CVE-2026-16381

Same-origin policy bypass in the Networking: DNS component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

CVE-2026-16371

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

CVE-2026-16359

Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...

CVE-2026-16412

Technical details are not publicly available in the provided documents. Monitor for updates.

EUVD-2026-46228

Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

CVE-2026-16390

CVE-2026-16390 concerns a mitigation bypass in Firefox’s Enterprise Policies component. Across the provided sources, the vulnerability is described consistently as a bypass of mitigation controls, with no details on the exact underlying root cause in these documents. The impact is not elaborated ...

EUVD-2026-46224

Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

EUVD-2026-46213

Mitigation bypass in the PDF Viewer component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

CVE-2026-16357

The CVE-2026-16357 issue concerns Firefox’s Graphics component with improper boundary handling. Documents collectively confirm the vulnerability and state it was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13. There are no details here about exploit vectors, impact, or affected ...

EUVD-2026-46204

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...

CVE-2026-16356

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...

CVE-2026-16355

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...

CVE-2026-16369

CVE-2026-16369 describes an integer overflow in the JavaScript: WebAssembly component of Firefox. The issue affects Firefox’s WebAssembly/Javascript integration and was fixed in Firefox 153 and Firefox ESR 140.13. The connected sources confirm the same description across multiple feeds (NVD, CVE ...

CVE-2026-16354

CVE-2026-16354 is an information-disclosure vulnerability in Firefox’s Graphics: ImageLib component. The issue affects Firefox desktop builds and was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13. The available sources describe the flaw and its patch versions but do not provide...

CVE-2026-16353

CVE-2026-16353 describes an invalid pointer in the DOM: Bindings (WebIDL) component. The vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13. The provided documents do not include exploit details, affected product versions beyond the patch versions, or specific root...

CVE-2026-16363

JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

EUVD-2026-46193

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...

EUVD-2026-46192

Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...

firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bug fixed in Thunderbird ESR 140.12...

firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory...