CVE-2026-109705 Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component

Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109705

Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109705

The Networking component in Firefox is vulnerable to a sandbox escape and site isolation issue caused by incorrect boundary conditions and a use-after-free condition. This security flaw has a high impact rating. The vulnerability was addressed in Firefox 158 and Firefox ESR 153.5 . No specific ex...

CVE-2026-109727

A use-after-free vulnerability exists in the Audio/Video component of the Firefox browser. This security flaw has a high impact. Remediation is available in Firefox 158 , Firefox ESR 115.43 , and Firefox ESR 153.5 . Information regarding specific exploitability or in-the-wild exploitation is not ...

CVE-2026-109729

A use-after-free memory vulnerability exists in the JavaScript Engine: JIT component of Firefox and Thunderbird. An attacker could exploit incorrect memory handling by tricking a user into visiting a malicious webpage, potentially leading to arbitrary code execution or a Denial of Service (DoS) ....

CVE-2026-109729 Use-after-free in the JavaScript Engine: JIT component

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109732

A use-after-free vulnerability exists in the DOM: Streams component of the browser engine. This issue was addressed in the following releases: Firefox 158 , Firefox ESR 115.43 , Firefox ESR 153.5 , Thunderbird 158 , and Thunderbird 153.5 . Exploitation details are not provided in the documents.

CVE-2026-109728

Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109729

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109727

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109732

Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109728

A use-after-free vulnerability exists in the DOM: Animation component of Firefox and Thunderbird . This flaw was reported by Amy Burnett of OpenAI and is classified as having a high impact . The vulnerability has been addressed in Firefox 158 , Firefox ESR 115.43 , Firefox ESR 153.5 , Thunderbird...

EUVD-2026-98641

Race condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

EUVD-2026-98643

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109719

A race condition and use-after-free vulnerability exists in the Graphics: CanvasWebGL component of Firefox and Thunderbird . This security flaw, reported by Shu Takahashi of Velcore Consulting Inc., was addressed in the following versions: Firefox 158 , Firefox ESR 115.43 , Firefox ESR 153.5 , Th...

CVE-2026-109726

Firefox is vulnerable to a use-after-free vulnerability in the SVG component . This flaw was reported by Mozilla and is associated with Bug 2074212 . The vulnerability has been addressed in Firefox 158 , Firefox ESR 115.43 , and Firefox ESR 153.5 . No specific exploit details or in-the-wild explo...

CVE-2026-109719 Race condition, use-after-free in the Graphics: CanvasWebGL component

Race condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109725 Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109719 Race condition, use-after-free in the Graphics: CanvasWebGL component

Race condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, and Firefox ESR 153.5...

CVE-2026-109719

Race condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...