CVE-2026-16398

CVE-2026-16398 is a site isolation issue in Firefox's Graphics component. Affected product: Mozilla Firefox prior to version 153. Root cause: site isolation in the Graphics component. Impact: confidentiality impact (C), no integrity or availability impact described; CVSSv3.1 shows 7.5 (HIGH) with...

CVE-2026-16398

Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16398 Site isolation issue in the Graphics component

Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16398

Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

EUVD-2026-46235

Clickjacking issue in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 153...

CVE-2026-16397 Clickjacking issue in the WebExtensions component in Firefox for Android

Clickjacking issue in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 153...

CVE-2026-16397

Clickjacking issue in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 153...

CVE-2026-16396 Privilege escalation in WebExtensions

Privilege escalation in WebExtensions. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

CVE-2026-16396

CVE-2026-16396 is a privilege-escalation issue in WebExtensions that affects Mozilla Firefox and Thunderbird components. Public advisories indicate the vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. The CVSS data from the initial document show...

CVE-2026-16395

Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16395

CVE-2026-16395 : Integer overflow in the Audio/Video component of Firefox. root cause: integer overflow within the media handling path. Impact per sources: high confidentiality, integrity, and availability should be considered given the CVSS vector indicates network attack vector with no user int...

CVE-2026-16395 Integer overflow in the Audio/Video component

Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

EUVD-2026-46232

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 153...

CVE-2026-16394

CVE-2026-16394 describes a mitigation bypass in the DOM: Security component of the Firefox browser. The issue is reported as affecting the DOM/Security component and has been fixed in Firefox 153. The CVSS 3.1 vector indicates Network attack vector, low complexity, no privileges required, with us...

CVE-2026-16359 Incorrect boundary conditions in the Audio/Video: GMP component

Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

EUVD-2026-46230

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153...

CVE-2026-16393 Incorrect boundary conditions in the Graphics: WebGPU component

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16393

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

EUVD-2026-46229

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153...

CVE-2026-16392

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...