75359 matches found
EUVD-2026-111061
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...
CVE-2026-117890
The Firefox browser is affected by a JIT miscompilation vulnerability within the JavaScript Engine: JIT component . This security flaw was addressed and fixed in Firefox 159 and Firefox ESR 153.6 . No specific exploit information or practical consequences are provided in the documents.
CVE-2026-117889 Incorrect boundary conditions in the JavaScript Engine component
Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...
CVE-2026-117889
The JavaScript Engine component in Firefox is vulnerable to a security issue caused by incorrect boundary conditions . This vulnerability has been addressed in Firefox 159 , Firefox ESR 115.44 , and Firefox ESR 153.6 . No specific exploit information or direct impact details are provided in the d...
EUVD-2026-111060
Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...
EUVD-2026-111043
Use-after-free in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...
CVE-2026-117872 Use-after-free in the JavaScript: Standard Library component
Use-after-free in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...
CVE-2026-117872
A use-after-free vulnerability exists in the JavaScript: Standard Library component of the Firefox browser. The issue has been addressed in Firefox 159 , Firefox ESR 115.44 , and Firefox ESR 153.6 . No specific exploitation details or exploit links are provided in the documents.
EUVD-2026-111041
Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...
CVE-2026-117870 Use-after-free in the JavaScript Engine component
Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...
CVE-2026-117870
A use-after-free vulnerability exists in the JavaScript Engine component of the Firefox web browser. This flaw has been addressed in Firefox 159 , Firefox ESR 115.44 , and Firefox ESR 153.6 . No specific exploitation details or in-the-wild activity are provided in the documents.
EUVD-2026-111036
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...
CVE-2026-117865
A Use-after-free vulnerability exists in the JavaScript: GC component of the Firefox browser. This flaw was addressed in Firefox 159 and Firefox ESR 153.6 . No specific exploit details or in-the-wild exploitation information are provided in the documents.
CVE-2026-117865 Use-after-free in the JavaScript: GC component
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...
CVE-2026-116627
Improper neutralization of input during web page generation 'Cross-site Scripting' in the notifications feature in Devolutions PowerShell Universal 2026.3.0 and earlier allows an authenticated user with notification creation permission to execute arbitrary JavaScript in the browser of another use...
CVE-2026-116627
Improper neutralization of input during web page generation 'Cross-site Scripting' in the notifications feature in Devolutions PowerShell Universal 2026.3.0 and earlier allows an authenticated user with notification creation permission to execute arbitrary JavaScript in the browser of another use...
CVE-2026-117538
REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability in the backend packages API, where the function parameter is concatenated into an error message rendered without HTML escaping. Attackers can lure an authenticated backend user to a crafted link containing a valid CSRF...
CVE-2026-116887
Semantic MediaWiki from 3.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to inject HTML through Keyword-typed property values rendered unescaped on Special:Browse. Attackers can annotate a Keyword property with an event-handler payloa...
