The vulnerability in the Graphics component of Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to cause a service failure.

The vulnerability of the Graphics component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient testing of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Sandbox escape in the DOM: Workers component CVE-2026-12294 firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process...

CVE-2026-12325 Denial-of-service in the Graphics: ImageLib component

Denial-of-service in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12...

CVE-2026-12303 Information disclosure due to incorrect boundary conditions in the Graphics: WebGPU component

Information disclosure due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Thunderbird 152...

CVE-2026-42986

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2026-42986

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2026-44812 Windows Graphics Component Remote Code Execution Vulnerability

...

CVE-2026-44812 Windows Graphics Component Remote Code Execution Vulnerability

...

CVE-2026-44803 Windows Graphics Component Remote Code Execution Vulnerability

...

CVE-2026-44803 Windows Graphics Component Remote Code Execution Vulnerability

...

CVE-2026-42986 Microsoft Graphics Component Elevation of Privilege Vulnerability

...

CVE-2026-42986

CVE-2026-42986 describes a use-after-free in the Microsoft Graphics Component that allows an authorized attacker to elevate privileges locally. Affected: Microsoft Graphics Component; vulnerability class: use-after-free leading to local privilege escalation. Root cause as stated: after-free condi...

CVE-2026-42986 Microsoft Graphics Component Elevation of Privilege Vulnerability

...

EUVD-2026-35737

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

Windows Graphics Component Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally...

Microsoft Graphics Component Elevation of Privilege Vulnerability

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

Windows Graphics Component Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally...

PT-2026-47928

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description An integer overflow or wraparound in the Windows Win32K - GRFX component allows an unauthorized attacker to execute code locally. An integer overflow occurs when an arithmetic...

ROS-20260609-73-0019

Vulnerability of the Graphics component: The text-based browsers Mozilla Firefox, Firefox ESR, and the email client Thunderbird are vulnerable to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

ROS-20260609-73-0025

The vulnerability of the Graphics component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...