1477 matches found
CVE-2026-92056
A use-after-free vulnerability exists in the Graphics: Text component of Mozilla Firefox and Thunderbird . The flaw was addressed in Firefox versions 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbird 153.3 . No specific exploit details are provided in the documentation.
CVE-2026-92027
A use-after-free vulnerability exists in the DOM: Streams component of Mozilla Firefox and Thunderbird . The flaw allows for potential memory corruption or instability. This issue has been addressed in Firefox versions 156, ESR 115.41, ESR 140.16, and ESR 153.3, as well as Thunderbird versions 15...
CVE-2026-92030
A mitigation bypass exists in the DOM: Copy & Paste and Drag & Drop component of the Mozilla Firefox and Mozilla Thunderbird browsers. This vulnerability was addressed in Firefox versions 156, ESR 140.16, and ESR 153.3, as well as Thunderbird versions 156, 140.16, and 153.3. Security advisories f...
CVE-2026-92042
A race condition exists in the DOM: Content Processes component of the Mozilla Firefox and Thunderbird browsers. This vulnerability is addressed in Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbird 153.3 . While the provided documents confirm the presence of the vulnerability in...
CVE-2026-92058
A use-after-free vulnerability exists in the Graphics component of the Firefox browser and Thunderbird. This flaw has been addressed in Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbird 153.3 . While one connected document (MGASA-2026-0441) characterizes this specific CVE ID as
CVE-2017-5411
CVE-2017-5411 is a use-after-free in ANGLE libGLES during buffer storage on Windows, affecting Firefox < 52 and Thunderbird
CVE-2026-0878
Mozilla Firefox , Firefox ESR , and Thunderbird are vulnerable to a sandbox escape caused by incorrect boundary conditions in the Graphics:CanvasWebGL component. An attacker could exploit this vulnerability to execute arbitrary code on the system or cause the application to crash. The issue is ad...
CVE-2026-100781
A sandbox escape vulnerability exists in the Graphics: WebRender component due to incorrect boundary conditions . This issue affects multiple Mozilla products, including Firefox ESR 115.42 , Firefox ESR 140.17 , Firefox 157 , Thunderbird 140.17 , Thunderbird 153.4 , and Thunderbird 157 . The vuln...
CVE-2026-100787
A sandbox escape vulnerability exists in the XUL component affecting Mozilla Firefox and Thunderbird . The flaw allows for a sandbox escape, and the issue has been addressed in Firefox ESR 153.4 , Thunderbird 157 , Thunderbird 153.4 , and Firefox 157 . Exploitation details are not provided in the...
CVE-2026-12319
The Firefox web browser and Thunderbird email client are affected by a Denial-of-Service (DoS) vulnerability in the Audio/Video: Playback component. The flaw is caused by an uncontrolled consumption of resources , which can allow a remote attacker to trigger service interruptions or cause a servi...
CVE-2026-2762
CVE-2026-2762 is an integer overflow in the JavaScript: Standard Library component that affects Firefox (non-ESR) and related Mozilla products. The issue is confirmed fixed in Firefox 148 and Firefox ESR 140.8, as well as Thunderbird 148 and Thunderbird 140.8. Connected advisories (Astra Linux bu...
CVE-2026-2789
CVE-2026-2789 — Use-after-free in Graphics: ImageLib Affected software: Mozilla Firefox (and Firefox ESR) and Thunderbird. The vulnerability arises from a use-after-free in the Graphics: ImageLib component. Affected versions are fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunder...
CVE-2026-8963
The Firefox web browser and Thunderbird email client are vulnerable to a spoofing issue within the Web Speech component. This flaw allows an attacker to bypass authentication through spoofing, potentially leading to a compromise of data integrity . The vulnerability has been addressed in Firefox ...
CVE-2026-8966
The IP Protection component in Mozilla Firefox and Mozilla Thunderbird is vulnerable to an information disclosure flaw. This vulnerability allows a remote attacker to potentially gain access to confidential data . The issue has been addressed in Firefox 151 and Thunderbird 151 . No specific explo...
CVE-2026-92013
Mozilla Firefox and Thunderbird are vulnerable to privilege escalation due to incorrect boundary conditions within the Graphics: CanvasWebGL component. This flaw impacts multiple versions of the software, including Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, and corres...
CVE-2026-92022
A use-after-free vulnerability exists in the DOM: HTML Parser component of Mozilla Firefox and Thunderbird . This flaw can be triggered during the parsing of HTML content. The issue has been addressed in several versions, including Firefox 156 , Firefox ESR 115.41 , Firefox ESR 140.16 , Firefox E...
