CVE-2026-92024

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the SVG component...

CVE-2026-92022

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: HTML Parser component...

CVE-2026-92021

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript Engine: JIT component...

CVE-2026-92020

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component...

CVE-2026-92009

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component...

CVE-2026-4692-trust-me-im-in-rdm

CVE-2026-4692 — 内容进程可在 RDM 中声明自身 针对 BrowsingContext 字段同步缺失授权检查的概念验证：一个被攻破的内容进程伪造 PContent::CommitBrowsingContextTransaction 消息，在其自身的顶层 BrowsingContext 上设置 InRDMPane = true，而父进程直接应用了该设置 。 目标：Firefox 149.0a1 nightly @ 2fbc0748c4（存在漏洞，修复前版本），macOS arm64。 已在 Firefox 149 中修复 — bug 2017643，提交...

CVE-2025-4322-Exploit

CVE-2025-4322 - 未検証のパスワード変更 CWE-620 エクスプロイト: こちらからダウンロード 詳細 CVE ID : CVE-2025-4322 公開日 : 05/20/2025 影響 : 重大 CVSS : 9.8 パッチ利用可能: 公式パッチは未提供 影響 重大な深刻度の脆弱性により、攻撃者は以下のことを行える可能性があります: - ブラウザのサンドボックス保護を回避 - 任意のコードを実行 - システムの整合性を侵害 - システムリソースへの不正アクセスを取得 この脆弱性は特にWindows上のFirefoxを標的としており、実際に野外で積極的に悪用されていまし...

firefox-rce-nssmil

Firefox RCE CVE-2016-9079 – 教育用JavaScript移植版 CVE-2016-9079の公開エクスプロイトの教育用実装です。元のExploit-DB/Metasploitモジュールをスタンドアロンで使用できるように移植したものです。 免責事項 このリポジトリは、教育および研究目的のみで提供されます。公開されているエクスプロイトのJavaScript移植版を含み、歴史的なブラウザエクスプロイト技術を研究するためのものです。所有していない、またはテスト許可を得ていないシステムに対する不正使用を意図したものではありません。 概要 このリポジトリには、Mozilla...

Linux Distros Unpatched Vulnerability : CVE-2026-92054

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation in the Memory component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2026-259-01)

The version of mozilla-firefox installed on the remote host is prior to 140.16.0esr / 153.3.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-259-01 advisory. New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues...

Debian dsa-6501 : firefox-esr - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6501 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6501-1 [email protected] https://www.debian.org/securit...

Linux Distros Unpatched Vulnerability : CVE-2026-92046

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. CVE-2026-92046...

Linux Distros Unpatched Vulnerability : CVE-2026-92059

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird...

Linux Distros Unpatched Vulnerability : CVE-2026-92042

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in the DOM: Content Processes component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

Linux Distros Unpatched Vulnerability : CVE-2026-92045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, an...

Linux Distros Unpatched Vulnerability : CVE-2026-92061

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 156 and Thunderbird 156. CVE-2026-92061 Not...

Linux Distros Unpatched Vulnerability : CVE-2026-92060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

Linux Distros Unpatched Vulnerability : CVE-2026-92064

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird...

Linux Distros Unpatched Vulnerability : CVE-2026-92041

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

Linux Distros Unpatched Vulnerability : CVE-2026-92078

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Denial-of-service in the Security component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...