CVE-2026-84119

CVE-2026-84119 is a sandbox escape in Mozilla Firefox caused by a use-after-free bug in the DOM: Navigation component. An attacker can exploit this via a network vector with low complexity and user interaction to gain full confidentiality, integrity, and availability impact (scope changed), yield...

CVE-2026-84119

Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

dalfox v3.2.2

Looking for the Go v2.x version? Dalfox v3 is a complete rewrite in Rust. The Go codebase is preserved on the v2 branch and continues to receive security backports. See SECURITY.md for the support policy, and the migration guide for what changed in v3. Dalfox is a powerful open-source tool that...

PT-2026-84182

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird versions prior to 153.2 Description A site isolation issue exists within the DOM Navigation component. Site isolation is a security...

PT-2026-84186

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird versions prior to 153.2 Description A site isolation issue exists within the DOM: Push Subscriptions component. Site isolation is a...

PT-2026-84189

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird versions prior to 153.2 Description An issue exists within the Document Object Model DOM specifically affecting the Navigation...

PT-2026-84190

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird versions prior to 153.2 Description A spoofing issue exists within the DOM: Core & HTML component. Recommendations Update Firefox t...

PT-2026-84177

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 140.15 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird ESR versions prior to 140.15 Thunderbird ESR versions prior to 153.2 Description A...

PT-2026-84192

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird versions prior to 153.2 Description A clickjacking issue exists within the DOM: Events component. Clickjacking is a technique where...

PT-2026-84193

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird versions prior to 153.2 Description A site isolation issue exists within the DOM Navigation component. Site isolation is a security...

Linux Distros Unpatched Vulnerability : CVE-2026-84125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

Linux Distros Unpatched Vulnerability : CVE-2026-83615

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and ...

PT-2026-84174

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 115.40 Firefox ESR versions prior to 140.15 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird versions prior to 140.15 Thunderbird versions prior to...

KLA91250 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Security vulnerability in the Remote Settings Client...

Mozilla Firefox ESR < 115.40

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.40. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-83 advisory. - Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154 and...

Mozilla Firefox < 155.0

The version of Firefox installed on the remote Windows host is prior to 155.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-82 advisory. - Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155,...

Linux Distros Unpatched Vulnerability : CVE-2026-83613

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and ...

PT-2026-84172

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 115.40 Firefox ESR versions prior to 140.15 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird versions prior to 140.15 Thunderbird versions prior to...

PT-2026-84178

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 155 Mozilla Firefox ESR versions prior to 153.2 Description A use-after-free issue exists within the DOM: Core and HTML components. A use-after-free occurs when an application continues to use a pointer after ...

KLA91255 Multiple vulnerabilities in Mozilla Thunderbird ESR

Multiple vulnerabilities were found in Mozilla Thunderbird ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Denial of service...