gov/vuln/detail/CVE-2026-8946 Tue, 19 May 2026 14:16:50 +0000 High CVE-2026-8946

Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

CVSS: 7.5 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-8945 – Sandbox escape in Firefox and Firefox Focus for Android. This vulnerability was ... https://nvd.nist.gov/vuln/detail/CVE-2026-8945 https://nvd.nist.gov/vuln/detail/CVE-2026-8945 Tue, 19 May 2026 14:16:50 +0000 High CVE-2026-8945

Sandbox escape in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 151.

CVSS: 7.5 · CWE: CWE-693

View on NVD

]]> [Critical] CVE-2026-8401 – Sandbox escape in the Profile Backup component. This vulnerability was fixed in ... https://nvd.nist.gov/vuln/detail/CVE-2026-8401 https://nvd.nist.gov/vuln/detail/CVE-2026-8401 Tue, 12 May 2026 15:16:20 +0000 Critical CVE-2026-8401

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11.

CVSS: 9.8 · CWE: CWE-693

View on NVD

]]> [High] CVE-2026-8390 – Use-after-free in the JavaScript: WebAssembly component. This vulnerability was ... https://nvd.nist.gov/vuln/detail/CVE-2026-8390 https://nvd.nist.gov/vuln/detail/CVE-2026-8390 Tue, 12 May 2026 14:17:12 +0000 High CVE-2026-8390

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150.0.3.

CVSS: 7.3 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-8389 – JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability w... https://nvd.nist.gov/vuln/detail/CVE-2026-8389 https://nvd.nist.gov/vuln/detail/CVE-2026-8389 Tue, 12 May 2026 14:17:11 +0000 High CVE-2026-8389

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3.

CVSS: 7.3 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-41431 – Zen is a firefox-based browser. Prior to 1.19.9b, Zen Browser ships a Mozilla Ap... https://nvd.nist.gov/vuln/detail/CVE-2026-41431 https://nvd.nist.gov/vuln/detail/CVE-2026-41431 Mon, 11 May 2026 18:16:34 +0000 High CVE-2026-41431

Zen is a firefox-based browser. Prior to 1.19.9b, Zen Browser ships a Mozilla Application Resource (MAR) updater (org.mozilla.updater) that has had all MAR signature verification stripped from the Firefox codebase it was forked from. The MAR files served to users contain zero cryptographic signatures, and the updater binary contains zero cryptographic verification code. This eliminates the defens…

CVSS: 8.0 · CWE: CWE-347

View on NVD

]]> [Critical] CVE-2026-8094 – Other issue in the WebRTC component. This vulnerability was fixed in Firefox ESR... https://nvd.nist.gov/vuln/detail/CVE-2026-8094 https://nvd.nist.gov/vuln/detail/CVE-2026-8094 Thu, 07 May 2026 13:16:14 +0000 Critical CVE-2026-8094

Other issue in the WebRTC component. This vulnerability was fixed in Firefox ESR 140.10.2 and Thunderbird 140.10.2.

CVSS: 9.8 · CWE: CWE-94

View on NVD

]]> [High] CVE-2026-8093 – Memory safety bugs present in Firefox 150.0.1. Some of these bugs showed evidenc... https://nvd.nist.gov/vuln/detail/CVE-2026-8093 https://nvd.nist.gov/vuln/detail/CVE-2026-8093 Thu, 07 May 2026 13:16:14 +0000 High CVE-2026-8093

Memory safety bugs present in Firefox 150.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.2 and Thunderbird 150.0.2.

CVSS: 8.1 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-8092 – Memory safety bugs present in Firefox ESR 115.35.1, Firefox ESR 140.10.1 and Fir... https://nvd.nist.gov/vuln/detail/CVE-2026-8092 https://nvd.nist.gov/vuln/detail/CVE-2026-8092 Thu, 07 May 2026 13:16:14 +0000 High CVE-2026-8092

Memory safety bugs present in Firefox ESR 115.35.1, Firefox ESR 140.10.1 and Firefox 150.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.2, Firefox ESR 140.10.2, Firefox ESR 115.35.2, Thunderbird 150.0.2, and Thunderbird 140.10.2.

