CVE-2026-2774

CVE-2026-2774 is an integer overflow in the Firefox Audio/Video component. Public sources indicate Firefox/ESR updates (Firefox 148, ESR 115.33, ESR 140.8) fix the flaw; affected products include Firefox and Thunderbird per accompanying advisories. The issue is rated high/critical by CVSS sources...

CVE-2026-84125

A use-after-free vulnerability exists in the DOM: Core & HTML component of Mozilla Firefox and Mozilla Thunderbird . This flaw affects the core browser engine and was addressed in Firefox 155 , Firefox ESR 153.2 , Thunderbird 155 , and Thunderbird 153.2 . No specific exploit details or in-the-wil...

CVE-2026-92075

CVE-2026-92075 is a mitigation bypass vulnerability within the Networking component of the Mozilla software suite. The issue was addressed in Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbird 153.3 . Technical details from the provided documents indicate that the vulnerability i...

CVE-2012-5843

CVE-2012-5843 affects Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14. The vulnerability is described as unspecified memory safety hazards in the browser engine that could lead to memory corruption and a crash (DoS) or, potentially, arbitrary code execution via unk...

CVE-2014-1496

CVE-2014-1496 affects Mozilla Firefox (up to 28.0) and related Mozilla suite components (Firefox ESR 24.x up to 24.4, Thunderbird up to 24.4, SeaMonkey up to 2.25). The vulnerability allows local users to gain privileges by modifying the extracted Mar contents during an update, constituting a loc...

CVE-2026-100819

The XPCOM component in the Firefox browser is vulnerable to a sandbox escape caused by incorrect boundary conditions . This issue was addressed in several releases, including Firefox ESR 153.4 , Firefox 157 , Firefox ESR 115.42 , and Firefox ESR 140.17 . Exploitation details and direct links are ...

CVE-2026-12302

A mitigation bypass exists in the DOM: Security component of Mozilla Firefox and Thunderbird . This vulnerability affects various versions and has been addressed in Firefox 152 , Firefox ESR 140.12 , Firefox ESR 115.37 , Thunderbird 152 , and Thunderbird 140.12 . Exploitation details are not prov...

CVE-2026-4710

CVE-2026-4710 is an Audio/Video boundary-conditions flaw that affects Firefox (including ESR) and Thunderbird. The issue’s root cause is incorrect boundary handling in the Audio/Video component. Public advisories list the impact as high/critical, with CVSS 3.1 base score 9.8 (Impact: Confidential...

CVE-2026-8947

A use-after-free vulnerability exists in the DOM: Bindings (WebIDL) component of the Firefox browser and the Thunderbird email client. This memory safety issue allows a remote attacker to execute arbitrary code . The vulnerability has been addressed in Firefox 151 , Firefox ESR 115.36 , Firefox E...

CVE-2026-92050

This vulnerability allows for a sandbox escape due to a race condition in the XPConnect component . The issue has been resolved in Firefox 156 and Thunderbird 156 . While a security sighting was reported on 2026-09-17, specific details regarding exploit vectors or in-the-wild exploitation methods...

CVE-2012-4195

CVE-2012-4195 concerns Mozilla Firefox (and related Mozilla components) where nsLocation::CheckURL does not correctly determine the calling document/principal, enabling cross-site scripting (XSS) via crafted sites and certain add-on behaviors. Affected products/versions include Firefox before 16....

CVE-2026-16401

CVE-2026-16401 describes a privilege escalation vulnerability in the Data Loss Prevention component of Mozilla Firefox and Thunderbird . The vulnerability was addressed in Firefox 153 and Thunderbird 153 . No specific root cause or exploit details are provided in the documentation.

CVE-2026-2792

CVE-2026-2792 involves memory safety bugs found in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some flaws showed memory corruption indicators and could potentially be exploited to run arbitrary code; Mozilla fixed these in Firefox 148, Firefox ESR 140.8, Thunderbird...

CVE-2026-6774

A mitigation bypass exists in the DOM: Security component of Mozilla Firefox and Mozilla Thunderbird browsers/clients. The root cause is related to a flaw in data protection mechanisms , which could allow an attacker to bypass existing security restrictions remotely. This vulnerability was addres...

CVE-2026-8958

A vulnerability in the Security: Process Sandboxing component of Firefox and Thunderbird allows for information disclosure and a sandbox escape . Exploiting this flaw can permit a remote attacker to access confidential data . The issue was addressed in Firefox 151 , Firefox ESR 140.11 , Thunderbi...

CVE-2026-92043

The Audio/Video component in Mozilla Firefox and Thunderbird is vulnerable to privilege escalation due to incorrect boundary conditions . This issue impacts Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbird 153.3 . Remediation is available via patches in versions Firefox 156 , F...

