PT-2026-61922

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153 Description A JIT miscompilation issue exists within the JIT component of the JavaScript Engine. JIT Just-In-Time compilation is a method used by the engine to improve performance...

DEBIAN-CVE-2026-15719

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13...

UBUNTU-CVE-2026-15719

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13...

CVE-2026-15719

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13...

CVE-2026-15718

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 140.13, and Thunderbird 140.13...

UBUNTU-CVE-2026-15718

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 140.13, and Thunderbird 140.13...

CVE-2026-15719 Site isolation issue in the DOM: Navigation component

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13...

CVE-2026-15719

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13...

CVE-2026-15719 Site isolation issue in the DOM: Navigation component

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13...

CVE-2026-15719

A site isolation issue exists in the DOM: Navigation component of the Mozilla Firefox web browser and Thunderbird mail client. The root cause involves deficiencies in access control within the navigation mechanism, which could allow an attacker to compromise the confidentiality and integrity of p...

CVE-2026-15719

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 115.38, and Firefox ESR 140.13...

EUVD-2026-43662

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6...

CVE-2026-15718 Invalid pointer in the JavaScript: WebAssembly component

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 140.13, and Thunderbird 140.13...

PT-2026-58014

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 152.0.6 Description Issues exist within the DOM Navigation and JavaScript WebAssembly components. The DOM Navigation flaw involves improper access control, while the WebAssembly issue is caused by a...

CVE-2026-12319

Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 152 and Thunderbird 152...

CVE-2026-12295

Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12...

CVE-2026-12325

A Denial-of-service vulnerability exists in the Graphics: ImageLib component of Mozilla products, including Firefox and Thunderbird . Attackers can exploit this flaw to cause a denial-of-service attack. This issue has been addressed in Firefox 152 , Firefox ESR 140.12 , Firefox ESR 115.37 , Thund...

CVE-2026-12323 Spoofing issue in the DOM: Core & HTML component

Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152 and Thunderbird 152...

CVE-2026-12322 Clickjacking issue in the Widget: Gtk component

Clickjacking issue in the Widget: Gtk component. This vulnerability was fixed in Firefox 152 and Thunderbird 152...

CVE-2026-12318

CVE-2026-12318 involves incorrect boundary conditions in the Libraries component of the NSS cryptographic libraries. This flaw could lead to a denial of service (DoS) or potentially the execution of arbitrary code . The vulnerability affects multiple distributions and applications, including Fire...