CVSS: 8.1 · CWE: CWE-125

View on NVD

]]> [Critical] CVE-2026-8091 – Incorrect boundary conditions in the Audio/Video: Playback component. This vulne... https://nvd.nist.gov/vuln/detail/CVE-2026-8091 https://nvd.nist.gov/vuln/detail/CVE-2026-8091 Thu, 07 May 2026 13:16:14 +0000 Critical CVE-2026-8091

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, Thunderbird 140.10.1, and Firefox ESR 115.35.2.

CVSS: 9.8 · CWE: CWE-754

View on NVD

]]> [High] CVE-2026-8090 – Use-after-free in the DOM: Networking component. This vulnerability was fixed in... https://nvd.nist.gov/vuln/detail/CVE-2026-8090 https://nvd.nist.gov/vuln/detail/CVE-2026-8090 Thu, 07 May 2026 13:16:13 +0000 High CVE-2026-8090

Use-after-free in the DOM: Networking component. This vulnerability was fixed in Firefox 150.0.2, Firefox ESR 140.10.2, Firefox ESR 115.35.2, Thunderbird 150.0.2, and Thunderbird 140.10.2.

CVSS: 7.3 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-7324 – Memory safety bugs present in Thunderbird 150.0.0. Some of these bugs showed evi... https://nvd.nist.gov/vuln/detail/CVE-2026-7324 https://nvd.nist.gov/vuln/detail/CVE-2026-7324 Tue, 28 Apr 2026 15:16:37 +0000 High CVE-2026-7324

Memory safety bugs present in Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1 and Thunderbird 150.0.1.

CVSS: 7.3 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-7323 – Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. ... https://nvd.nist.gov/vuln/detail/CVE-2026-7323 https://nvd.nist.gov/vuln/detail/CVE-2026-7323 Tue, 28 Apr 2026 15:16:37 +0000 High CVE-2026-7323

Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.

CVSS: 7.3 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-7322 – Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. ... https://nvd.nist.gov/vuln/detail/CVE-2026-7322 https://nvd.nist.gov/vuln/detail/CVE-2026-7322 Tue, 28 Apr 2026 15:16:37 +0000 High CVE-2026-7322

Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.

CVSS: 7.3 · CWE: CWE-119

View on NVD

]]> [Critical] CVE-2026-7321 – Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking co... https://nvd.nist.gov/vuln/detail/CVE-2026-7321 https://nvd.nist.gov/vuln/detail/CVE-2026-7321 Tue, 28 Apr 2026 15:16:37 +0000 Critical CVE-2026-7321

Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, and Thunderbird 140.10.1.

CVSS: 9.6 · CWE: CWE-120

View on NVD

]]> [High] CVE-2026-7320 – Information disclosure due to incorrect boundary conditions in the Audio/Video c... https://nvd.nist.gov/vuln/detail/CVE-2026-7320 https://nvd.nist.gov/vuln/detail/CVE-2026-7320 Tue, 28 Apr 2026 15:16:37 +0000 High CVE-2026-7320

Information disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.

CVSS: 7.5 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-6786 – Memory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox ... https://nvd.nist.gov/vuln/detail/CVE-2026-6786 https://nvd.nist.gov/vuln/detail/CVE-2026-6786 Sun, 26 Apr 2026 19:53:39 +0000 High CVE-2026-6786

Memory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

CVSS: 7.5 · CWE: CWE-125

View on NVD

]]> [High] CVE-2026-6785 – Memory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird... https://nvd.nist.gov/vuln/detail/CVE-2026-6785 https://nvd.nist.gov/vuln/detail/CVE-2026-6785 Sun, 26 Apr 2026 19:53:39 +0000 High CVE-2026-6785

