1477 matches found
CVE-2026-4692
This CVE (CVE-2026-4692) is a confirmed issue in the Responsive Design Mode component, leading to sandbox escape. The primary affected product is Mozilla Firefox (and related ESR builds) with versions prior to the fixed releases: Firefox 149, Firefox ESR 115.34, and Firefox ESR 140.9; Thunderbird...
CVE-2026-92037
The Mozilla Firefox and Thunderbird applications are affected by CVE-2026-92037 , which is caused by incorrect boundary conditions in the DOM: Animation component . This vulnerability was addressed in Firefox 156 and Thunderbird 156 . While specific exploit details are not provided, the issue has...
CVE-2026-92053
CVE-2026-92053 is a privilege escalation vulnerability affecting the Graphics: CanvasWebGL component in Mozilla Firefox and Thunderbird . The flaw allows for elevated privileges, and a fix has been implemented in Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbird 153.3 . No speci...
CVE-2026-92055
The DevTools component in Mozilla Firefox and Thunderbird is vulnerable to privilege escalation . This flaw was addressed in the following versions: Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbird 153.3 . While the specific technical root cause is not detailed beyond the compo...
CVE-2026-92065
Mozilla Firefox and Mozilla Thunderbird are affected by a sandbox escape vulnerability in the Widget: Win32 component. The root cause is identified as incorrect boundary conditions within the component. This issue impacts the security boundary of the browser and mail client's sandbox. Remediation...
CVE-2026-12322
The Firefox web browser and Thunderbird email client are affected by a clickjacking vulnerability in the Widget: Gtk component. The issue stems from an incorrect limitation on the visible layers of the user interface, which could allow an attacker to cause service failures . This vulnerability ha...
CVE-2026-2777
CVE-2026-2777 is a privilege-escalation vulnerability in the Firefox/Thunderbird Messaging System component. The issue is fixed in Firefox 148, Firefox ESR 115.33/140.8, Thunderbird 148, and Thunderbird 140.8. Connected sources (Astra Linux, AWS advisories, Debian security notes) confirm the same...
CVE-2026-8962
A mitigation bypass exists in the DOM: Security component of the Firefox web browser and the Thunderbird email client. Exploiting this vulnerability could allow an attacker to access confidential data and compromise data integrity . This issue was resolved in Firefox 151 , Firefox ESR 140.11 , Th...
CVE-2026-92028
A Use-after-free vulnerability exists in the DOM: Core & HTML component of the Mozilla Firefox and Thunderbird web browsers. This flaw was addressed in Firefox 156 , Firefox ESR 115.41 , Firefox ESR 140.16 , Firefox ESR 153.3 , Thunderbird 156 , Thunderbird 140.16 , and Thunderbird 153.3 . While ...
CVE-2026-92060
A use-after-free vulnerability exists in the Internationalization component of Mozilla Firefox and Thunderbird . The issue has been addressed in Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbird 153.3 . Specific details regarding exploitation vectors or impacts are not provided ...
CVE-2026-12307
A memory safety bug has been identified and fixed in Firefox and Thunderbird . This vulnerability affects Firefox 152 , Firefox ESR 140.12 , Thunderbird 152 , and Thunderbird 140.12 . The issue was specifically addressed as a memory safety fix in the Thunderbird client. No specific technical deta...
CVE-2026-2767
CVE-2026-2767 is a use-after-free vulnerability in the JavaScript: WebAssembly component of Firefox/Thunderbird. Affected products include Firefox (Desktop) and Thunderbird with the WebAssembly implementation; the issue is addressed by fixes in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and...
CVE-2026-2782
CVE-2026-2782 affects Firefox (Netmonitor component) and is fixed in Firefox 148 and Firefox ESR 140.8, also addressed in Thunderbird 148/140.8. The connected sources corroborate privilege-escalation via Netmonitor across Mozilla products and note remediation as upgrading to Firefox 148+/Thunderb...
CVE-2026-8973
Memory safety bugs in Firefox 150 and Thunderbird 150 allow for memory corruption due to operations exceeding buffer boundaries. While the impact primarily involves potential service interruptions , it is presumed that with sufficient effort, these flaws could be exploited to achieve arbitrary co...
CVE-2026-92010
The Mozilla Firefox and Mozilla Thunderbird browsers/mail clients are vulnerable to privilege escalation due to incorrect boundary conditions within the Graphics: CanvasWebGL component. This vulnerability has been addressed in the following versions: Firefox 156 , Firefox ESR 115.41 , Firefox ESR...
