WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Vendor mozilla✕
Overview 3,934 matches · 1 in Waratek scope · 0 protected · 35 exploited · 15 CISA KEV · 159 public PoC · 28 EPSS ≥ 0.5
split by peak 592 / year
Not applicable: 3,917Outside Waratek scope: 16No exploit published: 1 Low: 102Medium: 1,567High: 1,712Critical: 553 not blocked: 3,934 No public exploit: 3,664Forecast only: 2Proof of concept only: 107Working exploit published: 126Exploited: 35
20002 Not applicable2 High1 Medium1 not blocked2 Working exploit published1 No public exploit1 200110 Not applicable10 High7 Medium1 Low2 not blocked10 Working exploit published2 No public exploit8 200230 Not applicable30 High16 Medium12 Low2 not blocked30 Working exploit published3 No public exploit27 200313 Not applicable13 Critical1 High3 Medium6 Low3 not blocked13 Working exploit published2 No public exploit11 200454 Outside Waratek scope1 Not applicable53 High19 Medium29 Low6 not blocked54 Working exploit published6 No public exploit48 200593 Not applicable93 High28 Medium43 Low22 not blocked93 Working exploit published11 No public exploit82 2006122 Not applicable122 High50 Medium57 Low15 not blocked122 Exploited1 Working exploit published12 No public exploit109 200787 Not applicable87 Critical1 High27 Medium57 Low2 not blocked87 Working exploit published8 Forecast only1 No public exploit78 200898 Not applicable98 High42 Medium53 Low3 not blocked98 Working exploit published7 No public exploit91 2009143 Outside Waratek scope3 Not applicable140 Critical1 High72 Medium66 Low4 not blocked143 Exploited3 Working exploit published24 No public exploit116 2010123 Not applicable123 Critical2 High62 Medium55 Low4 not blocked123 Exploited1 Working exploit published11 No public exploit111 2011117 Not applicable117 High66 Medium47 Low4 not blocked117 Working exploit published4 Proof of concept only1 No public exploit112 2012205 Not applicable205 High122 Medium78 Low5 not blocked205 Working exploit published2 Proof of concept only1 No public exploit202 2013161 Outside Waratek scope1 Not applicable160 Critical6 High93 Medium61 Low1 not blocked161 Exploited4 Working exploit published6 Forecast only1 No public exploit150 2014120 Outside Waratek scope3 Not applicable117 Critical9 High53 Medium55 Low3 not blocked120 Exploited2 Working exploit published3 No public exploit115 2015188 Outside Waratek scope2 Not applicable186 Critical1 High86 Medium94 Low7 not blocked188 Exploited2 Working exploit published3 Proof of concept only2 No public exploit181 2016142 Outside Waratek scope1 Not applicable141 Critical15 High75 Medium51 Low1 not blocked142 Working exploit published2 No public exploit140 20179 Not applicable9 Critical2 High6 Medium1 not blocked9 No public exploit9 2018358 Not applicable358 Critical120 High117 Medium119 Low2 not blocked358 Exploited1 Working exploit published9 Proof of concept only1 No public exploit347 2019146 Not applicable146 Critical41 High49 Medium55 Low1 not blocked146 Exploited5 Working exploit published8 Proof of concept only1 No public exploit132 2020179 Outside Waratek scope2 Not applicable177 Critical15 High78 Medium83 Low3 not blocked179 Exploited4 Working exploit published1 No public exploit174 2021154 Outside Waratek scope1 Not applicable153 Critical7 High66 Medium79 Low2 not blocked154 Exploited1 Proof of concept only1 No public exploit152 2022181 Not applicable181 Critical20 High75 Medium85 Low1 not blocked181 Exploited7 Proof of concept only54 No public exploit120 2023197 Outside Waratek scope1 Not applicable196 Critical20 High73 Medium102 Low2 not blocked197 Exploited2 Proof of concept only36 No public exploit159 2024202 Outside Waratek scope1 Not applicable201 Critical35 High79 Medium85 Low3 not blocked202 Exploited1 Working exploit published1 Proof of concept only5 No public exploit195 2025208 No exploit published1 Not applicable207 Critical47 High77 Medium80 Low4 not blocked208 Exploited1 Proof of concept only2 No public exploit205 2026592 Not applicable592 Critical210 High270 Medium112 not blocked592 Proof of concept only3 No public exploit589
200220052008201120142017202020232026
3,934 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 3 of 40 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2026-74984 Medium 2026-08-18 Not applicable No public exploit Race condition in the JavaScript Engine component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74983 High 2026-08-18 Not applicable No public exploit Mitigation bypass in the Data Loss Prevention component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74982 High 2026-08-18 Not applicable No public exploit Denial-of-service in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74981 High 2026-08-18 Not applicable No public exploit Site isolation issue in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74980 Medium 2026-08-18 Not applicable No public exploit Clickjacking issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.
