Linux Distros Unpatched Vulnerability : CVE-2026-92007

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.4...

Linux Distros Unpatched Vulnerability : CVE-2026-92019

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153....

Linux Distros Unpatched Vulnerability : CVE-2026-92005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156,...

AlmaLinux 9 : firefox (ALSA-2026:67133)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67133 advisory. firefox: thunderbird: Privilege escalation in the DOM: Workers component CVE-2026-16365 firefox: thunderbird: Sandbox escape in the Remote Settings Clien...

Linux Distros Unpatched Vulnerability : CVE-2026-92027

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbir...

Oracle Linux 10 : firefox (ELSA-2026-69461)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-69461 advisory. 140.16.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding...

Linux Distros Unpatched Vulnerability : CVE-2026-92025

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3,...

Linux Distros Unpatched Vulnerability : CVE-2026-92021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16. CVE-2026-92021 Note that Ness...

AlmaLinux 8 : firefox (ALSA-2026:68549)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:68549 advisory. firefox: thunderbird: Privilege escalation in the DOM: Workers component CVE-2026-16365 firefox: thunderbird: Sandbox escape in the Remote Settings Clien...

AlmaLinux 10 : firefox (ALSA-2026:67129)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:67129 advisory. firefox: thunderbird: Privilege escalation in the DOM: Workers component CVE-2026-16365 firefox: thunderbird: Sandbox escape in the Remote Settings Clie...

Linux Distros Unpatched Vulnerability : CVE-2026-92014

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and...

CVE-2022-26485

CVE-2022-26485 Firefox 78.0 Windows でテスト済み https://ftp.mozilla.org/pub/firefox/releases/78.0/win64/en-US/Firefox%20Setup%2078.0.exe...

CVE-2022-1802

CVE-2022-1802 + CVE-2022-1529 + CVE-2022-2200 Firefox 100.0.1 Windows に対してテスト済み https://ftp.mozilla.org/pub/firefox/releases/100.0.1/win64/en-US/Firefox%20Setup%20100.0.1.exe...

CVE-2026-74939-escape-the-mac-n-cheese-box

CVE-2026-74939 — Firefox コンテンツ→親プロセス権限昇格 Firefox 149.0a1 nightly（2fbc0748c4、修正前）におけるサンドボックスエスケープの概念実証です。侵害されたコンテンツプロセスが IPDL メッセージを偽装し、親 プロセスに特権 （privilegedabout）プロセスへページをロードさせます。 これはステージ 2 のサンドボックスエスケープであり、コンテンツプロセス RCE（例: CVE-2026-2796）の後に連鎖させることを意図しています。 バグ（Mozilla バグ 2054416） 親プロセスは、コンテンツ→親...

firefox security update

An update is available for firefox. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...

RLSA-2026:69461 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Use-after-free in the SVG component CVE-2026-92024 firefox: thunderbird: Mitigation bypass in the Remote Settings Client component CVE-2026-92019...

RedactKit

RedactKit — Redact It All, Protect It All RedactKit is a Firefox extension that helps you protect your privacy by automatically hiding sensitive or personal words on any webpage. Whether it’s your name, email, or anything else , RedactKit replaces those words with REDACTED in real-time — even in...

Trespasser

CVE-2026-74970 · Firefox Fission site-isolation bypass via missing PipelineId namespace check This directory holds an honest reproduction scaffold for a Fission site-isolation authorization bypass in Firefox WebRender. Under Fission each content process owns a distinct PipelineId namespace, but t...

CVE-2015-7214

CVE-2015-7214 CVE-2015-7214 とは？ 以下のリンクを参照してください。 data および view-source URI を介したクロスサイトリーディング攻撃 内容 www/index.html Web 用 SOP バイパス PoC local/index.html ローカル用 SOP バイパス PoC 必要条件 Firefox バージョン 42.0 以前 以下は各プラットフォーム向けの Firefox 42.0 のダウンロードリンクです。 Windows...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: firefox (UTSA-2023-002129)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002129 advisory. defineAttribute in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow. Tenable has extracted the preceding description block directly from the Uni...