CVE-2026-16368

Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

EUVD-2026-46199

Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...

CVE-2026-16353

CVE-2026-16353 describes an invalid pointer in the DOM: Bindings (WebIDL) component. The vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13. The provided documents do not include exploit details, affected product versions beyond the patch versions, or specific root...

CVE-2026-16353

Invalid pointer in the DOM: Bindings WebIDL component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...

EUVD-2026-46197

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153...

CVE-2026-16365

Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 153...

CVE-2026-16365

The CVE refers to a privilege escalation in Firefox’s DOM: Workers component, with the issue fixed in Firefox 153. Affected software is Firefox; the vulnerability surface is the Workers integration within the DOM, but the provided documents do not disclose specific vulnerable functions, versions,...

CVE-2026-16363

CVE-2026-16363 describes a JIT miscompilation in the JavaScript: WebAssembly component of Firefox. The issue is resolved by updates in Firefox 153 and Firefox ESR 140.13. The connected documents confirm the affected area as the JavaScript/WebAssembly JIT component, with the root cause identified ...

CVE-2026-16363

JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

EUVD-2026-46193

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...

EUVD-2026-46192

Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...

CVE-2026-16362

Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

CVE-2026-16349

CVE-2026-16349 is a same-origin policy bypass in the DOM: Navigation component. The vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13. Affected: Mozilla Firefox desktop/ESR in the DOM Navigation path. Root cause: same-origin policy bypass within the Navigation com...

EUVD-2026-46189

Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...