CVE-2026-109754

Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109740 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109740

The Widget: Win32 component in Firefox and Thunderbird is vulnerable to a sandbox escape due to incorrect boundary conditions. This flaw could allow an attacker to bypass sandbox protections. The vulnerability has been addressed in Firefox 158 , Firefox ESR 153.5 , Thunderbird 158 , and Thunderbi...

CVE-2026-109740

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109731

The Graphics: Canvas2D component in Mozilla Firefox and Thunderbird is affected by incorrect boundary conditions , as identified in CVE-2026-109731 . This flaw could potentially lead to arbitrary code execution , sandbox escape , information disclosure , mitigation bypass , or privilege escalatio...

CVE-2026-109731 Incorrect boundary conditions in the Graphics: Canvas2D component

Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109731 Incorrect boundary conditions in the Graphics: Canvas2D component

Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109731

Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109714 Incorrect boundary conditions in the Layout component

Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

EUVD-2026-98489

Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

EUVD-2026-98492

Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109714

Mozilla Firefox and Thunderbird are affected by CVE-2026-109714 , which involves incorrect boundary conditions in the Layout component . This vulnerability has a high impact and was resolved in versions 158 of both products. Exploitation details are not provided in the documents.

CVE-2026-109721

The Firefox IonMonkey JIT component contains incorrect boundary conditions where a constant-folding guard incorrectly validates shift amounts. Specifically, shifts of 32, 64, or 96 pass the guard but are masked to zero during folding. When a negative number is shifted, the resulting signed int32 ...

CVE-2026-109714 Incorrect boundary conditions in the Layout component

Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

CVE-2026-109721 Incorrect boundary conditions in the JavaScript Engine: JIT component

Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109721 Incorrect boundary conditions in the JavaScript Engine: JIT component

Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109714

Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

CVE-2026-109721

Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109708

The Networking component in Mozilla products is vulnerable to a sandbox escape caused by incorrect boundary conditions . This flaw affects Firefox , Firefox ESR , Thunderbird , and Thunderbird ESR . The vulnerability was addressed in Firefox 158 , Firefox ESR 153.5 , Thunderbird 158 , and Thunder...

CVE-2026-109708 Sandbox escape due to incorrect boundary conditions in the Networking component

Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...