CVE-2026-92065

CVE-2026-92065 is a sandbox escape in the Widget: Win32 component of Mozilla's Firefox and Thunderbird, caused by incorrect boundary conditions. The Win32 designation indicates the flaw is specific to Windows platforms. The vulnerability was fixed in Firefox 156 , Firefox ESR 153.3 , Thunderbird ...

CVE-2026-92064 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92064

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92064

CVE-2026-92064 is a sandbox escape in the Widget: Win32 component of Mozilla's Firefox and Thunderbird , caused by incorrect boundary conditions . The flaw allows an attacker to escape the sandbox, potentially escalating to a more impactful code execution scenario. The vulnerability was fixed in ...

EUVD-2026-78527

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156...

CVE-2026-92063 Denial-of-service in the Audio/Video component

Denial-of-service in the Audio/Video component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

EUVD-2026-78526

Denial-of-service in the Audio/Video component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

CVE-2026-92063

Denial-of-service in the Audio/Video component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

CVE-2026-92063

CVE-2026-92063 is a Denial-of-Service vulnerability in the Audio/Video component of Mozilla products. The flaw allows an attacker to crash the application, potentially by supplying crafted media content. The vulnerability affects Firefox and Thunderbird versions prior to 156.0 , and was fixed in ...

CVE-2026-92062 Privilege escalation in the Session Restore component

Privilege escalation in the Session Restore component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92062

Privilege escalation in the Session Restore component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

EUVD-2026-78525

Privilege escalation in the Session Restore component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156...

CVE-2026-92062

CVE-2026-92062 is a privilege escalation vulnerability in the Session Restore component of Firefox and Thunderbird . A network-based attacker with low complexity and no prior privileges, but requiring user interaction, can achieve high impact on confidentiality, integrity, and availability (CVSS ...

CVE-2026-92062 Privilege escalation in the Session Restore component

Privilege escalation in the Session Restore component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

EUVD-2026-78524

Incorrect boundary conditions in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

CVE-2026-92061

CVE-2026-92061 affects Mozilla Firefox and Thunderbird , specifically the Security: Process Sandboxing component, due to incorrect boundary conditions . The flaw was fixed in Firefox 156 and Thunderbird 156 , referenced in Mozilla advisories mfsa2026-90 and mfsa2026-94 . The boundary condition is...

CVE-2026-92061 Incorrect boundary conditions in the Security: Process Sandboxing component

Incorrect boundary conditions in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

CVE-2026-92061

Incorrect boundary conditions in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

CVE-2026-92060 Use-after-free in the Internationalization component

Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92060

A use-after-free flaw in the Internationalization component of Mozilla's Firefox and Thunderbird was disclosed in September 2026. The vulnerability is addressed in Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbird 153.3 , as referenced in the Mozilla Foundation Security Advisory...