7154 matches found
CVE-2026-84118
CVE-2026-84118 is a use-after-free vulnerability in the JavaScript GC (Garbage Collector) component of Mozilla Firefox . The flaw can lead to low confidentiality and integrity impact when a user interacts with a crafted page, but does not affect availability (CVSS 3.1 score: 5.4 MEDIUM , vector A...
CVE-2026-84118 Use-after-free in the JavaScript: GC component
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
CVE-2026-84121
CVE-2026-84121 is a sandbox escape in Mozilla Firefox caused by a use-after-free in the DOM: Security component. A successful exploit allows an attacker to escape the browser sandbox, resulting in total technical impact (high confidentiality, integrity, and availability impact) across a changed s...
CVE-2026-84120 Use-after-free in the Audio/Video component
Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...
CVE-2026-84120
A use-after-free vulnerability in the Audio/Video component of Firefox and Firefox ESR allows a remote attacker to achieve arbitrary code execution . The flaw occurs when the program uses memory that has already been deallocated, leading to memory corruption. The CVSS 3.1 score is 5.4 (Medium) , ...
CVE-2026-84120
Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...
KLA91250 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Security vulnerability in the Remote Settings Client...
Mozilla Firefox ESR < 140.15
The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 140.15. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-84 advisory. - Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154 and...
Mozilla Firefox ESR < 153.2
The version of Firefox ESR installed on the remote Windows host is prior to 153.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-85 advisory. - Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155...
KLA91248 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1...
Mozilla Firefox ESR < 140.15
The version of Firefox ESR installed on the remote Windows host is prior to 140.15. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-84 advisory. - Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154 and Thunderbi...
PT-2026-84172
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 115.40 Firefox ESR versions prior to 140.15 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird versions prior to 140.15 Thunderbird versions prior to...
Mozilla Firefox ESR < 153.2
The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 153.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-85 advisory. - Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in...
RLSA-2026:58897 Important: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component CVE-2026-74983 firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL...
Astra Linux – Vulnerability in Firefox and Thunderbird
A read operation outside of its bound range could have caused a crash in the RLBox Expat driver. This vulnerability affects Firefox 113, Firefox ESR 102.11, and Thunderbird 102.11...
Astra Linux – Vulnerability in Firefox and Thunderbird
A WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out-of-bound write. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...
Astra Linux – Vulnerability in Firefox and Thunderbird
When Responsive Design Mode was enabled, it used references to objects that had previously been freed. We assume that with sufficient effort, this could have been exploited to execute arbitrary code. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...
Astra Linux – Vulnerability in Firefox and Thunderbird
The reordering of instructions resulted in a sequence of instructions that would cause an object to be incorrectly processed during garbage collection. This led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 78.13, Thunderbird 91, Firefox ESR 78.1...
Astra Linux – Vulnerability in Firefox and Thunderbird
If a custom mouse cursor is specified in CSS, under certain circumstances the cursor might be drawn over the browser UI, potentially causing confusion for users or leading to spoofing attacks. This vulnerability affects Firefox ESR 102.5, Thunderbird 102.5, and Firefox 107...
Astra Linux – Vulnerability in Firefox and Thunderbird
Certain types of allocations lacked annotations that, if the Garbage Collector was in a specific state, could have led to memory corruption and potentially exploitable crashes. This vulnerability affects Firefox 106, Firefox ESR 102.4, and Thunderbird 102.4...