EUVD-2026-60694

Site isolation issue in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1...

EUVD-2026-60690

Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1...

EUVD-2026-60691

Clickjacking issue in the Widget component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1...

EUVD-2026-60687

Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1...

EUVD-2026-60668

Race condition, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, and Firefox ESR 153.1...

CVE-2026-74965

Privilege escalation in the Shell Integration component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1...

CVE-2026-74941

Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1...

CVE-2026-74978

Clickjacking issue in the Widget component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1...

CVE-2026-74956

A same-origin policy bypass in Firefox's DOM Service Workers component could allow cross-origin data access. Mozilla fixed it in Firefox 154 and Firefox ESR 153.1; affected users should upgrade immediately. No exploitation details are provided in the documents.

CVE-2026-74947

Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1...

CVE-2026-74972

Mozilla Firefox's DOM Push Subscriptions component exposes sensitive information. Affected versions are fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1. No exploitation details are provided; users should upgrade to patched versions. Mozilla advisory: https://www.mozilla.org/securi...