CVE-2026-109734

A mitigation bypass exists in the DOM: Security component affecting the Mozilla Firefox and Thunderbird web browsers. This vulnerability allows for the bypassing of security measures, which could lead to various impacts including arbitrary code execution , sandbox escape , information disclosure ...

CVE-2026-109714

Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

EUVD-2026-98489

Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

CVE-2026-109714

Mozilla Firefox and Thunderbird are affected by CVE-2026-109714 , which involves incorrect boundary conditions in the Layout component . This vulnerability has a high impact and was resolved in versions 158 of both products. Exploitation details are not provided in the documents.

EUVD-2026-98492

Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109721

Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109720 JIT miscompilation in the JavaScript: WebAssembly component

JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109721 Incorrect boundary conditions in the JavaScript Engine: JIT component

Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109720 JIT miscompilation in the JavaScript: WebAssembly component

JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109721 Incorrect boundary conditions in the JavaScript Engine: JIT component

Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109721

The Firefox IonMonkey JIT component contains incorrect boundary conditions where a constant-folding guard incorrectly validates shift amounts. Specifically, shifts of 32, 64, or 96 pass the guard but are masked to zero during folding. When a negative number is shifted, the resulting signed int32 ...

CVE-2026-109708

The Networking component in Mozilla products is vulnerable to a sandbox escape caused by incorrect boundary conditions . This flaw affects Firefox , Firefox ESR , Thunderbird , and Thunderbird ESR . The vulnerability was addressed in Firefox 158 , Firefox ESR 153.5 , Thunderbird 158 , and Thunder...

CVE-2026-109707 Sandbox escape due to use-after-free in the Networking component

Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

EUVD-2026-98650

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109753

The Mozilla Firefox and Thunderbird web browsers are affected by CVE-2026-109753 , which stems from incorrect boundary conditions within the Layout component . This vulnerability could potentially lead to arbitrary code execution, sandbox escape, information disclosure, mitigation bypass, or priv...

CVE-2026-109733 JIT miscompilation in the JavaScript Engine: JIT component

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109753 Incorrect boundary conditions in the Layout component

Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109733

A JIT miscompilation vulnerability exists in the JavaScript Engine: JIT component of Mozilla products. This flaw could potentially lead to arbitrary code execution , sandbox escape , information disclosure , mitigation bypass , or privilege escalation . The vulnerability has been addressed in Fir...

CVE-2026-109705 Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component

Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109729

A use-after-free memory vulnerability exists in the JavaScript Engine: JIT component of Firefox and Thunderbird. An attacker could exploit incorrect memory handling by tricking a user into visiting a malicious webpage, potentially leading to arbitrary code execution or a Denial of Service (DoS) ....