CVE-2026-92024
Mozilla Firefox and Thunderbird are affected by a use-after-free vulnerability in the SVG component (CVE-2026-92024). This flaw can potentially impact the security of the browser and mail client. The vulnerability has been addressed in the following versions: Firefox 156 , Firefox ESR 115.41 , Fi...
CVE-2026-92066
A sandbox escape vulnerability exists in the Profile Backup component of Firefox and Thunderbird . The vulnerability was addressed in Firefox 156 and Thunderbird 156 . While specific root cause technical details are not provided in the documents, the impact involves a potential escape from the ap...
CVE-2026-92067
A use-after-free vulnerability exists in the Widget: Gtk component of Mozilla Firefox , Firefox ESR , Thunderbird , and Thunderbird ESR . This flaw was addressed in Firefox versions 156 and 153.3 (ESR), and Thunderbird versions 156 and 153.3 (ESR). Exploitation details are not provided in the doc...
CVE-2026-16376
CVE-2026-16376 describes a Denial-of-Service (DoS) vulnerability in the Graphics: WebGPU component. This flaw was addressed in Firefox 153 and Thunderbird 153 . While the technical root cause is not detailed in the provided documents, the vulnerability is associated with CWE-400 (Uncontrolled Res...
CVE-2026-2775
CVE-2026-2775 is a mitigation bypass in the DOM: HTML Parser component. The initial description states a fix in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. Connected sources (Astra Linux bulletin and Amazon Linux advisories) reiterate the same mitig...
CVE-2026-2804
A use-after-free vulnerability exists in the JavaScript: WebAssembly component of the Mozilla Firefox web browser and Mozilla Thunderbird email client. The root cause is a mix-up in the instructions responsible for freeing memory. An attacker could exploit this flaw to execute arbitrary code , ca...
CVE-2026-2806
CVE-2026-2806 involves an uninitialized memory issue in the Graphics: Text component of Firefox/Thunderbird. Affected products are Mozilla Firefox and Mozilla Thunderbird (before versions 148). Root cause per the documents is uninitialized memory in the Text rendering path, with a fix implemented...
CVE-2026-4729
Mozilla Firefox and Thunderbird versions 148 contain memory safety bugs that exhibit evidence of memory corruption. A specific vulnerability in the Firefox web browser involves copying buffers without checking the input data , which could allow a remote attacker to trigger a service failure or, w...
CVE-2026-6778
Mozilla Firefox and Thunderbird are vulnerable to an invalid pointer (specifically a zero pointer ) in the Audio/Video: Playback component. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information . This issue has been resolved in Firefox 150 ...
CVE-2026-92032
A sandbox escape vulnerability exists in the Graphics component of Mozilla Firefox and Mozilla Thunderbird due to an invalid pointer . This flaw allows for the execution of arbitrary code. Impacted versions include Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 1...
CVE-2017-7755
CVE-2017-7755 affects Mozilla Firefox and Thunderbird installers on Windows. The Firefox installer can be made to load malicious DLLs stored in the same directory as the installer, enabling privilege escalation when the installer runs with elevated privileges. Affected products/versions include F...
CVE-2026-12301
A memory safety bug exists in the Mozilla Firefox web browser and Thunderbird email client. The vulnerability involves operations escaping buffer boundaries in memory, which could allow a remote attacker to gain access to confidential data . This issue is addressed in Firefox 152 and Thunderbird ...
CVE-2026-2769
A use-after-free vulnerability exists in the Storage: IndexedDB component of the Firefox browser and the Thunderbird email client. This flaw occurs because the software uses memory after it has been released, which could allow a remote attacker to induce a service failure . The issue is fixed in ...
CVE-2026-2780
CVE-2026-2780: Privilege escalation in the Netmonitor component of Firefox/Thunderbird. The vulnerability is fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. Affected products include Firefox family and Thunderbird; root cause is in the Netmonitor component. Remedi...
CVE-2026-2802
A race condition exists in the JavaScript: GC component of the Mozilla Firefox web browser and Mozilla Thunderbird email client. The vulnerability stems from simultaneous execution using a shared resource with incorrect synchronization. If exploited, an attacker could gain access to confidential ...
CVE-2026-92044
CVE-2026-92044 involves information disclosure in the Networking: HTTP component of Mozilla products. The vulnerability has been addressed in Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbird 153.3 . While technical details regarding the specific root cause are not provided in t...
CVE-2026-92049
A use-after-free vulnerability exists in the Widget: Win32 component of Mozilla products. This issue impacts Firefox , Firefox ESR , Thunderbird , and Thunderbird ESR . The vulnerability was addressed in Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbird 153.3 . Documentation con...