Memory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbir…

CVSS: 7.5 · CWE: CWE-125

View on NVD

]]> [High] CVE-2026-6784 – Memory safety bugs present in Firefox 149 and Thunderbird 149. Some of these bug... https://nvd.nist.gov/vuln/detail/CVE-2026-6784 https://nvd.nist.gov/vuln/detail/CVE-2026-6784 Tue, 21 Apr 2026 13:16:24 +0000 High CVE-2026-6784

Memory safety bugs present in Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

CVSS: 7.5 · CWE: CWE-125

View on NVD

]]> [High] CVE-2026-6782 – Information disclosure in the IP Protection component. This vulnerability was fi... https://nvd.nist.gov/vuln/detail/CVE-2026-6782 https://nvd.nist.gov/vuln/detail/CVE-2026-6782 Tue, 21 Apr 2026 13:16:23 +0000 High CVE-2026-6782

Information disclosure in the IP Protection component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

CVSS: 7.5 · CWE: CWE-200

View on NVD

]]> [High] CVE-2026-6781 – Denial-of-service in the Audio/Video: Playback component. This vulnerability was... https://nvd.nist.gov/vuln/detail/CVE-2026-6781 https://nvd.nist.gov/vuln/detail/CVE-2026-6781 Tue, 21 Apr 2026 13:16:23 +0000 High CVE-2026-6781

Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

CVSS: 7.5 · CWE: CWE-400

View on NVD

]]> [High] CVE-2026-6780 – Denial-of-service in the Audio/Video: Playback component. This vulnerability was... https://nvd.nist.gov/vuln/detail/CVE-2026-6780 https://nvd.nist.gov/vuln/detail/CVE-2026-6780 Tue, 21 Apr 2026 13:16:23 +0000 High CVE-2026-6780

Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

CVSS: 7.5 · CWE: CWE-400

View on NVD

]]> [High] CVE-2026-6776 – Incorrect boundary conditions in the WebRTC: Networking component. This vulnerab... https://nvd.nist.gov/vuln/detail/CVE-2026-6776 https://nvd.nist.gov/vuln/detail/CVE-2026-6776 Tue, 21 Apr 2026 13:16:23 +0000 High CVE-2026-6776

Incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

CVSS: 7.8 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-6773 – Denial-of-service due to integer overflow in the Graphics: WebGPU component. Thi... https://nvd.nist.gov/vuln/detail/CVE-2026-6773 https://nvd.nist.gov/vuln/detail/CVE-2026-6773 Tue, 21 Apr 2026 13:16:23 +0000 High CVE-2026-6773

Denial-of-service due to integer overflow in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

CVSS: 7.5 · CWE: CWE-190

View on NVD

]]> [High] CVE-2026-6772 – Incorrect boundary conditions in the Libraries component in NSS. This vulnerabil... https://nvd.nist.gov/vuln/detail/CVE-2026-6772 https://nvd.nist.gov/vuln/detail/CVE-2026-6772 Tue, 21 Apr 2026 13:16:23 +0000 High CVE-2026-6772

Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

CVSS: 7.5 · CWE: CWE-754

View on NVD

]]> [Critical] CVE-2026-6771 – Mitigation bypass in the DOM: Security component. This vulnerability was fixed i... https://nvd.nist.gov/vuln/detail/CVE-2026-6771 https://nvd.nist.gov/vuln/detail/CVE-2026-6771 Tue, 21 Apr 2026 13:16:22 +0000 Critical CVE-2026-6771

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

CVSS: 9.8 · CWE: CWE-288

View on NVD

]]> [High] CVE-2026-6769 – Privilege escalation in the Debugger component. This vulnerability was fixed in ... https://nvd.nist.gov/vuln/detail/CVE-2026-6769 https://nvd.nist.gov/vuln/detail/CVE-2026-6769 Tue, 21 Apr 2026 13:16:22 +0000 High CVE-2026-6769

Privilege escalation in the Debugger component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

