WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product firefox✕
Overview 3,552 matches · 0 in Waratek scope · 0 protected · 34 exploited · 15 CISA KEV · 137 public PoC · 27 EPSS ≥ 0.5
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 12 0.3% Not applicable 3,540 99.7% Withdrawn CVE 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 3,552 100.0% not established 0 0.0% unrecorded 0 0.0%
split by peak 574 / year
Not applicable: 3,540Outside Waratek scope: 12 Low: 73Medium: 1,355High: 1,593Critical: 531 not blocked: 3,552 No public exploit: 3,313Forecast only: 2Proof of concept only: 98Working exploit published: 105Exploited: 34
20031 Not applicable1 Medium1 not blocked1 No public exploit1 200420 Not applicable20 High8 Medium10 Low2 not blocked20 Working exploit published4 No public exploit16 200574 Not applicable74 High23 Medium32 Low19 not blocked74 Working exploit published11 No public exploit63 2006103 Not applicable103 High45 Medium48 Low10 not blocked103 Exploited1 Working exploit published8 No public exploit94 200776 Not applicable76 High23 Medium51 Low2 not blocked76 Working exploit published8 Forecast only1 No public exploit67 200892 Not applicable92 High39 Medium51 Low2 not blocked92 Working exploit published7 No public exploit85 2009125 Outside Waratek scope3 Not applicable122 High67 Medium55 Low3 not blocked125 Exploited2 Working exploit published24 No public exploit99 2010108 Not applicable108 Critical2 High61 Medium44 Low1 not blocked108 Exploited1 Working exploit published11 No public exploit96 2011102 Not applicable102 High65 Medium35 Low2 not blocked102 Working exploit published4 Proof of concept only1 No public exploit97 2012187 Not applicable187 High122 Medium60 Low5 not blocked187 Working exploit published2 Proof of concept only1 No public exploit184 2013150 Outside Waratek scope1 Not applicable149 Critical6 High91 Medium52 Low1 not blocked150 Exploited4 Working exploit published4 Forecast only1 No public exploit141 2014110 Outside Waratek scope3 Not applicable107 Critical9 High51 Medium47 Low3 not blocked110 Exploited2 Working exploit published2 No public exploit106 2015184 Outside Waratek scope2 Not applicable182 Critical1 High85 Medium91 Low7 not blocked184 Exploited2 Working exploit published3 Proof of concept only2 No public exploit177 2016139 Outside Waratek scope1 Not applicable138 Critical15 High74 Medium50 not blocked139 Working exploit published2 No public exploit137 20172 Not applicable2 Critical1 High1 not blocked2 No public exploit2 2018340 Not applicable340 Critical119 High114 Medium105 Low2 not blocked340 Exploited1 Working exploit published9 Proof of concept only1 No public exploit329 2019132 Not applicable132 Critical37 High44 Medium50 Low1 not blocked132 Exploited5 Working exploit published4 Proof of concept only1 No public exploit122 2020161 Not applicable161 Critical14 High71 Medium73 Low3 not blocked161 Exploited4 Working exploit published1 No public exploit156 2021137 Not applicable137 Critical3 High62 Medium71 Low1 not blocked137 Exploited1 Proof of concept only1 No public exploit135 2022161 Not applicable161 Critical18 High66 Medium76 Low1 not blocked161 Exploited7 Proof of concept only53 No public exploit101 2023185 Outside Waratek scope1 Not applicable184 Critical19 High71 Medium93 Low2 not blocked185 Exploited2 Proof of concept only32 No public exploit151 2024196 Outside Waratek scope1 Not applicable195 Critical35 High76 Medium82 Low3 not blocked196 Exploited1 Working exploit published1 Proof of concept only2 No public exploit192 2025193 Not applicable193 Critical47 High72 Medium71 Low3 not blocked193 Exploited1 Proof of concept only2 No public exploit190 2026574 Not applicable574 Critical205 High262 Medium107 not blocked574 Proof of concept only2 No public exploit572
200420062008201020122014201620182020202220242026
3,552 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 36 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2026-92057 Critical 2026-09-15 Not applicable No public exploit Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92056 High 2026-09-15 Not applicable No public exploit Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92055 High 2026-09-15 Not applicable No public exploit Privilege escalation in the DevTools component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92054 High 2026-09-15 Not applicable No public exploit Privilege escalation in the Memory component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92053 High 2026-09-15 Not applicable No public exploit Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92052 High 2026-09-15 Not applicable No public exploit Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92051 Critical 2026-09-15 Not applicable No public exploit Spoofing issue due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92050 Critical 2026-09-15 Not applicable No public exploit Sandbox escape due to race condition in the XPConnect component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92049 High 2026-09-15 Not applicable No public exploit Use-after-free in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92048 Critical 2026-09-15 Not applicable No public exploit Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92047 High 2026-09-15 Not applicable No public exploit Privilege escalation in