CVE-2026-109727

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109728

A use-after-free vulnerability exists in the DOM: Animation component of Firefox and Thunderbird . This flaw was reported by Amy Burnett of OpenAI and is classified as having a high impact . The vulnerability has been addressed in Firefox 158 , Firefox ESR 115.43 , Firefox ESR 153.5 , Thunderbird...

CVE-2026-109728

Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109727

A use-after-free vulnerability exists in the Audio/Video component of the Firefox browser. This security flaw has a high impact. Remediation is available in Firefox 158 , Firefox ESR 115.43 , and Firefox ESR 153.5 . Information regarding specific exploitability or in-the-wild exploitation is not ...

CVE-2026-109730

The Graphics component in Mozilla Firefox and Thunderbird is vulnerable to an integer overflow (CWE-190). This vulnerability could potentially lead to arbitrary code execution , sandbox escape , information disclosure , mitigation bypass , or privilege escalation . This issue has been addressed i...

CVE-2026-109729

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109729 Use-after-free in the JavaScript Engine: JIT component

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

EUVD-2026-98643

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109725

A use-after-free vulnerability exists in the DOM: Core & HTML component of the Firefox web browser. This flaw has a high impact and was addressed in versions Firefox 158 , Firefox ESR 115.43 , and Firefox ESR 153.5 . No specific exploit details or links are provided in the documentation.

CVE-2026-109726

Firefox is vulnerable to a use-after-free vulnerability in the SVG component . This flaw was reported by Mozilla and is associated with Bug 2074212 . The vulnerability has been addressed in Firefox 158 , Firefox ESR 115.43 , and Firefox ESR 153.5 . No specific exploit details or in-the-wild explo...

CVE-2026-109722

The JavaScript Engine: JIT component in Firefox is susceptible to a JIT miscompilation vulnerability (CVE-2026-109722 ). This issue has a high impact and was reported by Amy Burnett of OpenAI. Remediation is available in Firefox 158 , Firefox ESR 115.43 , and Firefox ESR 153.5 . Details regarding...

EUVD-2026-98642

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109722 JIT miscompilation in the JavaScript Engine: JIT component

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109725 Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109722

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109726

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109718

A use-after-free vulnerability exists in the XML component of certain software products. This flaw was addressed in Firefox 158 , Firefox ESR 115.43 , Firefox ESR 153.5 , Thunderbird 158 , and Thunderbird 153.5 . Exploitation details are not provided in the documents.

CVE-2026-109718 Use-after-free in the XML component

Use-after-free in the XML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109718 Use-after-free in the XML component

Use-after-free in the XML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, and Firefox ESR 153.5...

CVE-2026-109712

The Mozilla Firefox web browser and Thunderbird email client are affected by a sandbox escape vulnerability. The root cause is uninitialized memory within the Graphics component . This security issue has been remediated in the following versions: Firefox 158 , Firefox ESR 115.43 , Firefox ESR 153...