10027 matches found
CVE-2026-92015 Privilege escalation in the WebExtensions component
Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...
EUVD-2026-78477
Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16...
CVE-2026-92014
CVE-2026-92014 is a privilege escalation vulnerability in the Graphics: WebRender component of Mozilla's Firefox and Thunderbird , caused by incorrect boundary conditions. A remote attacker with network access and user interaction can exploit this to achieve high impact on confidentiality, integr...
CVE-2026-92014 Privilege escalation due to incorrect boundary conditions in the Graphics component
Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16...
CVE-2026-92014
Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16...
CVE-2026-92010
CVE-2026-92010 is a privilege escalation vulnerability in the Graphics: CanvasWebGL component of Firefox and Thunderbird , caused by incorrect boundary conditions . The CVSS 3.1 score is 8.8 (HIGH) with a network attack vector and required user interaction, impacting confidentiality, integrity, a...
CVE-2026-92005
Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...
PT-2026-91957
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16...
PT-2026-91965
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16...
PT-2026-91952
Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16...
PT-2026-92003
Use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156...
Security Vulnerabilities fixed in Firefox ESR 140.16 — Mozilla
Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component Reporter...
PT-2026-91964
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16...
Mozilla Firefox ESR < 153.3
The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 153.3. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-93 advisory. - Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 156 a...
Security Vulnerabilities fixed in Firefox ESR 115.41 — Mozilla
Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-92006: Privilege escalation due to incorrect boundary conditions in the Graphics:...
Mozilla Firefox ESR < 115.41
The version of Firefox ESR installed on the remote Windows host is prior to 115.41. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-91 advisory. - Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR...
Mozilla Firefox ESR < 140.16
The version of Firefox ESR installed on the remote Windows host is prior to 140.16. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-92 advisory. - Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerabilit...
PT-2026-92000
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156...