CVE-2026-74979 Critical 2026-08-18 Not applicable No public exploit Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74978 High 2026-08-18 Not applicable No public exploit Clickjacking issue in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74977 High 2026-08-18 Not applicable No public exploit Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74976 Medium 2026-08-18 Not applicable No public exploit JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74975 Medium 2026-08-18 Not applicable No public exploit Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.
CVE-2026-74974 Medium 2026-08-18 Not applicable No public exploit Same-origin policy bypass in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74973 Medium 2026-08-18 Not applicable No public exploit Race condition, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74972 Medium 2026-08-18 Not applicable No public exploit Information disclosure in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74971 Medium 2026-08-18 Not applicable No public exploit Information disclosure in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74970 Medium 2026-08-18 Not applicable No public exploit Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74969 High 2026-08-18 Not applicable No public exploit Race condition, use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74968 Medium 2026-08-18 Not applicable No public exploit Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74967 Medium 2026-08-18 Not applicable No public exploit Same-origin policy bypass in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74966 High 2026-08-18 Not applicable No public exploit Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74965 High 2026-08-18 Not applicable No public exploit Privilege escalation in the Shell Integration component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74964 Critical 2026-08-18 Not applicable No public exploit Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74963 Medium 2026-08-18 Not applicable No public exploit Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74962 High 2026-08-18 Not applicable No public exploit Site isolation issue in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74961 Critical 2026-08-18 Not applicable No public exploit Side-channel in the Web Audio component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74960 High 2026-08-18 Not applicable No public exploit Site isolation issue in the WebExtensions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74959 Critical 2026-08-18 Not applicable No public exploit Mitigation bypass in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74958 High 2026-08-18 Not applicable No public exploit Information disclosure in the WebRTC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74957 High 2026-08-18 Not applicable No public exploit Mitigation bypass in the Safe Browsing component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74956 Critical 2026-08-18 Not applicable No public exploit Same-origin policy bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74955 High 2026-08-18 Not applicable No public exploit Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74954 High 2026-08-18 Not applicable No public exploit Information disclosure due to side-channel in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74953 High 2026-08-18 Not applicable No public exploit Privilege escalation in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74952 High 2026-08-18 Not applicable No public exploit Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 154, Thunderbird 154, Firefox ESR 153.2, and Thunderbird 153.2.
CVE-2026-74951 Medium 2026-08-18 Not applicable No public exploit Clickjacking issue in Firefox for Android. This vulnerability was fixed in Firefox 154.
CVE-2026-74950 High 2026-08-18 Not applicable No public exploit Privilege escalation in the Downloads API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74949 High 2026-08-18 Not applicable No public exploit Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74948 Medium 2026-08-18 Not applicable No public exploit Information disclosure in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74947 High 2026-08-18 Not applicable No public exploit Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74946 High 2026-08-18 Not applicable No public exploit Information disclosure due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74945 Medium 2026-08-18 Not applicable No public exploit Information disclosure in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74944 Critical 2026-08-18 Not applicable No public exploit Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74943 Critical 2026-08-18 Not applicable No public exploit Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74942 High 2026-08-18 Not applicable No public exploit Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74941 High 2026-08-18 Not applicable No public exploit Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74940 Critical 2026-08-18 Not applicable No public exploit Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74939 High 2026-08-18 Not applicable No public exploit Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74938 Critical 2026-08-18 Not applicable No public exploit Mitigation bypass in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74937 High 2026-08-18 Not applicable No public exploit Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74936 Critical 2026-08-18 Not applicable No public exploit Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74935 High 2026-08-18 Not applicable No public exploit Privilege escalation in the DOM: Networking component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74934 High 2026-08-18 Not applicable No public exploit Site isolation issue in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-14899 High 2026-07-22 Not applicable No public exploit The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) had an off-by-one error, allowing a single byte to be read from the memory after the buffer for the headers, and potentially crashing Thunderbird. This vulnerability was fixed in Thunderbird 153 and Thunderbird 140.13.
