CVE-2026-100786

A sandbox escape vulnerability exists in the Graphics component of the Firefox browser due to a use-after-free condition. This flaw was addressed in multiple releases, including Firefox ESR 153.4 , Firefox 157 , Firefox ESR 115.42 , and Firefox ESR 140.17 . No specific exploit details or external...

CVE-2026-100808

A mitigation bypass exists in the DOM: Service Workers component of the Mozilla Firefox web browser. This vulnerability has been addressed in Firefox ESR 153.4 , Thunderbird 157 , Thunderbird 153.4 , and Firefox 157 . While specific technical root causes are not detailed in the provided documents...

CVE-2026-100813

The Firefox web browser is affected by an invalid pointer vulnerability within the JavaScript Engine: JIT component . This flaw was addressed in Firefox 157 . No specific exploit details or in-the-wild exploitation information are provided in the documents.

CVE-2026-84641

A malicious IMAP server can trigger a use-after-free and heap-memory disclosure in Mozilla Thunderbird by sending a crafted ID response. This vulnerability allows heap contents to be persisted to prefs.js . The issue was addressed in Thunderbird 155 , Thunderbird 140.15 , and Thunderbird 153.2 . ...

CVE-2026-100784

A use-after-free vulnerability exists in the Layout: Text and Fonts component of the Firefox browser. This flaw has a high impact and was addressed in several releases, including Firefox ESR 153.4 , Firefox 157 , Firefox ESR 115.42 , and Firefox ESR 140.17 . Specific details regarding the root ca...

CVE-2026-100832

Firefox is affected by a use-after-free vulnerability in the Graphics: Canvas2D component. This flaw was addressed in Firefox ESR 153.4 , Firefox ESR 115.42 , and Firefox ESR 140.17 . The vulnerability is associated with Bug 2072467 and is categorized as having high impact by the reporter. No spe...

CVE-2026-92070

CVE-2026-92070 involves an information disclosure vulnerability in the Networking component of Mozilla products. The issue is addressed in Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbird 153.3 . While the exact root cause is not specified in the provided documents, other repor...

CVE-2026-100814

The Firefox browser is affected by a vulnerability caused by incorrect boundary conditions within the JavaScript Engine: JIT component. This flaw allows for potential exploitation through the Just-In-Time compiler. Remediation is available in Firefox ESR 153.4 and Firefox 157 . No specific exploi...

CVE-2026-84637

In Mozilla Thunderbird , malicious calendar invitations can utilize file URI attachments to execute local or network-hosted executables on Windows systems. This technique allows attackers to bypass standard executable attachment protections and may display the attachment under a misleading filena...

CVE-2026-84642

Mozilla Thunderbird is affected by a vulnerability where the values of the mail.allowed_attachment_hostnames advanced configuration setting are used in a regular expression without proper escaping . This flaw could allow certain unintended hostnames to match the criteria, potentially enabling the...

CVE-2026-100770

A sandbox escape vulnerability exists in the DOM: Content Processes component of Firefox due to a use-after-free condition. This flaw has been addressed in several versions, including Firefox ESR 153.4 , Firefox 157 , Firefox ESR 115.42 , and Firefox ESR 140.17 . While the vulnerability's root ca...

CVE-2026-100815

A use-after-free vulnerability exists in the CSS Parsing and Computation component of the Firefox browser. This flaw was addressed and fixed in Firefox ESR 153.4 and Firefox 157 . No specific exploit details or in-the-wild exploitation records are provided in the documents.

CVE-2026-100778

The Firefox browser is vulnerable to a sandbox escape caused by a use-after-free flaw in the DOM: Core & HTML component. This vulnerability was addressed in the following versions: Firefox ESR 153.4 , Firefox 157 , Firefox ESR 115.42 , and Firefox ESR 140.17 . While technical details regarding th...

CVE-2026-100768

A use-after-free vulnerability exists in the Graphics: WebGPU component of the Firefox browser. This issue was addressed and fixed in Firefox 157 . The vulnerability was reported by Yaqoub Aldurayhim and is associated with Bugzilla report Bug 2064832 . No specific exploitation details or direct l...