CVSS: 8.8 · CWE: CWE-269

View on NVD

]]> [Critical] CVE-2026-6768 – Mitigation bypass in the Networking: Cookies component. This vulnerability was f... https://nvd.nist.gov/vuln/detail/CVE-2026-6768 https://nvd.nist.gov/vuln/detail/CVE-2026-6768 Tue, 21 Apr 2026 13:16:22 +0000 Critical CVE-2026-6768

Mitigation bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

CVSS: 9.8 · CWE: CWE-288

View on NVD

]]> [High] CVE-2026-6766 – Incorrect boundary conditions in the Libraries component in NSS. This vulnerabil... https://nvd.nist.gov/vuln/detail/CVE-2026-6766 https://nvd.nist.gov/vuln/detail/CVE-2026-6766 Tue, 21 Apr 2026 13:16:22 +0000 High CVE-2026-6766

Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

CVSS: 7.5 · CWE: CWE-754

View on NVD

]]> [High] CVE-2026-6761 – Privilege escalation in the Networking component. This vulnerability was fixed i... https://nvd.nist.gov/vuln/detail/CVE-2026-6761 https://nvd.nist.gov/vuln/detail/CVE-2026-6761 Tue, 21 Apr 2026 13:16:22 +0000 High CVE-2026-6761

Privilege escalation in the Networking component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

CVSS: 8.8 · CWE: CWE-269

View on NVD

]]> [Critical] CVE-2026-6760 – Mitigation bypass in the Networking: Cookies component. This vulnerability was f... https://nvd.nist.gov/vuln/detail/CVE-2026-6760 https://nvd.nist.gov/vuln/detail/CVE-2026-6760 Tue, 21 Apr 2026 13:16:21 +0000 Critical CVE-2026-6760

Mitigation bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

CVSS: 9.8 · CWE: CWE-288

View on NVD

]]> [High] CVE-2026-6759 – Use-after-free in the Widget: Cocoa component. This vulnerability was fixed in F... https://nvd.nist.gov/vuln/detail/CVE-2026-6759 https://nvd.nist.gov/vuln/detail/CVE-2026-6759 Tue, 21 Apr 2026 13:16:21 +0000 High CVE-2026-6759

Use-after-free in the Widget: Cocoa component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

CVSS: 7.5 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-6758 – Use-after-free in the JavaScript: WebAssembly component. This vulnerability was ... https://nvd.nist.gov/vuln/detail/CVE-2026-6758 https://nvd.nist.gov/vuln/detail/CVE-2026-6758 Tue, 21 Apr 2026 13:16:21 +0000 High CVE-2026-6758

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

CVSS: 7.5 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-6756 – Mitigation bypass in Firefox for Android. This vulnerability was fixed in Firefo... https://nvd.nist.gov/vuln/detail/CVE-2026-6756 https://nvd.nist.gov/vuln/detail/CVE-2026-6756 Tue, 21 Apr 2026 13:16:21 +0000 High CVE-2026-6756

Mitigation bypass in Firefox for Android. This vulnerability was fixed in Firefox 150.

CVSS: 7.5 · CWE: CWE-200

View on NVD

]]> [High] CVE-2026-6754 – Use-after-free in the JavaScript Engine component. This vulnerability was fixed ... https://nvd.nist.gov/vuln/detail/CVE-2026-6754 https://nvd.nist.gov/vuln/detail/CVE-2026-6754 Tue, 21 Apr 2026 13:16:21 +0000 High CVE-2026-6754

Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

CVSS: 7.5 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-6753 – Incorrect boundary conditions in the WebRTC component. This vulnerability was fi... https://nvd.nist.gov/vuln/detail/CVE-2026-6753 https://nvd.nist.gov/vuln/detail/CVE-2026-6753 Tue, 21 Apr 2026 13:16:21 +0000 High CVE-2026-6753

Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

CVSS: 7.3 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-6752 – Incorrect boundary conditions in the WebRTC component. This vulnerability was fi... https://nvd.nist.gov/vuln/detail/CVE-2026-6752 https://nvd.nist.gov/vuln/detail/CVE-2026-6752 Tue, 21 Apr 2026 13:16:21 +0000 High CVE-2026-6752

Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

CVSS: 7.3 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-6751 – Uninitialized memory in the Audio/Video: Web Codecs component. This vulnerabilit... https://nvd.nist.gov/vuln/detail/CVE-2026-6751 https://nvd.nist.gov/vuln/detail/CVE-2026-6751 Tue, 21 Apr 2026 13:16:21 +0000 High CVE-2026-6751

Uninitialized memory in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

CVSS: 7.3 · CWE: CWE-457

View on NVD

]]> [High] CVE-2026-6750 – Privilege escalation in the Graphics: WebRender component. This vulnerability wa... https://nvd.nist.gov/vuln/detail/CVE-2026-6750 https://nvd.nist.gov/vuln/detail/CVE-2026-6750 Tue, 21 Apr 2026 13:16:21 +0000 High CVE-2026-6750

Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

CVSS: 8.8 · CWE: CWE-269

View on NVD

]]> [High] CVE-2026-6749 – Information disclosure due to uninitialized memory in the Graphics: Canvas2D com... https://nvd.nist.gov/vuln/detail/CVE-2026-6749 https://nvd.nist.gov/vuln/detail/CVE-2026-6749 Tue, 21 Apr 2026 13:16:20 +0000 High CVE-2026-6749

Information disclosure due to uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

CVSS: 7.5 · CWE: CWE-908

View on NVD

]]> [Critical] CVE-2026-6748 – Uninitialized memory in the Audio/Video: Web Codecs component. This vulnerabilit... https://nvd.nist.gov/vuln/detail/CVE-2026-6748 https://nvd.nist.gov/vuln/detail/CVE-2026-6748 Tue, 21 Apr 2026 13:16:20 +0000 Critical CVE-2026-6748

Uninitialized memory in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

CVSS: 9.8 · CWE: CWE-457

View on NVD

]]> [High] CVE-2026-6747 – Use-after-free in the WebRTC component. This vulnerability was fixed in Firefox ... https://nvd.nist.gov/vuln/detail/CVE-2026-6747 https://nvd.nist.gov/vuln/detail/CVE-2026-6747 Tue, 21 Apr 2026 13:16:20 +0000 High CVE-2026-6747

Use-after-free in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

CVSS: 7.5 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-6746 – Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed i... https://nvd.nist.gov/vuln/detail/CVE-2026-6746 https://nvd.nist.gov/vuln/detail/CVE-2026-6746 Tue, 21 Apr 2026 13:16:20 +0000 High CVE-2026-6746

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

CVSS: 7.5 · CWE: CWE-416

View on NVD

]]> [Critical] CVE-2026-5735 – Memory safety bugs present in Firefox 149.0.1 and Thunderbird 149.0.1. Some of t... https://nvd.nist.gov/vuln/detail/CVE-2026-5735 https://nvd.nist.gov/vuln/detail/CVE-2026-5735 Tue, 07 Apr 2026 13:16:47 +0000 Critical CVE-2026-5735

Memory safety bugs present in Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149.0.2 and Thunderbird 149.0.2.

CVSS: 9.8 · CWE: CWE-787

View on NVD

]]> [Critical] CVE-2026-5734 – Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Fire... https://nvd.nist.gov/vuln/detail/CVE-2026-5734 https://nvd.nist.gov/vuln/detail/CVE-2026-5734 Tue, 07 Apr 2026 13:16:47 +0000 Critical CVE-2026-5734

Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149.0.2, Firefox ESR 140.9.1, Thunderbird 149.0.2, and Thunderbird 140.9.1.

CVSS: 9.8 · CWE: CWE-787

View on NVD

]]> [High] CVE-2026-5733 – Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerabil... https://nvd.nist.gov/vuln/detail/CVE-2026-5733 https://nvd.nist.gov/vuln/detail/CVE-2026-5733 Tue, 07 Apr 2026 13:16:47 +0000 High CVE-2026-5733

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 149.0.2 and Thunderbird 149.0.2.