CVE-2026-16412 Critical 2026-07-21 Not applicable No public exploit Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16411 Critical 2026-07-21 Not applicable No public exploit Memory safety bugs present in Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16410 Critical 2026-07-21 Not applicable No public exploit JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16409 High 2026-07-21 Not applicable No public exploit Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16408 Critical 2026-07-21 Not applicable No public exploit Integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16407 Critical 2026-07-21 Not applicable No public exploit Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16406 Critical 2026-07-21 Not applicable No public exploit Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16405 High 2026-07-21 Not applicable No public exploit Information disclosure in the Networking: WebSockets component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16404 High 2026-07-21 Not applicable No public exploit Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153.
CVE-2026-16403 Medium 2026-07-21 Not applicable No public exploit Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16402 Critical 2026-07-21 Not applicable No public exploit Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16401 High 2026-07-21 Not applicable No public exploit Privilege escalation in the Data Loss Prevention component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16400 High 2026-07-21 Not applicable No public exploit Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16399 High 2026-07-21 Not applicable No public exploit Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16398 High 2026-07-21 Not applicable No public exploit Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16397 Medium 2026-07-21 Not applicable No public exploit Clickjacking issue in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 153.
CVE-2026-16396 High 2026-07-21 Not applicable No public exploit Privilege escalation in WebExtensions. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16395 Critical 2026-07-21 Not applicable No public exploit Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16394 Critical 2026-07-21 Not applicable No public exploit Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16393 Critical 2026-07-21 Not applicable No public exploit Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16392 Critical 2026-07-21 Not applicable No public exploit JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16391 High 2026-07-21 Not applicable No public exploit Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16390 Critical 2026-07-21 Not applicable No public exploit Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16389 Critical 2026-07-21 Not applicable No public exploit Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16388 Critical 2026-07-21 Not applicable No public exploit Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16387 Critical 2026-07-21 Not applicable No public exploit Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16386 High 2026-07-21 Not applicable No public exploit Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16385 High 2026-07-21 Not applicable No public exploit Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16384 High 2026-07-21 Not applicable No public exploit Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16383 Critical 2026-07-21 Not applicable No public exploit Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16382 Critical 2026-07-21 Not applicable No public exploit Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16381 Critical 2026-07-21 Not applicable No public exploit Same-origin policy bypass in the Networking: DNS component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16380 Critical 2026-07-21 Not applicable No public exploit Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16379 High 2026-07-21 Not applicable No public exploit Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16378 High 2026-07-21 Not applicable No public exploit Other issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16377 Critical 2026-07-21 Not applicable No public exploit Mitigation bypass in the PDF Viewer component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16376 High 2026-07-21 Not applicable No public exploit Denial-of-service in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16375 Critical 2026-07-21 Not applicable No public exploit Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16374 High 2026-07-21 Not applicable No public exploit Information disclosure in the Framework component in DevTools. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16373 High 2026-07-21 Not applicable No public exploit Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153.
CVE-2026-16372 High 2026-07-21 Not applicable No public exploit Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16371 High 2026-07-21 Not applicable No public exploit Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, Thunderbird 140.13, Firefox ESR 140.15, and Thunderbird 140.15.
CVE-2026-16370 Critical 2026-07-21 Not applicable No public exploit Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16369 Critical 2026-07-21 Not applicable No public exploit Integer overflow in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16368 Critical 2026-07-21 Not applicable No public exploit Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16367 Critical 2026-07-21 Not applicable No public exploit Sandbox escape due to invalid pointer in the Disability Access APIs component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16366 High 2026-07-21 Not applicable No public exploit Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16365 High 2026-07-21 Not applicable No public exploit Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 153, Thunderbird 153, Firefox ESR 140.15, and Thunderbird 140.15.
‹ prev page 3 of 40 next ›