10862 matches found
CVE-2026-84139
CVE-2026-84139 is a clickjacking vulnerability in the DOM: Events component of Mozilla Firefox . The flaw allows an attacker to trick a user into performing unintended actions by overlaying transparent or invisible elements over interactive UI controls. The issue was fixed in Firefox 155 and Fire...
EUVD-2026-69087
Clickjacking issue in the DOM: Events component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
EUVD-2026-69085
Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
CVE-2026-84137 Spoofing issue in the DOM: Core & HTML component
Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
EUVD-2026-69084
Other issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
CVE-2026-84136
CVE-2026-84136 is an issue in the DOM: Navigation component of Firefox , classified under the "Other" category, indicating the specific root cause is not detailed in the provided documents. The vulnerability was fixed in Firefox 155 and Firefox ESR 153.2 . The Mozilla security advisories (MFSA202...
CVE-2026-84136 Other issue in the DOM: Navigation component
Other issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
CVE-2026-84133
CVE-2026-84133 is a site isolation vulnerability in the DOM: Push Subscriptions component of Mozilla Firefox . The issue allows cross-site isolation to be bypassed through the Push Subscriptions API, potentially enabling an attacker to gain information or execute actions across site boundaries. T...
CVE-2026-84133 Site isolation issue in the DOM: Push Subscriptions component
Site isolation issue in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
EUVD-2026-69081
Site isolation issue in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
CVE-2026-84129 Site isolation issue in the DOM: Navigation component
Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
CVE-2026-84129
CVE-2026-84129 is a site isolation issue in the DOM: Navigation component of Firefox . A site isolation flaw in the Navigation component can allow a compromised website to bypass isolation boundaries and interact with content from another site context. The vulnerability was fixed in Firefox 155 a...
EUVD-2026-69078
Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
CVE-2026-84125 Use-after-free in the DOM: Core & HTML component
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
CVE-2026-84125
A use-after-free vulnerability in the DOM: Core & HTML component of Firefox could allow a remote attacker to execute arbitrary code , according to Red Hat's assessment. The CVSS 3.1 score is 5.4 (Medium) with a network attack vector, low complexity, no required privileges, but user interaction re...
EUVD-2026-69074
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
CVE-2026-84125 Use-after-free in the DOM: Core & HTML component
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
CVE-2026-84124 Use-after-free in the DOM: Core & HTML component
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...
CVE-2026-84124 Use-after-free in the DOM: Core & HTML component
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...