CVE-2026-92054

The Memory component in Mozilla Firefox is vulnerable to privilege escalation (CVE-2026-92054). This issue has been addressed in Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbird 153.3 . No specific root cause or exploit details are provided in the documentation.

CVE-2026-92057

This vulnerability involves a mitigation bypass within the Enterprise Policies component of the Firefox and Thunderbird browsers. The flaw is addressed in Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbird 153.3 . While the initial description identifies it as a mitigation bypass...

CVE-2026-92074

CVE-2026-92074 involves a mitigation bypass in the Popup Blocker component of the Mozilla Firefox browser and Thunderbird mail client. This vulnerability is addressed in Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbird 153.3 . The provided documents do not specify the underlyin...

CVE-2006-1530

Technical details for CVE-2006-1530 are not publicly available in the provided documents. Monitor for updates.

CVE-2025-10527

A sandbox escape vulnerability exists in the Graphics: Canvas2D component of Mozilla products due to a use-after-free condition. This flaw could allow an attacker to execute arbitrary code remotely or cause a denial of service. The vulnerability affects Firefox versions earlier than 143, Firefox ...

CVE-2025-10533

An integer overflow vulnerability exists in the SVG component of Mozilla Firefox , Firefox ESR , and Thunderbird . This flaw allows an attacker to potentially achieve remote code execution or cause a denial of service on the affected system. The vulnerability has been addressed in Firefox 143 , F...

CVE-2025-4086

This vulnerability affects Thunderbird for Android and versions of Firefox prior to 138 . A specially crafted filename containing a large number of encoded newline characters can obscure the file's extension when displayed in the download dialog. The issue was resolved in Firefox 138 and Thunderb...

CVE-2026-0884

A use-after-free vulnerability exists in the JavaScript Engine component of Mozilla Firefox , Firefox ESR , and Thunderbird . An attacker could exploit this flaw to execute arbitrary code on a system or cause service interruptions . The issue was resolved in Firefox 147 , Firefox ESR 140.7 , Thun...

CVE-2026-16378

CVE-2026-16378 identifies an issue within the DOM: Copy & Paste and Drag & Drop component . This vulnerability has been addressed in Firefox 153 and Thunderbird 153 . Technical details regarding the specific root cause or impact are not provided in the available documentation.

CVE-2026-16382

CVE-2026-16382 is a mitigation bypass vulnerability in the DOM: Service Workers component. This security issue has been addressed in Firefox 153 and Thunderbird 153 . No specific exploit details or practical consequences are provided in the available documentation.

CVE-2026-16398

A site isolation issue exists in the Graphics component of Mozilla Firefox and Mozilla Thunderbird. This vulnerability was addressed in Firefox 153 and Thunderbird 153 . No specific root cause, exploit details, or impact consequences are provided in the documents beyond the identified site isolat...

CVE-2026-2760

CVE-2026-2760 is a Firefox/Thunderbird Firefox Graphics: WebRender sandbox escape caused by incorrect boundary conditions. Multiple public advisories confirm the issue and that it is fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. Affected comp...

CVE-2026-84132

CVE-2026-84132 is an information disclosure vulnerability affecting the Networking: HTTP component in Mozilla products. This flaw impacts Firefox , Firefox ESR , and Thunderbird . The vulnerability has been addressed in Firefox 155 , Firefox ESR 153.2 , Thunderbird 155 , and Thunderbird 153.2 . N...

CVE-2026-8970

A privilege escalation vulnerability exists in the Security component of the Firefox web browser and the Thunderbird email client. This vulnerability is related to the insecure management of privileges and could allow a malicious actor to cause service interruptions . The issue has been addressed...

CVE-2026-8975

Memory safety bugs exist in Firefox ESR 115.35 , Firefox ESR 140.10 , and Firefox 150 , as well as Thunderbird 140.10 and Thunderbird 150 . These vulnerabilities involve memory corruption , which could potentially be exploited by an attacker with sufficient effort to execute arbitrary code . The ...

CVE-2026-92006

Mozilla Firefox and Thunderbird are vulnerable to privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This security flaw impacts various versions, including Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thund...

CVE-2026-92034

A site isolation issue exists in the Graphics component of Firefox and Thunderbird . This vulnerability is addressed in Firefox 156 and Thunderbird 156 . No specific root cause or exploitation details are provided in the documentation, but the issue has been identified in several distributions an...

CVE-2026-92064

The Widget: Win32 component in Mozilla Firefox , Firefox ESR , Thunderbird , and Thunderbird ESR is vulnerable to a sandbox escape caused by incorrect boundary conditions. This vulnerability affects various versions, with fixes available in Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and ...

CVE-2026-0877

A mitigation bypass vulnerability exists in the DOM: Security component of several Mozilla products. This flaw allows an attacker to remotely circumvent existing security restrictions due to a weakness in data protection mechanisms. The issue affects Mozilla Firefox (versions prior to 147), Firef...

CVE-2026-12320

An information disclosure vulnerability exists in the Password Manager component of the Firefox and Thunderbird web browsers. This flaw could allow a malicious actor to gain access to confidential data . The issue has been resolved in Firefox 152 and Thunderbird 152 . Exploitation details are not...

CVE-2026-16402

A vulnerability exists in the Graphics: ImageLib component due to an integer overflow . This issue has been addressed in Firefox 153 and Thunderbird 153 . Technical details regarding the specific root cause or impact are not provided in the documents beyond the component name and the overflow typ...

CVE-2026-2763

CVE-2026-2763 is a use-after-free in the JavaScript Engine component of Mozilla Firefox. The vulnerability affects Firefox and related ESR branches, and has been fixed in Firefox 148 and ESR versions 115.33, 140.8; Thunderbird 148/140.8 are also listed in fixed advisories. Connected sources corro...

CVE-2026-2778

CVE-2026-2778: Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component. Affected: Firefox (pre-148), Firefox ESR (pre-115.33/140.8); Thunderbird (pre-148, pre-140.8). Fixes: Firefox 148, ESR 115.33/140.8; Thunderbird 148/140.8. Practical impact: sandbox escape potent...

CVE-2026-8948

A same-origin policy bypass exists in the DOM: Networking component of the Mozilla Firefox web browser and Mozilla Thunderbird email client. The vulnerability is caused by the use of an untrusted network policy file , which can allow a remote attacker to execute arbitrary code . The issue was res...

CVE-2026-8957

A privilege escalation vulnerability exists in the Enterprise Policies component of Mozilla Firefox and Thunderbird . In the case of Firefox, this issue affects versions prior to 151 and ESR 140.11 . For Thunderbird, it affects versions prior to 151 and 140.11 . One report indicates that exploiti...

CVE-2026-92046

A Use-after-free vulnerability exists in the Graphics component of Mozilla Firefox and Thunderbird . The issue affects these applications across various distributions, including openSUSE and SUSE Linux. Remediation is available in Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbir...

CVE-2026-92052

A privilege escalation vulnerability exists in the Graphics: CanvasWebGL component due to uninitialized memory . This issue impacts Mozilla Firefox , Mozilla Firefox ESR , Thunderbird , and Thunderbird ESR . Remediation is available in Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thund...

CVE-2009-3982

The CVE-2009-3982 entry concerns Mozilla Firefox 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird, where exposure is via the JavaScript engine. The connected documents confirm a memory-corruption impact in the JS engine that could allow remote code execution or a crash, caused by unspe...

CVE-2026-100811

A use-after-free vulnerability in the DOM: Core & HTML component of the Firefox web browser allows for a sandbox escape . This flaw was addressed in Firefox ESR 153.4 , Firefox 157 , and Firefox ESR 140.17 . No specific details regarding in-the-wild exploitation or exploit code are provided in th...

CVE-2026-14899

Mozilla Thunderbird is vulnerable to an off-by-one error in the code used to parse MIME headers for display during message forwarding (active only if the setting to view all headers is enabled). This flaw allows a single byte to be read from memory following the header buffer, which could potenti...

CVE-2026-16399

CVE-2026-16399 describes a site isolation issue within the DOM: Navigation component . This vulnerability was addressed in Firefox 153 and Thunderbird 153 . While the vulnerability is confirmed in the provided documentation, specific details regarding the root cause or practical exploit vectors a...

CVE-2026-4692

This CVE (CVE-2026-4692) is a confirmed issue in the Responsive Design Mode component, leading to sandbox escape. The primary affected product is Mozilla Firefox (and related ESR builds) with versions prior to the fixed releases: Firefox 149, Firefox ESR 115.34, and Firefox ESR 140.9; Thunderbird...

CVE-2026-92037

The Mozilla Firefox and Thunderbird applications are affected by CVE-2026-92037 , which is caused by incorrect boundary conditions in the DOM: Animation component . This vulnerability was addressed in Firefox 156 and Thunderbird 156 . While specific exploit details are not provided, the issue has...

CVE-2026-92053

CVE-2026-92053 is a privilege escalation vulnerability affecting the Graphics: CanvasWebGL component in Mozilla Firefox and Thunderbird . The flaw allows for elevated privileges, and a fix has been implemented in Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbird 153.3 . No speci...