CVSS: 8.8 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-5732 – Incorrect boundary conditions, integer overflow in the Graphics: Text component... https://nvd.nist.gov/vuln/detail/CVE-2026-5732 https://nvd.nist.gov/vuln/detail/CVE-2026-5732 Tue, 07 Apr 2026 13:16:47 +0000 High CVE-2026-5732

Incorrect boundary conditions, integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 149.0.2, Firefox ESR 140.9.1, Thunderbird 149.0.2, and Thunderbird 140.9.1.

CVSS: 8.8 · CWE: CWE-190

View on NVD

]]> [Critical] CVE-2026-5731 – Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunder... https://nvd.nist.gov/vuln/detail/CVE-2026-5731 https://nvd.nist.gov/vuln/detail/CVE-2026-5731 Tue, 07 Apr 2026 13:16:47 +0000 Critical CVE-2026-5731

Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149.0.2, Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbir…

CVSS: 9.8 · CWE: CWE-119

View on NVD

]]> [Critical] CVE-2026-4729 – Memory safety bugs present in Firefox 148 and Thunderbird 148. Some of these bug... https://nvd.nist.gov/vuln/detail/CVE-2026-4729 https://nvd.nist.gov/vuln/detail/CVE-2026-4729 Tue, 24 Mar 2026 13:16:08 +0000 Critical CVE-2026-4729

Memory safety bugs present in Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149 and Thunderbird 149.

CVSS: 9.8 · CWE: CWE-120

View on NVD

]]> [High] CVE-2026-4727 – Denial-of-service in the Libraries component in NSS. This vulnerability was fixe... https://nvd.nist.gov/vuln/detail/CVE-2026-4727 https://nvd.nist.gov/vuln/detail/CVE-2026-4727 Tue, 24 Mar 2026 13:16:08 +0000 High CVE-2026-4727

Denial-of-service in the Libraries component in NSS. This vulnerability was fixed in Firefox 149 and Thunderbird 149.

CVSS: 7.5 · CWE: CWE-400

View on NVD

]]> [High] CVE-2026-4726 – Denial-of-service in the XML component. This vulnerability was fixed in Firefox ... https://nvd.nist.gov/vuln/detail/CVE-2026-4726 https://nvd.nist.gov/vuln/detail/CVE-2026-4726 Tue, 24 Mar 2026 13:16:08 +0000 High CVE-2026-4726

Denial-of-service in the XML component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.

CVSS: 7.5 · CWE: CWE-400

View on NVD

]]> [Critical] CVE-2026-4725 – Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This v... https://nvd.nist.gov/vuln/detail/CVE-2026-4725 https://nvd.nist.gov/vuln/detail/CVE-2026-4725 Tue, 24 Mar 2026 13:16:08 +0000 Critical CVE-2026-4725

Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.

CVSS: 10.0 · CWE: CWE-416

View on NVD

]]> [Critical] CVE-2026-4724 – Undefined behavior in the Audio/Video component. This vulnerability was fixed in... https://nvd.nist.gov/vuln/detail/CVE-2026-4724 https://nvd.nist.gov/vuln/detail/CVE-2026-4724 Tue, 24 Mar 2026 13:16:08 +0000 Critical CVE-2026-4724

Undefined behavior in the Audio/Video component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.

CVSS: 9.1 · CWE: CWE-758

View on NVD

]]> [Critical] CVE-2026-4723 – Use-after-free in the JavaScript Engine component. This vulnerability was fixed ... https://nvd.nist.gov/vuln/detail/CVE-2026-4723 https://nvd.nist.gov/vuln/detail/CVE-2026-4723 Tue, 24 Mar 2026 13:16:08 +0000 Critical CVE-2026-4723

Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.