the Crash Reporting component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92046 High 2026-09-15 Not applicable No public exploit Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92045 Critical 2026-09-15 Not applicable No public exploit Sandbox escape due to incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92044 High 2026-09-15 Not applicable No public exploit Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92043 High 2026-09-15 Not applicable No public exploit Privilege escalation due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92042 High 2026-09-15 Not applicable No public exploit Race condition in the DOM: Content Processes component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92041 Critical 2026-09-15 Not applicable No public exploit Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92040 High 2026-09-15 Not applicable No public exploit Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92039 Medium 2026-09-15 Not applicable No public exploit Mitigation bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92038 Critical 2026-09-15 Not applicable No public exploit Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92037 Critical 2026-09-15 Not applicable No public exploit Incorrect boundary conditions in the DOM: Animation component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92036 Critical 2026-09-15 Not applicable No public exploit Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92035 Critical 2026-09-15 Not applicable No public exploit Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Thunderbird 140.17, Firefox 156, Firefox ESR 153.3, Thunderbird 156, Thunderbird 153.3, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-92034 Critical 2026-09-15 Not applicable No public exploit Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92033 High 2026-09-15 Not applicable No public exploit Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 156.
CVE-2026-92032 Critical 2026-09-15 Not applicable No public exploit Sandbox escape due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92031 Medium 2026-09-15 Not applicable No public exploit Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92030 Medium 2026-09-15 Not applicable No public exploit Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92029 High 2026-09-15 Not applicable No public exploit Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92028 High 2026-09-15 Not applicable No public exploit Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92027 High 2026-09-15 Not applicable No public exploit Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92026 High 2026-09-15 Not applicable No public exploit Use-after-free in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92025 High 2026-09-15 Not applicable No public exploit Use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92024 High 2026-09-15 Not applicable No public exploit Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92023 High 2026-09-15 Not applicable No public exploit Use-after-free in the XML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92022 High 2026-09-15 Not applicable No public exploit Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92021 High 2026-09-15 Not applicable No public exploit Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16.
CVE-2026-92020 High 2026-09-15 Not applicable No public exploit Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92019 High 2026-09-15 Not applicable No public exploit Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92018 Critical 2026-09-15 Not applicable No public exploit Sandbox escape in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92017 High 2026-09-15 Not applicable No public exploit Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92016 High 2026-09-15 Not applicable No public exploit Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92015 High 2026-09-15 Not applicable No public exploit Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92014 High 2026-09-15 Not applicable No public exploit Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16.
CVE-2026-92013 High 2026-09-15 Not applicable No public exploit Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92012 High 2026-09-15 Not applicable No public exploit Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92011 High 2026-09-15 Not applicable No public exploit Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92010 High 2026-09-15 Not applicable No public exploit Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92009 High 2026-09-15 Not applicable No public exploit Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92008 High 2026-09-15 Not applicable No public exploit Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92007 High 2026-09-15 Not applicable No public exploit Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92006 High 2026-09-15 Not applicable No public exploit Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92005 Medium 2026-09-15 Not applicable No public exploit Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-86853 Medium 2026-09-08 Not applicable No public exploit A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches. This could make Firefox for iOS temporarily unusable until the page is closed. This vulnerability was fixed in Firefox for iOS 155.1.
