UBUNTU-CVE-2026-8970

Privilege escalation in the Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...

UBUNTU-CVE-2026-8949

Integer overflow in the Widget: Win32 component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...

CVE-2026-8968

Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...

CVE-2026-8956

Integer overflow in the Networking: JAR component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...

CVE-2026-8951

Spoofing issue in the Toolbar component in Firefox for Android. This vulnerability was fixed in Firefox 151...

CVE-2026-8974

Memory safety bugs in Firefox ESR 140.10 , Firefox 150 , Thunderbird 140.10 , and Thunderbird 150 can lead to memory corruption. If successfully exploited with significant effort, these vulnerabilities could allow an attacker to execute arbitrary code . The issues are addressed in Firefox 151 , F...

CVE-2026-8973

Memory safety bugs in Firefox 150 and Thunderbird 150 allow for memory corruption due to operations exceeding buffer boundaries. While the impact primarily involves potential service interruptions , it is presumed that with sufficient effort, these flaws could be exploited to achieve arbitrary co...

CVE-2026-8972

Privilege escalation in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 151 and Thunderbird 151...

EUVD-2026-30919

Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 151 and Thunderbird 151...

CVE-2026-8971

Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 151 and Thunderbird 151...

CVE-2026-8971

The Mozilla Firefox web browser and Mozilla Thunderbird email client are vulnerable to a same-origin policy bypass within the Networking: JAR component. The root cause is attributed to a lack of source verification mechanism in the networking component. If exploited, an attacker can bypass securi...

CVE-2026-8970

A privilege escalation vulnerability exists in the Security component of the Firefox web browser and the Thunderbird email client. This vulnerability is related to the insecure management of privileges and could allow a malicious actor to cause service interruptions . The issue has been addressed...

CVE-2026-8969 Mitigation bypass in the DOM: Security component

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151...

EUVD-2026-30917

Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 151 and Thunderbird 151...

CVE-2026-8966

Information disclosure in the IP Protection component. This vulnerability was fixed in Firefox 151 and Thunderbird 151...

CVE-2026-8966

Information disclosure in the IP Protection component. This vulnerability was fixed in Firefox 151 and Thunderbird 151...

EUVD-2026-30918

Information disclosure in the IP Protection component. This vulnerability was fixed in Firefox 151 and Thunderbird 151...

CVE-2026-8965

The Firefox web browser and Thunderbird email client are affected by an information disclosure vulnerability within the DOM: Security component . This flaw allows a remote attacker to gain unauthorized access to confidential data . The vulnerability has been addressed in versions 151 of both Mozi...

CVE-2026-8965 Information disclosure in the DOM: Security component

Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151...

CVE-2026-8964

A spoofing issue exists in the Popup Blocker component of the Mozilla Firefox web browser and Mozilla Thunderbird email client. The vulnerability stems from the false representation of critical information within the user interface, which could allow a remote malicious actor to compromise data in...