CVSS: 9.8 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-4722 – Privilege escalation in the IPC component. This vulnerability was fixed in Firef... https://nvd.nist.gov/vuln/detail/CVE-2026-4722 https://nvd.nist.gov/vuln/detail/CVE-2026-4722 Tue, 24 Mar 2026 13:16:08 +0000 High CVE-2026-4722

Privilege escalation in the IPC component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.

CVSS: 8.8 · CWE: N/A

View on NVD

]]> [Critical] CVE-2026-4721 – Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird... https://nvd.nist.gov/vuln/detail/CVE-2026-4721 https://nvd.nist.gov/vuln/detail/CVE-2026-4721 Tue, 24 Mar 2026 13:16:07 +0000 Critical CVE-2026-4721

Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird…

CVSS: 9.8 · CWE: CWE-120

View on NVD

]]> [Critical] CVE-2026-4720 – Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox ... https://nvd.nist.gov/vuln/detail/CVE-2026-4720 https://nvd.nist.gov/vuln/detail/CVE-2026-4720 Tue, 24 Mar 2026 13:16:07 +0000 Critical CVE-2026-4720

Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

CVSS: 9.8 · CWE: CWE-120

View on NVD

]]> [High] CVE-2026-4719 – Incorrect boundary conditions in the Graphics: Text component. This vulnerabilit... https://nvd.nist.gov/vuln/detail/CVE-2026-4719 https://nvd.nist.gov/vuln/detail/CVE-2026-4719 Tue, 24 Mar 2026 13:16:07 +0000 High CVE-2026-4719

Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

CVSS: 7.5 · CWE: CWE-754

View on NVD

]]> [High] CVE-2026-4718 – Undefined behavior in the WebRTC: Signaling component. This vulnerability was fi... https://nvd.nist.gov/vuln/detail/CVE-2026-4718 https://nvd.nist.gov/vuln/detail/CVE-2026-4718 Tue, 24 Mar 2026 13:16:07 +0000 High CVE-2026-4718

Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

CVSS: 8.1 · CWE: CWE-758

View on NVD

]]> [Critical] CVE-2026-4717 – Privilege escalation in the Netmonitor component. This vulnerability was fixed i... https://nvd.nist.gov/vuln/detail/CVE-2026-4717 https://nvd.nist.gov/vuln/detail/CVE-2026-4717 Tue, 24 Mar 2026 13:16:07 +0000 Critical CVE-2026-4717

Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

CVSS: 9.8 · CWE: N/A

View on NVD

]]> [Critical] CVE-2026-4716 – Incorrect boundary conditions, uninitialized memory in the JavaScript Engine com... https://nvd.nist.gov/vuln/detail/CVE-2026-4716 https://nvd.nist.gov/vuln/detail/CVE-2026-4716 Tue, 24 Mar 2026 13:16:07 +0000 Critical CVE-2026-4716

Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

CVSS: 9.1 · CWE: CWE-908

View on NVD

]]> [Critical] CVE-2026-4715 – Uninitialized memory in the Graphics: Canvas2D component. This vulnerability was... https://nvd.nist.gov/vuln/detail/CVE-2026-4715 https://nvd.nist.gov/vuln/detail/CVE-2026-4715 Tue, 24 Mar 2026 13:16:07 +0000 Critical CVE-2026-4715

Uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

CVSS: 9.1 · CWE: CWE-908

View on NVD

]]> [High] CVE-2026-4714 – Incorrect boundary conditions in the Audio/Video component. This vulnerability w... https://nvd.nist.gov/vuln/detail/CVE-2026-4714 https://nvd.nist.gov/vuln/detail/CVE-2026-4714 Tue, 24 Mar 2026 13:16:07 +0000 High CVE-2026-4714

Incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

CVSS: 7.5 · CWE: CWE-754

View on NVD

]]> [High] CVE-2026-4713 – Incorrect boundary conditions in the Graphics component. This vulnerability was ... https://nvd.nist.gov/vuln/detail/CVE-2026-4713 https://nvd.nist.gov/vuln/detail/CVE-2026-4713 Tue, 24 Mar 2026 13:16:07 +0000 High CVE-2026-4713

