EUVD-2026-98489

Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

CVE-2026-109714

Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

CVE-2026-109720 JIT miscompilation in the JavaScript: WebAssembly component

JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109721 Incorrect boundary conditions in the JavaScript Engine: JIT component

Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109721

Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

EUVD-2026-98492

Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109720 JIT miscompilation in the JavaScript: WebAssembly component

JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109721 Incorrect boundary conditions in the JavaScript Engine: JIT component

Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109714

Mozilla Firefox and Thunderbird are affected by CVE-2026-109714 , which involves incorrect boundary conditions in the Layout component . This vulnerability has a high impact and was resolved in versions 158 of both products. Exploitation details are not provided in the documents.

CVE-2026-109721

The Firefox IonMonkey JIT component contains incorrect boundary conditions where a constant-folding guard incorrectly validates shift amounts. Specifically, shifts of 32, 64, or 96 pass the guard but are masked to zero during folding. When a negative number is shifted, the resulting signed int32 ...

CVE-2026-109708

The Networking component in Mozilla products is vulnerable to a sandbox escape caused by incorrect boundary conditions . This flaw affects Firefox , Firefox ESR , Thunderbird , and Thunderbird ESR . The vulnerability was addressed in Firefox 158 , Firefox ESR 153.5 , Thunderbird 158 , and Thunder...

CVE-2026-109707 Sandbox escape due to use-after-free in the Networking component

Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109733

A JIT miscompilation vulnerability exists in the JavaScript Engine: JIT component of Mozilla products. This flaw could potentially lead to arbitrary code execution , sandbox escape , information disclosure , mitigation bypass , or privilege escalation . The vulnerability has been addressed in Fir...

CVE-2026-109753

The Mozilla Firefox and Thunderbird web browsers are affected by CVE-2026-109753 , which stems from incorrect boundary conditions within the Layout component . This vulnerability could potentially lead to arbitrary code execution, sandbox escape, information disclosure, mitigation bypass, or priv...

CVE-2026-109705 Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component

Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109733 JIT miscompilation in the JavaScript Engine: JIT component

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109753 Incorrect boundary conditions in the Layout component

Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

EUVD-2026-98650

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109727

A use-after-free vulnerability exists in the Audio/Video component of the Firefox browser. This security flaw has a high impact. Remediation is available in Firefox 158 , Firefox ESR 115.43 , and Firefox ESR 153.5 . Information regarding specific exploitability or in-the-wild exploitation is not ...

CVE-2026-109728

A use-after-free vulnerability exists in the DOM: Animation component of Firefox and Thunderbird . This flaw was reported by Amy Burnett of OpenAI and is classified as having a high impact . The vulnerability has been addressed in Firefox 158 , Firefox ESR 115.43 , Firefox ESR 153.5 , Thunderbird...