EUVD-2026-78502

Mitigation bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156...

CVE-2026-92038

CVE-2026-92038 is a mitigation bypass in the Remote Settings Client component of Mozilla's Firefox and Thunderbird. The bug was reported by Mozilla itself (Bug 2068952) and rated with high impact in the MFSA2026-90 advisory. It is fixed in Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and T...

CVE-2026-92038 Mitigation bypass in the Remote Settings Client component

Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

EUVD-2026-78501

Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156...

CVE-2026-92038

Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92035

Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92035

CVE-2026-92035 is a sandbox escape in the Graphics component of Mozilla Firefox and Thunderbird, caused by incorrect boundary conditions. Mozilla rates the impact as high . The flaw was identified internally by Mozilla (Bug 2061245) and is fixed in Firefox 156 , Firefox ESR 153.3 , Thunderbird 15...

CVE-2026-92032

CVE-2026-92032 is a sandbox escape caused by an invalid pointer in the Graphics component of Mozilla's products. The flaw allows a sandboxed process to escape its isolation boundary. It affects Firefox , Firefox ESR , and Thunderbird , and is fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR ...

EUVD-2026-78494

Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16...

CVE-2026-92030

Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

CVE-2026-92029

CVE-2026-92029 is a use-after-free vulnerability in the SVG component of Mozilla's Firefox and Thunderbird. The CVSS 3.1 score is 8.8 (HIGH) , requiring only user interaction over the network with no privileges needed, and can lead to high impact on confidentiality, integrity, and availability. T...

EUVD-2026-78491

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16...

CVE-2026-92027

CVE-2026-92027 is a use-after-free vulnerability in the DOM: Streams component of Firefox and Thunderbird . It carries a CVSS 3.1 score of 8.8 (High) , requiring network access and user interaction but no privileges, with high impact to confidentiality, integrity, and availability. Per the Debian...

CVE-2026-92027 Use-after-free in the DOM: Streams component

Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

CVE-2026-92026 Use-after-free in the Networking component

Use-after-free in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

CVE-2026-92026

CVE-2026-92026 is a use-after-free vulnerability in the Networking component of Firefox and Thunderbird , scored 8.8 (High) with a requirement for user interaction (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The CISA SSVC assessment rates exploitation as none observed , not automatable , with...

CVE-2026-92026

Use-after-free in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

CVE-2026-92025

CVE-2026-92025 is a use-after-free vulnerability in the DOM: Navigation component of Mozilla Firefox and Thunderbird . The flaw could potentially result in arbitrary code execution, information disclosure, or privilege escalation , per the Mozilla Foundation's security advisory. The CVSS 3.1 base...

CVE-2026-92025

Use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

CVE-2026-92025 Use-after-free in the DOM: Navigation component

Use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...