CVE-2026-109780

Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

CVE-2026-109770 Spoofing issue in the DOM: Web Serial component

Spoofing issue in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109770

A spoofing issue exists in the DOM: Web Serial component of the Mozilla Firefox web browser and Thunderbird. This vulnerability has been addressed in Firefox 158 , Firefox ESR 153.5 , Thunderbird 158 , and Thunderbird 153.5 . Practical impact details or specific exploit information are not provid...

CVE-2026-109765

A race condition and use-after-free vulnerability exists in the Graphics: Text component of several Mozilla products. This flaw was addressed in Firefox 158 , Firefox ESR 153.5 , Thunderbird 158 , and Thunderbird 153.5 . No specific exploit details or in-the-wild exploitation information are prov...

CVE-2026-109761

A use-after-free vulnerability exists in the JavaScript: WebAssembly component of Firefox and Thunderbird . This flaw was addressed in versions 158 of both products. Specific details regarding the root cause or exploitability are not provided in the documentation.

CVE-2026-109762 Incorrect boundary conditions in the SVG component

Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109762

Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109762

The SVG component in Mozilla Firefox and Thunderbird is affected by a vulnerability caused by incorrect boundary conditions . This issue has been resolved in Firefox 158 , Firefox ESR 153.5 , Thunderbird 158 , and Thunderbird 153.5 . While the documentation confirms the technical cause and affect...

CVE-2026-109757

A race condition in the Networking component of Mozilla products allows for a sandbox escape . This vulnerability affects Firefox , Firefox ESR , Thunderbird , and Thunderbird ESR . Remediation is available in Firefox 158 , Firefox ESR 153.5 , Thunderbird 158 , and Thunderbird 153.5 . On Debian, ...

CVE-2026-109756

A privilege escalation vulnerability exists in the DOM: Navigation component . This flaw affects Firefox , Firefox ESR , and Thunderbird . The vulnerability has been addressed in Firefox 158 , Firefox ESR 153.5 , Thunderbird 158 , and Thunderbird 153.5 . No specific details regarding the root cau...

CVE-2026-109756 Privilege escalation in the DOM: Navigation component

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109756 Privilege escalation in the DOM: Navigation component

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109756

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109752

A Use-after-free vulnerability exists in the DOM: Workers component of the Firefox and Thunderbird web browsers. This flaw was addressed in Firefox 158 , Firefox ESR 153.5 , Thunderbird 158 , and Thunderbird 153.5 . No specific exploit details or in-the-wild exploitation instances are provided in...

CVE-2026-109754 Incorrect boundary conditions in the DOM: Editor component

Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109754

Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109752

Use-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109754

The Mozilla Firefox web browser and Thunderbird email client are affected by CVE-2026-109754 , which involves incorrect boundary conditions in the DOM: Editor component . This flaw could potentially lead to arbitrary code execution , sandbox escape , information disclosure , mitigation bypass , o...

CVE-2026-109750 Site isolation issue in the DOM: Web Authentication component

Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

CVE-2026-109750

A site isolation issue exists in the DOM: Web Authentication component of Firefox and Thunderbird . This vulnerability was addressed in version 158 for both products. While the technical root cause is not detailed in the documents, the issue is associated with CWE-862 (Missing Authorization) and ...