81583 matches found
CVE-2026-92056
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Graphics: Text component...
CVE-2026-92040
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: WebAssembly component...
CVE-2026-92047
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Crash Reporting component...
CVE-2026-92049
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Widget: Win32 component...
CVE-2026-92048
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component...
CVE-2026-92050
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to race condition in the XPConnect component...
CVE-2026-92035
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the Graphics component...
CVE-2026-92076
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Networking component...
CVE-2026-92079
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Widget: Win32 component...
CVE-2026-92015
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the WebExtensions component...
CVE-2026-2763-POC
Vulnerability The vulnerability arises from the implementation of the for-in syntax. The scope of a for-in loop is represented by a pair of bytecodes: JSOP::Iter and JSOP::EndIter. root@kitploit: CASEIter MOZASSERTREGS.stackDepth = 1; HandleValue val = REGS.stackHandleAt-1; JSObject iter =...
Debian dla-4781 : firefox-esr - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4781 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4781-1 [email protected]...
CVE-2026-12295-UXXS-in-my-wasm
CVE-2026-12295 — srcdoc data on a non-about:srcdoc URI Firefox UXSS Proof of concept: a compromised content process forges a PDocumentChannel load whose nsDocShellLoadState carries SrcdocData together with an arbitrary URI. Vulnerable builds serve the attacker HTML as the document at the victim...
[slackware-security] mozilla-firefox
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-140.16.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more...
CVE-2026-92029
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the SVG component...
CVE-2026-92028
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...
CVE-2026-92027
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Streams component...
CVE-2026-92026
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Networking component...