CVE-2026-16396

Privilege escalation in WebExtensions. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

CVE-2026-16374

Information disclosure in the Framework component in DevTools. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

CVE-2026-16377

Mitigation bypass in the PDF Viewer component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

CVE-2026-16352

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...

CVE-2026-16350

Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...

CVE-2026-16361

CVE-2026-16361 affects Firefox ESR 115.37 and 140.12, described as memory safety bugs with evidence of memory corruption. The advisory notes these could have been exploited to run arbitrary code, and fixes are applied in Firefox ESR 115.38 and 140.13. Affected components/roots are not detailed be...

CVE-2026-16360

CVE-2026-16360 covers memory safety bugs in Firefox products: Firefox 152, Firefox ESR 115.37/140.12 with evidence of memory corruption and potential arbitrary-code execution. The issues were fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13. No exploitation details are provided in...

EUVD-2026-46243

Information disclosure in the Networking: WebSockets component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

CVE-2026-16396

The CVE-2026-16396 entry covers a privilege escalation in WebExtensions affecting Firefox. Affected component: WebExtensions API/extension environment within Firefox. Root cause details are not explicitly provided in the supplied documents, but the vulnerability has been fixed in Firefox 153 and ...

EUVD-2026-46234

Privilege escalation in WebExtensions. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

CVE-2026-16390

CVE-2026-16390 concerns a mitigation bypass in Firefox’s Enterprise Policies component. Across the provided sources, the vulnerability is described consistently as a bypass of mitigation controls, with no details on the exact underlying root cause in these documents. The impact is not elaborated ...

CVE-2026-16390

Mitigation bypass in the Enterprise Policies component. This vulnerabi...

CVE-2026-16391

Information disclosure in the Storage: IndexedDB component. This vulne...

EUVD-2026-46220

Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

EUVD-2026-46218

Same-origin policy bypass in the Networking: DNS component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

EUVD-2026-46211

Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

CVE-2026-16371

Privilege escalation in the DOM: Navigation component. This vulnerabil...

EUVD-2026-46207

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

CVE-2026-16355

JIT miscompilation in the JavaScript Engine: JIT component. This vulne...

CVE-2026-16368

CVE-2026-16368 involves incorrect boundary conditions in the JavaScript: WebAssembly component. The issue affects Firefox and Firefox ESR and was fixed in Firefox 153 and Firefox ESR 140.13. The connected sources confirm the root cause as boundary condition handling in the WebAssembly integration...