CVE-2026-92053

Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92053

CVE-2026-92053 is a privilege escalation vulnerability in the Graphics: CanvasWebGL component of Firefox and Thunderbird . The CNA-assigned CVSS 3.1 score is 8.8 (HIGH) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating that a remote attacker with user interaction can achieve full...

CVE-2026-92053 Privilege escalation in the Graphics: CanvasWebGL component

Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92053 Privilege escalation in the Graphics: CanvasWebGL component

Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

EUVD-2026-78516

Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156...

CVE-2026-92052 Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component

Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92052

CVE-2026-92052 is a privilege escalation vulnerability caused by uninitialized memory in the Graphics: CanvasWebGL component of Firefox and Thunderbird . The flaw is rated CVSS 8.8 (High) with a network attack vector requiring user interaction but no prior privileges, potentially impacting confid...

CVE-2026-92052

Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92052 Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component

Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

EUVD-2026-78515

Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156...

CVE-2026-92051

CVE-2026-92051 is a spoofing vulnerability caused by an invalid pointer in the Graphics component of Mozilla products. The flaw allows spoofing when the pointer reference is mishandled during graphics operations. It was fixed in Firefox 156 and Thunderbird 156 , as confirmed by Mozilla Foundation...

CVE-2026-92051

Spoofing issue due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

EUVD-2026-78514

Spoofing issue due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

CVE-2026-92051 Spoofing issue due to invalid pointer in the Graphics component

Spoofing issue due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

EUVD-2026-78513

Sandbox escape due to race condition in the XPConnect component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

CVE-2026-92050

Sandbox escape due to race condition in the XPConnect component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

CVE-2026-92050

CVE-2026-92050 is a sandbox escape vulnerability caused by a race condition in the XPConnect component of Firefox and Thunderbird . A successful exploit could allow a malicious web page or add-on to break out of the sandbox boundary, potentially leading to code execution in the host process. The ...

CVE-2026-92050 Sandbox escape due to race condition in the XPConnect component

Sandbox escape due to race condition in the XPConnect component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

CVE-2026-92049 Use-after-free in the Widget: Win32 component

Use-after-free in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92049

This is a use-after-free vulnerability in the Widget: Win32 component of Mozilla's Firefox and Thunderbird, suggesting a Windows-specific code path. It was fixed in Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbird 153.3 , and is part of a broader batch of Mozilla security fixes...