CVE-2026-16355

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...

CVE-2026-16358

Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...

CVE-2026-16363

JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

CVE-2026-16354

Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...

CVE-2026-16405 Information disclosure in the Networking: WebSockets component

Information disclosure in the Networking: WebSockets component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

CVE-2026-16359

Incorrect boundary conditions in the Audio/Video: GMP component. This...

CVE-2026-16387

Site isolation issue in the Networking component. This vulnerability w...

CVE-2026-16383

The CVE-2026-16383 entry describes a mitigation bypass in the DOM: Networking component of the Firefox browser. Affected software is Firefox with the vulnerability fixed in Firefox 153 and Firefox ESR 140.13. The available connected sources do not provide explicit exploitation details, vectors, o...

CVE-2026-16381

CVE-2026-16381 — Affects the Networking: DNS component in Firefox. The vulnerability is described as a same-origin policy bypass. The public records note the issue is fixed in Firefox 153 and Firefox ESR 140.13. No exploitation details are provided in the sources. The connected documents confirm ...

CVE-2026-16379

This CVE concerns a Privilege escalation in the DOM: Content Processes component affecting Firefox and Firefox ESR. The vulnerability is noted to have been fixed in Firefox 153 and ESR 140.13. The available documents identify the affected product as Firefox/Firefox ESR and the vulnerable area as ...

CVE-2026-16375

CVE-2026-16375 affects the Networking: HTTP component in Firefox. The issue is described as a site isolation problem that was fixed in Firefox 153 and Firefox ESR 140.13. The available documents do not provide additional technical specifics (e.g., exact vulnerable function, root cause, affected s...

CVE-2026-16374

Information disclosure in the Framework component in DevTools. This vu...

CVE-2026-16374

The CVE-2026-16374 entry pertains to Mozilla Firefox, describing an information disclosure vulnerability in the DevTools Framework component. The root cause details are not disclosed in the provided documents, but the issue is stated as fixed in Firefox 153 and Firefox ESR 140.13. Impact is limit...

CVE-2026-16371

CVE-2026-16371 describes a privilege escalation vulnerability in the DOM-based Navigation component of Firefox. The provided documents confirm the issue and state that it was fixed in Firefox 153 and Firefox ESR 140.13. No concrete exploit details, affected subcomponents, versions prior to the fi...

CVE-2026-16371 Privilege escalation in the DOM: Navigation component

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

CVE-2026-16357

Incorrect boundary conditions in the Graphics component. This vulnerab...

CVE-2026-16368

Incorrect boundary conditions in the JavaScript: WebAssembly component...

CVE-2026-16354

Information disclosure in the Graphics: ImageLib component. This vulne...

CVE-2026-16362

Use-after-free in the WebRTC: Audio/Video component. This vulnerabilit...

CVE-2026-16350

Incorrect boundary conditions in the Audio/Video: cubeb component. Thi...