CVE-2026-96869
The Networking component in Firefox is subject to an information disclosure vulnerability (CVE-2026-96869 ). This issue was reported by Carlo Di Dato and has a moderate impact. The vulnerability has been addressed in Firefox ESR 153.4 , Firefox 157 , and Firefox ESR 140.17 . No specific exploit d...
CVE-2026-2773
CVE-2026-2773 is a Chrome-like vulnerability in Firefox’s Web Audio component caused by incorrect boundary conditions, fixed in Firefox 148 and corresponding ESR releases (ESR 115.33 and ESR 140.8). The issue is documented across multiple advisories (Firefox security notes and vendor feeds) and i...
CVE-2026-8969
The Firefox web browser and Thunderbird email client are affected by a mitigation bypass in the DOM: Security component. The root cause is a lack of adequate data security mechanisms, which could allow a malicious actor to access confidential data and compromise its integrity . This vulnerability...
CVE-2026-92023
A Use-after-free vulnerability exists in the XML component of the Mozilla Firefox and Thunderbird applications. This flaw could potentially allow an attacker to cause a crash or achieve arbitrary code execution. The issue has been addressed in the following versions: Firefox 156 , Firefox ESR 115...
CVE-2026-92069
This vulnerability involves a spoofing issue within the DOM: Navigation component . The flaw has been addressed in the following versions: Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbird 153.3 . While multiple connected documents list this CVE, they do not provide specific tec...
CVE-2026-92073
CVE-2026-92073 is a privilege escalation vulnerability within the Enterprise Policies component of the Mozilla Firefox browser. This issue was addressed in Firefox version 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbird 153.3 . While various security advisories and package updates (su...
CVE-2009-3980
CVE-2009-3980 affects Mozilla Firefox 3.5.x prior to 3.5.6, SeaMonkey prior to 2.0.1, and Thunderbird; the issue is memory corruption in the browser engine that can lead to a denial of service or potentially arbitrary code execution via unknown vectors. Public records indicate fixes in Firefox 3....
CVE-2026-2788
CVE-2026-2788 concerns incorrect boundary conditions in the Audio/Video: GMP component of Mozilla Firefox. Public advisories (e.g., Firefox/Firefox ESR updates in Firefox 148, ESR 115.33, ESR 140.8) and downstream Debian/AlmaLinux advisories confirm the fix was applied in those versions. Connecte...
CVE-2026-4721
Mozilla products, including Firefox , Firefox ESR , and Thunderbird , are affected by memory safety bugs (CVE-2026-4721). These vulnerabilities involve memory corruption and could potentially be exploited to execute arbitrary code . The issue impacts Firefox versions prior to 149, Firefox ESR ver...
CVE-2026-92008
The Graphics: CanvasWebGL component in Mozilla Firefox and Thunderbird is vulnerable to privilege escalation due to incorrect boundary conditions . This vulnerability has been addressed in the following versions: Firefox 156 , Firefox ESR 115.41 , Firefox ESR 140.16 , Firefox ESR 153.3 , Thunderb...
CVE-2009-4630
Mo zilla Necko (Firefox, SeaMonkey and related apps) exposes a DNS prefetching flaw where domain names in links in local HTML are resolved, enabling remote observers to log DNS requests and infer user network location. Root cause: prefetching by the Necko DNS resolver. Impact: information disclos...
CVE-2025-10531
A mitigation bypass vulnerability exists in the Web Compatibility: Tooling component of the Mozilla Firefox browser and Mozilla Thunderbird email client. The flaw allows a malicious actor to circumvent existing security restrictions remotely by exploiting an alternative path or channel that bypas...
CVE-2025-14322
A sandbox escape vulnerability exists in the Graphics: CanvasWebGL component of Mozilla Firefox and Thunderbird due to incorrect boundary conditions and insufficient checking of unusual states. This flaw allows a remote attacker to bypass sandboxing protection mechanisms. Affected versions includ...
CVE-2025-14331
CVE-2025-14331: Same-origin policy bypass in the Request Handling component affects Firefox <146, Firefox ESR <115.31 and <140.6, Thunderbird <146 and
CVE-2026-12323
The Firefox web browser and Thunderbird email client are affected by a DOM spoofing issue within the Core & HTML components. The root cause is attributed to improper restrictions on the visible layers of the user interface , which could allow a remote attacker to trigger service interruptions . R...
CVE-2026-8971
The Mozilla Firefox web browser and Mozilla Thunderbird email client are vulnerable to a same-origin policy bypass within the Networking: JAR component. The root cause is attributed to a lack of source verification mechanism in the networking component. If exploited, an attacker can bypass securi...
CVE-2026-92020
The Graphics: WebRender component in Mozilla Firefox and Thunderbird is vulnerable to privilege escalation due to incorrect boundary conditions. This issue affects several versions, including Firefox 156 , Firefox ESR 115.41 , Firefox ESR 140.16 , Firefox ESR 153.3 , Thunderbird 156 , Thunderbird...
CVE-2026-92072
This vulnerability exists in the Safe Browsing component due to incorrect boundary conditions . The flaw affects Mozilla Firefox and Thunderbird software. Remediation is available in Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbird 153.3 . Exploitation details are not provided ...
CVE-2012-5354
CVE-2012-5354 is covered by details in connected advisories/plugins. The open-connected sources show that Mozilla Firefox before 16.0, Mozilla Thunderbird before 16.0, and SeaMonkey before 2.13 are vulnerable to a clickjacking-style issue when navigating away from a page that has an active set of...
CVE-2025-10532
Mozilla Firefox , Firefox ESR , and Thunderbird are vulnerable to a security bypass due to incorrect boundary conditions in the JavaScript: GC component . The root cause is identified as insufficient checking of unusual or exceptional states within the GC functions. Successful exploitation could ...
CVE-2026-100762
A use-after-free vulnerability in the DOM: Content Processes component of Firefox allows for a sandbox escape . This flaw has been addressed in the following versions: Firefox ESR 153.4 , Firefox 157 , Firefox ESR 115.42 , and Firefox ESR 140.17 . Technical details regarding the specific root cau...
CVE-2026-2759
The CVE-2026-2759 issue is concrete: it concerns incorrect boundary conditions in the Graphics: ImageLib component affecting Firefox/Thunderbird products. The description explicitly states the vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thun...
CVE-2026-2784
A vulnerability CVE-2026-2784 is a mitigation bypass in the DOM: Security component affecting Mozilla Firefox and Thunderbird. The issue was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. The connected sources (Astra Linux bulletin and Amazon Linux advisories) co...
CVE-2026-2785
CVE-2026-2785 is an Invalid pointer vulnerability in the Firefox JavaScript Engine. Connected sources show it being addressed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. Debian/ALMA and Amazon Linux advisories enumerate Firefox-related fixes including this CVE and l...
CVE-2026-2795
CVE-2026-2795 is a use-after-free in the JavaScript: GC component affecting Mozilla Firefox and Mozilla Thunderbird. Technical details across connected sources consistently identify the flaw in the GC object handling, with exploitation risk implied by the high/critical CVSS data. The vulnerabilit...
CVE-2026-2805
CVE-2026-2805 describes an Invalid pointer in the DOM: Core & HTML component affecting Mozilla Firefox and Mozilla Thunderbird. The issue originates from a pointer problem in the DOM Core & HTML, with the vulnerability fixed in version Firefox 148 and Thunderbird 148 . Public CVSS details (CVSS v...
CVE-2026-8952
The Mozilla Firefox web browser and Mozilla Thunderbird email client are vulnerable to a privilege escalation flaw within the Application Update component. Insecure management of privileges allows a malicious actor to trigger service interruptions or cause a service failure. The vulnerability aff...
CVE-2026-92011
The Graphics: CanvasWebGL component in Mozilla Firefox and Mozilla Thunderbird is vulnerable to privilege escalation due to incorrect boundary conditions . This security flaw affects multiple versions, including Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 1...
CVE-2026-92076
CVE-2026-92076 is a vulnerability in the Networking component of Firefox and Thunderbird caused by incorrect boundary conditions . The issue has been addressed in Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbird 153.3 . While the initial description notes the Networking compone...
CVE-2025-14324
CVE-2025-14324 describes a JIT miscompilation in the JavaScript Engine’s JIT component affecting Firefox < 146, Firefox ESR < 115.31 and < 140.6, and Thunderbird
CVE-2025-8043
Mozilla Firefox and Thunderbird are vulnerable to a security flaw where URLs are incorrectly truncated toward the beginning instead of around the origin. This vulnerability exists in products earlier than version 141 . Potential impacts include security bypass , spoofing the user interface , and ...
CVE-2026-2764
CVE-2026-2764: JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. Affected products include Firefox/Firefox ESR (pre-148 and ESR