CVE-2026-84145 High 2026-09-01 Not applicable No public exploit Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-84144 High 2026-09-01 Not applicable No public exploit Internally found bugs present in Thunderbird 154 and Thunderbird ESR 153.1. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84143 Critical 2026-09-01 Not applicable No public exploit Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-84142 Critical 2026-09-01 Not applicable No public exploit Internally found bugs present in Thunderbird 154. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155 and Thunderbird 155.
CVE-2026-84141 Critical 2026-09-01 Not applicable No public exploit Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84140 Critical 2026-09-01 Not applicable No public exploit Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84139 Critical 2026-09-01 Not applicable No public exploit Clickjacking issue in the DOM: Events component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84138 High 2026-09-01 Not applicable No public exploit Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 155 and Thunderbird 155.
CVE-2026-84137 Critical 2026-09-01 Not applicable No public exploit Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84136 Critical 2026-09-01 Not applicable No public exploit Other issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84135 Critical 2026-09-01 Not applicable No public exploit Other issue in Firefox Focus for Android. This vulnerability was fixed in Firefox 155.
CVE-2026-84134 Critical 2026-09-01 Not applicable No public exploit Other issue in the Profile Backup component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84133 Critical 2026-09-01 Not applicable No public exploit Site isolation issue in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84132 High 2026-09-01 Not applicable No public exploit Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84131 High 2026-09-01 Not applicable No public exploit Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-84130 High 2026-09-01 Not applicable No public exploit Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84129 Critical 2026-09-01 Not applicable No public exploit Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84128 High 2026-09-01 Not applicable No public exploit Privilege escalation in the WebDriver BiDi component. This vulnerability was fixed in Firefox 155 and Thunderbird 155.
CVE-2026-84127 Medium 2026-09-01 Not applicable No public exploit Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155.
CVE-2026-84126 Medium 2026-09-01 Not applicable No public exploit Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155.
CVE-2026-84125 Medium 2026-09-01 Not applicable No public exploit Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84124 Medium 2026-09-01 Not applicable No public exploit Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-84123 High 2026-09-01 Not applicable No public exploit Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84122 Medium 2026-09-01 Not applicable No public exploit Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-84121 Critical 2026-09-01 Not applicable No public exploit Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-84120 Medium 2026-09-01 Not applicable No public exploit Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-84119 Critical 2026-09-01 Not applicable No public exploit Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-84118 Medium 2026-09-01 Not applicable No public exploit Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84117 High 2026-09-01 Not applicable No public exploit Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 155.
CVE-2026-81267 Medium 2026-08-31 Not applicable No public exploit A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 155.0.
CVE-2026-75874 Critical 2026-08-18 Not applicable No public exploit Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Thunderbird 154, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-74990 Critical 2026-08-18 Not applicable No public exploit Internally found bugs present in Firefox ESR 115.38, Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74989 Critical 2026-08-18 Not applicable No public exploit Internally found bugs present in Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154 and Thunderbird 154.
CVE-2026-74988 Critical 2026-08-18 Not applicable No public exploit Internally found bugs present in Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74987 Critical 2026-08-18 Not applicable No public exploit Internally found bugs present in Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74986 Critical 2026-08-18 Not applicable No public exploit Site isolation issue in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74985 Critical 2026-08-18 Not applicable No public exploit Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74984 Medium 2026-08-18 Not applicable No public exploit Race condition in the JavaScript Engine component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74983 High 2026-08-18 Not applicable No public exploit Mitigation bypass in the Data Loss Prevention component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74982 High 2026-08-18 Not applicable No public exploit Denial-of-service in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74981 High 2026-08-18 Not applicable No public exploit Site isolation issue in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74980 Medium 2026-08-18 Not applicable No public exploit Clickjacking issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.
CVE-2026-74979 Critical 2026-08-18 Not applicable No public exploit Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74978 High 2026-08-18 Not applicable No public exploit Clickjacking issue in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74977 High 2026-08-18 Not applicable No public exploit Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74976 Medium 2026-08-18 Not applicable No public exploit JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
‹ prev page 2 of 36 next ›