CVE-2026-92017 Privilege escalation in the DOM: Service Workers component

Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

CVE-2026-92017

CVE-2026-92017 is a privilege escalation vulnerability in the DOM: Service Workers component of Mozilla Firefox and Thunderbird . The flaw allows an attacker to elevate privileges within the browser context, potentially leading to arbitrary code execution. CISA's SSVC assessment rates exploitatio...

CVE-2026-92017 Privilege escalation in the DOM: Service Workers component

Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

EUVD-2026-78480

Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16...

EUVD-2026-78479

Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16...

CVE-2026-92016

CVE-2026-92016 is a use-after-free vulnerability in the Disability Access APIs component of Mozilla Firefox and Thunderbird . According to the Debian security advisories, this class of issue could result in execution of arbitrary code , information disclosure, or privilege escalation. The flaw wa...

CVE-2026-92016 Use-after-free in the Disability Access APIs component

Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

CVE-2026-92016 Use-after-free in the Disability Access APIs component

Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

CVE-2026-92016

Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

CVE-2026-92015 Privilege escalation in the WebExtensions component

Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

CVE-2026-92015 Privilege escalation in the WebExtensions component

Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

CVE-2026-92015

CVE-2026-92015 is a privilege escalation in the WebExtensions component of Mozilla Firefox and Thunderbird . It is part of a batch of 63 vulnerabilities fixed in the same security release. The vulnerability is fixed in Firefox 156 , Firefox ESR 115.41 , Firefox ESR 140.16 , Firefox ESR 153.3 , Th...

EUVD-2026-78478

Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16...

CVE-2026-92015

Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

EUVD-2026-78477

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16...

CVE-2026-92014 Privilege escalation due to incorrect boundary conditions in the Graphics component

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16...

CVE-2026-92014 Privilege escalation due to incorrect boundary conditions in the Graphics component

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16...

CVE-2026-92014

CVE-2026-92014 is a privilege escalation vulnerability caused by incorrect boundary conditions in the Graphics component of Mozilla's Firefox ESR and Thunderbird. The flaw was fixed in Firefox ESR 115.41 , Firefox ESR 140.16 , and Thunderbird 140.16 . Debian addressed the issue in package version...

CVE-2026-92014

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16...

CVE-2026-92013

CVE-2026-92013 is a privilege escalation vulnerability in the Graphics: CanvasWebGL component of Mozilla Firefox and Thunderbird, caused by incorrect boundary conditions . It is one of a cluster of eight similar CanvasWebGL boundary-condition flaws (CVE-2026-92006 through CVE-2026-92013) disclose...