CVE-2012-3983
CVE-2012-3983 affects Mozilla Firefox (pre-16.0), Thunderbird (pre-16.0), and SeaMonkey (pre-2.13). Reported memory safety vulnerabilities could cause memory corruption and crashes and potentially allow arbitrary code execution via unknown vectors. Remediation evidenced in connected documents inc...
CVE-2017-7765
CVE-2017-7765 corresponds to a Mark of the Web bypass on Windows when saving files with very long names, bypassing the security warning before running downloaded executables. Affected products include Firefox < 54, Firefox ESR < 52.2, and Thunderbird
CVE-2025-14327
CVE-2025-14327 is a spoofing vulnerability in the Downloads Panel component affecting Firefox < 146, Thunderbird < 146, Firefox ESR < 140.7, and Thunderbird
CVE-2026-0885
A use-after-free vulnerability exists in the JavaScript: GC component of the Mozilla Firefox and Thunderbird products. This memory safety issue can allow a remote attacker to execute arbitrary code on the affected system. The vulnerability affects versions of Firefox earlier than 147 and Firefox ...
CVE-2026-2790
CVE-2026-2790 is a same-origin policy bypass in the Networking: JAR component affecting Firefox and Thunderbird. Connected sources confirm the issue and its remediation: Firefox versions 148 and ESR 140.8, as well as Thunderbird 148 and 140.8, include the fix. Astra Linux bulletin also cites the ...
CVE-2026-2799
CVE-2026-2799 is a use-after-free vulnerability in the DOM: Core & HTML components of Mozilla Firefox and Thunderbird. The issue, identified across multiple advisories, is resolved in Firefox 148 and Thunderbird 148. Public exploit activity is noted in connected sources. Affected products include...
CVE-2026-2801
CVE-2026-2801 concerns an issue in the JavaScript: WebAssembly component where incorrect boundary conditions were present. Affected software includes Mozilla Firefox and Mozilla Thunderbird; reports indicate the problem was fixed in Firefox 148 and Thunderbird 148. Some sources also reference Thu...
CVE-2026-6775
The WebRTC component in Mozilla Firefox and Mozilla Thunderbird is vulnerable to incorrect boundary conditions, specifically involving the execution of operations outside of the buffer in memory. This vulnerability could allow an attacker to gain unauthorized access to protected information . The...
CVE-2026-8961
A spoofing issue exists in the Form Autofill component of the Firefox web browser and the Thunderbird email client. This vulnerability allows a malicious actor to potentially compromise data integrity and may facilitate authentication bypass through spearfishing . The issue is fixed in Firefox 15...
CVE-2026-8972
The WebRTC: Audio/Video component in the Mozilla Firefox web browser and Mozilla Thunderbird email client is affected by a privilege escalation vulnerability caused by insecure privilege management . A remote attacker could exploit this flaw to cause service interruptions or achieve elevated priv...
CVE-2026-92009
Mozilla Firefox and Thunderbird are affected by CVE-2026-92009, a privilege escalation vulnerability caused by incorrect boundary conditions within the Graphics: CanvasWebGL component. This security issue has been addressed in several releases, including Firefox 156 , Firefox ESR 115.41 , Firefox...
CVE-2026-92056
A use-after-free vulnerability exists in the Graphics: Text component of Mozilla Firefox and Thunderbird . The flaw was addressed in Firefox versions 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbird 153.3 . No specific exploit details are provided in the documentation.
CVE-2026-0892
Mozilla Firefox and Thunderbird versions 146 (and versions prior to 147) are affected by memory safety bugs that can lead to memory corruption . An attacker could potentially exploit these vulnerabilities to achieve arbitrary code execution on the system or cause a denial-of-service (DoS) attack....
CVE-2026-12303
The Firefox web browser and Thunderbird email client are affected by an information disclosure vulnerability in the Graphics: WebGPU component. The root cause is incorrect boundary conditions , which allows an attacker to read data from buffer areas beyond the allowed limits and potentially acces...
CVE-2026-2771
CVE-2026-2771 is an undefined-behavior vulnerability in the DOM: Core & HTML component of Mozilla Firefox/Thunderbird family that was fixed in Firefox 148, Firefox ESR 115.33 and 140.8, Thunderbird 148 and 140.8. The issue is reported across multiple advisories (Astra Linux bulletin and Amazon Li...
CVE-2026-2787
CVE-2026-2787 is a use-after-free in the DOM: Window and Location component, with fixes in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. Connected sources corroborate the issue in Firefox-related components and list the affected products as Firefox/Th...
CVE-2026-5734
CVE-2026-5734 involves memory safety bugs in Mozilla products. Affected: Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1, and Thunderbird 149.0.1. Some bugs show memory corruption and could potentially be exploited to run arbitrary code. The issue is addressed by fixes in Firefox 14...