CVE-2026-100781

A sandbox escape vulnerability exists in the Graphics: WebRender component due to incorrect boundary conditions . This issue affects multiple Mozilla products, including Firefox ESR 115.42 , Firefox ESR 140.17 , Firefox 157 , Thunderbird 140.17 , Thunderbird 153.4 , and Thunderbird 157 . The vuln...

CVE-2026-100781

Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

CVE-2026-100781

Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

CVE-2026-100782

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

EUVD-2026-88916

Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 157...

CVE-2026-100764 Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component

Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 157...

CVE-2026-100764

The Firefox browser is affected by a privilege escalation vulnerability in the Graphics: WebGPU component. The root cause is identified as incorrect boundary conditions . This vulnerability was addressed and fixed in Firefox 157 . Exploitation details and specific attack vectors are not provided ...

CVE-2026-100763 Incorrect boundary conditions in the Graphics: WebGPU component

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

CVE-2026-100763 Incorrect boundary conditions in the Graphics: WebGPU component

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

EUVD-2026-88915

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 157...

CVE-2026-100763

Mozilla Firefox and Thunderbird versions earlier than 157 are vulnerable to a heap buffer overflow due to incorrect boundary conditions in the Graphics: WebGPU component. An attacker could exploit this by inducing a user to open an email with a size of 2GB or greater. This vulnerability can lead ...

CVE-2026-100763

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

CVE-2026-100763

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

CVE-2026-100756

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

EUVD-2026-88908

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

CVE-2026-100756 Incorrect boundary conditions in the Audio/Video: Playback component

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

CVE-2026-100756 Incorrect boundary conditions in the Audio/Video: Playback component

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

CVE-2026-100756

The Audio/Video: Playback component is vulnerable to incorrect boundary conditions . An attacker could trigger a heap buffer overflow by inducing a user to open an email with a size greater than or equal to 2GB . Impacted products include Firefox (versions 157, ESR 115.42, 140.17, and 153.4) and ...

CVE-2026-100756

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

PT-2026-102537

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Thunderbird versions prior to 157 Description Incorrect boundary conditions exist within the Graphics: WebGPU component. WebGPU is a modern API that provides high-performance graphics and compute capabilities to w...