CVE-2026-16390

Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

CVE-2026-16387

Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

CVE-2026-16396

Privilege escalation in WebExtensions. This vulnerability was fixed in...

EUVD-2026-46227

Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

CVE-2026-16387

The CVE-2026-16387 entry concerns a site isolation issue in Firefox’s Networking component. Affected product: Firefox browser; vulnerability type relates to site isolation within networking, as described in the Mozilla advisories. Root cause details are not fully enumerated in the provided docume...

EUVD-2026-46224

Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

CVE-2026-16381

Same-origin policy bypass in the Networking: DNS component. This vulne...

CVE-2026-16358

Site isolation issue in the Graphics: WebRender component. This vulner...

EUVD-2026-46216

Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...

CVE-2026-16377

CVE-2026-16377 describes a mitigation bypass vulnerability in the Firefox PDF Viewer component. The issue affects the PDF viewing/handling code and was addressed by Mozilla in Firefox 153 and Firefox ESR 140.13, per the provided references. The connected documents confirm the fix versions but do ...

EUVD-2026-46210

Information disclosure in the Framework component in DevTools. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

CVE-2026-16355

CVE-2026-16355 describes a JIT miscompilation in the JavaScript Engine’s JIT component within Mozilla Firefox. The issue is reported as fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13. Affected product/area: Firefox browser’s JavaScript engine. Root cause: miscompilation in the J...

EUVD-2026-46198

Invalid pointer in the DOM: Bindings WebIDL component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...

CVE-2026-16352

Sandbox escape due to use-after-free in the Disability Access APIs com...

CVE-2026-16362

The CVE-2026-16362 entry concerns a use-after-free in the WebRTC: Audio/Video component. Public records confirm the vulnerability affects Mozilla Firefox WebRTC code paths and was fixed in Firefox 153 and Firefox ESR 140.13. The available documents do not specify affected platform variants beyond...

EUVD-2026-46191

Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

EUVD-2026-46190

Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...