CVE-2026-16349

Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

EUVD-2026-46251

Memory safety bugs present in Firefox ESR 115.37, Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153, Firefox...

CVE-2026-16412 Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153

Memory safety bugs present in Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13,...

EUVD-2026-46249

Memory safety bugs present in Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153...

CVE-2026-16411

CVE-2026-16411 affects Firefox 152, with memory safety bugs that show evidence of memory corruption and could potentially be exploited to run arbitrary code. The issue is mitigated by upgrading to Firefox 153 (the fix is listed as per sources). The NVD entry notes a high-severity impact (CVSS 3.1...

CVE-2026-16410 JIT miscompilation in the JavaScript Engine: JIT component

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16410 JIT miscompilation in the JavaScript Engine: JIT component

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16410

CVE-2026-16410: A JIT miscompilation in the JavaScript Engine's JIT component of Firefox was fixed in Firefox 153. Affected versions are prior to 153; use of the vulnerable JIT code could lead to high-severity impact per reported CVSS metrics (CRITICAL, HIGH confidentiality, integrity, availabili...

CVE-2026-16410

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16409

Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16409 Invalid pointer in the Security: PSM component

Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

EUVD-2026-46247

Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153...

CVE-2026-16409

CVE-2026-16409 is an invalid pointer issue in the Security: PSM component that affects Firefox and Thunderbird. The vulnerability is documented as fixed in Firefox 153 and Thunderbird 153, with a CVSS 3.1 base score of 7.5 (High) and an exploit vector of NETWORK with no user interaction required....

CVE-2026-16409 Invalid pointer in the Security: PSM component

Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16408 Integer overflow in the Audio/Video: Playback component

Integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16407

Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

EUVD-2026-46246

Integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153...

CVE-2026-16407

The CVE-2026-16407 entry describes a mitigation bypass in the DOM: Service Workers component. Affected software is Mozilla Firefox (and dependent Thunderbird) prior to version 153, with the underlying issue addressed by fixes in Firefox 153/Thunderbird 153. The practical impact is a bypass of mit...

CVE-2026-16406 Mitigation bypass in the Networking component

Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16406

CVE-2026-16406: A mitigation bypass in the Networking component was reported for Firefox; the vulnerability is addressed by Firefox 153. The available sources do not specify the exact root cause, affected subcomponents, or exploitation details beyond the fix version. CVSSv3.1 metrics are provided...