CVE-2026-100774

A use-after-free vulnerability exists in the DOM: Core & HTML component of Firefox . This flaw was addressed in several releases, including Firefox ESR 153.4 , Firefox 157 , Firefox ESR 115.42 , and Firefox ESR 140.17 . While the vulnerability is categorized as high impact with a CVSS score of 8....

CVE-2026-100779

Firefox is impacted by a use-after-free vulnerability in the XSLT component . This flaw was addressed in several versions, including Firefox ESR 153.4 , Firefox 157 , Firefox ESR 115.42 , and Firefox ESR 140.17 . No specific exploit details or direct links to exploitation are provided in the docu...

CVE-2026-100783

A high-impact uninitialized memory vulnerability exists in the Audio/Video component of Firefox . This flaw was addressed in several versions, including Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17 . While the specific root cause is not detailed beyond the uninitiali...

CVE-2026-100809

A Same-origin policy bypass exists in the DevTools component of the Mozilla Firefox web browser and Mozilla Thunderbird mail client. This vulnerability is fixed in Firefox ESR 153.4 , Thunderbird 157 , Thunderbird 153.4 , and Firefox 157 . Exploitation details are not provided in the documents. P...

CVE-2026-100812

A Denial-of-Service vulnerability exists in the Graphics component of Firefox . This flaw allows for an attack that impacts the availability of the application. The issue has been addressed in Firefox ESR 153.4 and Firefox 157 . No specific exploit details or in-the-wild exploitation information ...

CVE-2026-100769

A use-after-free vulnerability exists in the JavaScript: WebAssembly component of the Firefox browser. This flaw was addressed in Firefox ESR 153.4 , Firefox 157 , and Firefox ESR 140.17 . The vulnerability is reported to have a high impact. No specific exploit details or public proof-of-concepts...

CVE-2026-100775

This vulnerability involves a sandbox escape within the Graphics component of the Mozilla software suite. The issue affects multiple products, including Firefox , Firefox ESR , and Thunderbird . Practical consequences include bypassing security restrictions and potential arbitrary code execution ...

CVE-2026-100777

A use-after-free vulnerability exists in the Graphics: Canvas2D component of the Firefox web browser. The flaw has been addressed in multiple versions, including Firefox ESR 153.4 , Firefox 157 , Firefox ESR 115.42 , and Firefox ESR 140.17 . Exploitation details are not provided in the available ...

CVE-2026-100817

The JavaScript: WebAssembly component contains an issue affecting Mozilla Thunderbird and Firefox . This vulnerability was addressed in both products starting with version 157 . No specific root cause or exploitation details are provided in the documents. Sighting data confirms the vulnerability ...

CVE-2026-100773

A use-after-free vulnerability exists in the Storage: IndexedDB component of Firefox . This issue has been addressed in versions Firefox ESR 153.4 , Firefox 157 , Firefox ESR 115.42 , and Firefox ESR 140.17 . No specific exploitation details or direct links are provided in the documents.

CVE-2026-100776

A use-after-free vulnerability exists in the JavaScript: WebAssembly component of the Firefox web browser. The vulnerability has been addressed in Firefox ESR 153.4 , Firefox 157 , and Firefox ESR 140.17 . Exploitation details are not provided in the documents, but the issue is reported with a hi...

CVE-2026-100767

A use-after-free vulnerability exists in the Networking: Cache component of the Firefox browser. This flaw can lead to high-impact consequences, including potential memory corruption or execution issues. The vulnerability has been addressed in several versions, including Firefox ESR 153.4 , Firef...

CVE-2026-100771

This vulnerability involves undefined behavior in the DOM: Streams component of various Mozilla products. The issue has been addressed in Firefox ESR 153.4 , Firefox 157 , Firefox ESR 115.42 , Firefox ESR 140.17 , Thunderbird 157 , Thunderbird 140.17 , and Thunderbird 153.4 . Documentation indica...

CVE-2026-100772

The Firefox browser is affected by a use-after-free vulnerability in the DOM: Core & HTML component . This vulnerability can lead to significant security consequences, and it has been addressed in Firefox ESR 153.4 , Firefox 157 , and Firefox ESR 140.17 . Specific exploit details or in-the-wild e...