CVE-2026-16390 Mitigation bypass in the Enterprise Policies component

Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

CVE-2026-16389 Incorrect boundary conditions, integer overflow in the Libraries component in NSS

Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153...

CVE-2026-16388 Sandbox escape in the DOM: Networking component

Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 153...

CVE-2026-16387

Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

CVE-2026-16387 Site isolation issue in the Networking component

Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

CVE-2026-16386 Information disclosure due to uninitialized memory in the Graphics: WebGPU component

Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153...

EUVD-2026-46222

Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153...

CVE-2026-16385

The CVE-2026-16385 entry concerns an information disclosure in the Graphics: WebGPU component. The underlying issue is uninitialized memory leading to disclosure. A fix was applied in Firefox 153. Affected context beyond Firefox isn’t specified in the provided documents. Connected sources corrobo...

CVE-2026-16385 Information disclosure due to uninitialized memory in the Graphics: WebGPU component

Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153...

CVE-2026-16384 Information disclosure due to uninitialized memory in the Graphics: WebGPU component

Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153...

EUVD-2026-46217

Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153...

CVE-2026-16380 Mitigation bypass in the Networking component

Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153...

EUVD-2026-46216

Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...

CVE-2026-16358

Site isolation issue in the Graphics: WebRender component was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13. The provided documents do not specify the exact root cause, affected subcomponents, exploit vectors, or impact beyond the fix versions.

CVE-2026-16379

This CVE concerns a Privilege escalation in the DOM: Content Processes component affecting Firefox and Firefox ESR. The vulnerability is noted to have been fixed in Firefox 153 and ESR 140.13. The available documents identify the affected product as Firefox/Firefox ESR and the vulnerable area as ...

EUVD-2026-46213

Mitigation bypass in the PDF Viewer component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

CVE-2026-16378

CVE-2026-16378 concerns the DOM component relating to Copy & Paste and Drag & Drop in Firefox. The connected documents consistently describe a vulnerability in the DOM’s Copy/Paste and Drag/Drop functionality, with a confirmed fix in Firefox version 153. The sources do not specify the exact root ...

CVE-2026-16378 Other issue in the DOM: Copy & Paste and Drag & Drop component

Other issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 153...

CVE-2026-16377 Mitigation bypass in the PDF Viewer component

Mitigation bypass in the PDF Viewer component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

CVE-2026-16376

The CVE-2026-16376 entry describes a Denial-of-Service in the Graphics: WebGPU component. Affected software is the Graphics WebGPU implementation within Firefox; the vulnerability’s impact is a DoS. The issue has a confirmed fix in Firefox 153. The available connected documents consistently ident...