33 matches found
PT-2026-84180
Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 155 Description An information disclosure issue exists within the WebExtensions component, which allows for the unauthorized exposure of sensitive data. Recommendations Update to version 155...
Astra Linux – Vulnerability in Firefox, Thunderbird
JIT compilation errors in the JavaScript Engine component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...
Astra Linux – Vulnerability in Firefox, Thunderbird
Memory safety bugs exist in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146, and Thunderbird 146. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability ha...
CVE-2026-74989
Internally found bugs present in Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154 and Thunderbird 154...
CVE-2026-74980
Clickjacking issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154...
CVE-2026-74964 Integer overflow in the Graphics component
Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...
PT-2026-77024
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 154 Thunderbird versions prior to 154 Description A sandbox escape exists in the Remote Settings Client component. A sandbox is a security mechanism for separating running programs, ensuring that code executing in a...
CVE-2026-16373
Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153...
CVE-2026-16393
Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
CVE-2026-16404 Spoofing issue in Firefox for Android
Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153...
CVE-2026-16404
Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153...
CVE-2026-16404
Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153...
CVE-2026-16386
CVE-2026-16386 : Information disclosure caused by uninitialized memory in the Graphics: WebGPU component of Firefox. Affected product: Firefox (Graphics: WebGPU). Root cause: uninitialized memory leading to leakage of information. Impact as per source: Confidentiality impact HIGH; overall CVSSv3....
CVE-2026-16375 Site isolation issue in the Networking: HTTP component
Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...
CVE-2026-16373
Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153...
CVE-2026-16350
Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...
CVE-2026-15719
We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13...
DEBIAN-CVE-2026-15718
We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 140.13, and Thunderbird 140.13...