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

CVSS: 7.5 · CWE: CWE-754

View on NVD

]]> [High] CVE-2026-4712 – Information disclosure in the Widget: Cocoa component. This vulnerability was fi... https://nvd.nist.gov/vuln/detail/CVE-2026-4712 https://nvd.nist.gov/vuln/detail/CVE-2026-4712 Tue, 24 Mar 2026 13:16:07 +0000 High CVE-2026-4712

Information disclosure in the Widget: Cocoa component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

CVSS: 7.5 · CWE: CWE-200

View on NVD

]]> [Critical] CVE-2026-4711 – Use-after-free in the Widget: Cocoa component. This vulnerability was fixed in F... https://nvd.nist.gov/vuln/detail/CVE-2026-4711 https://nvd.nist.gov/vuln/detail/CVE-2026-4711 Tue, 24 Mar 2026 13:16:07 +0000 Critical CVE-2026-4711

Use-after-free in the Widget: Cocoa component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

CVSS: 9.8 · CWE: CWE-416

View on NVD

]]> [Critical] CVE-2026-4710 – Incorrect boundary conditions in the Audio/Video component. This vulnerability w... https://nvd.nist.gov/vuln/detail/CVE-2026-4710 https://nvd.nist.gov/vuln/detail/CVE-2026-4710 Tue, 24 Mar 2026 13:16:06 +0000 Critical CVE-2026-4710

Incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

CVSS: 9.8 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-4709 – Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerabil... https://nvd.nist.gov/vuln/detail/CVE-2026-4709 https://nvd.nist.gov/vuln/detail/CVE-2026-4709 Tue, 24 Mar 2026 13:16:06 +0000 High CVE-2026-4709

Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

CVSS: 7.5 · CWE: CWE-754

View on NVD

]]> [High] CVE-2026-4708 – Incorrect boundary conditions in the Graphics component. This vulnerability was ... https://nvd.nist.gov/vuln/detail/CVE-2026-4708 https://nvd.nist.gov/vuln/detail/CVE-2026-4708 Tue, 24 Mar 2026 13:16:06 +0000 High CVE-2026-4708

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

CVSS: 7.5 · CWE: CWE-754

View on NVD

]]> [High] CVE-2026-4707 – Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerab... https://nvd.nist.gov/vuln/detail/CVE-2026-4707 https://nvd.nist.gov/vuln/detail/CVE-2026-4707 Tue, 24 Mar 2026 13:16:06 +0000 High CVE-2026-4707

Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

CVSS: 7.5 · CWE: CWE-754

View on NVD

]]> [High] CVE-2026-4706 – Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerab... https://nvd.nist.gov/vuln/detail/CVE-2026-4706 https://nvd.nist.gov/vuln/detail/CVE-2026-4706 Tue, 24 Mar 2026 13:16:06 +0000 High CVE-2026-4706

Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

CVSS: 7.5 · CWE: CWE-754

View on NVD

]]> [Critical] CVE-2026-4705 – Undefined behavior in the WebRTC: Signaling component. This vulnerability was fi... https://nvd.nist.gov/vuln/detail/CVE-2026-4705 https://nvd.nist.gov/vuln/detail/CVE-2026-4705 Tue, 24 Mar 2026 13:16:06 +0000 Critical CVE-2026-4705

Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

CVSS: 9.8 · CWE: CWE-758

View on NVD

]]> [High] CVE-2026-4704 – Denial-of-service in the WebRTC: Signaling component. This vulnerability was fix... https://nvd.nist.gov/vuln/detail/CVE-2026-4704 https://nvd.nist.gov/vuln/detail/CVE-2026-4704 Tue, 24 Mar 2026 13:16:06 +0000 High CVE-2026-4704

Denial-of-service in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

CVSS: 7.5 · CWE: CWE-400

View on NVD

]]>