CVE-2026-3889

Spoofing issue in Thunderbird. This vulnerability was fixed in Thunderbird 149 and Thunderbird 140.9...

EUVD-2026-14859

Privilege escalation in the IPC component. This vulnerability affects Firefox 149...

EUVD-2026-14869

Denial-of-service in the Libraries component in NSS. This vulnerability affects Firefox 149...

EUVD-2026-14853

Incorrect boundary conditions in the Graphics: Text component. This vulnerability affects Firefox 149 and Firefox ESR 140.9...

EUVD-2026-14825

Undefined behavior in the WebRTC: Signaling component. This vulnerability affects Firefox 149 and Firefox ESR 140.9...

EUVD-2026-14839

Information disclosure in the Widget: Cocoa component. This vulnerability affects Firefox 149 and Firefox ESR 140.9...

EUVD-2026-14821

JIT miscompilation in the JavaScript Engine component. This vulnerability affects Firefox 149 and Firefox ESR 140.9...

EUVD-2026-14811

Use-after-free in the Layout: Text and Fonts component. This vulnerability affects Firefox 149, Firefox ESR 115.34, and Firefox ESR 140.9...

EUVD-2026-14815

Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability affects Firefox 149, Firefox ESR 115.34, and Firefox ESR 140.9...

EUVD-2026-14849

Privilege escalation in the Netmonitor component. This vulnerability affects Firefox 149 and Firefox ESR 140.9...

EUVD-2026-14841

Incorrect boundary conditions in the Graphics component. This vulnerability affects Firefox 149 and Firefox ESR 140.9...

EUVD-2026-14834

Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability affects Firefox 149, Firefox ESR 115.34, and Firefox ESR 140.9...

EUVD-2026-14804

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability affects Firefox 149, Firefox ESR 115.34, and Firefox ESR 140.9...

CVE-2026-4712

Information disclosure in the Widget: Cocoa component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

CVE-2026-4710

Incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

CVE-2026-4700

Mitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

CVE-2026-4708

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

CVE-2026-4702

JIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

CVE-2026-4705

Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

CVE-2026-4706

Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...