Where
AND
AND
-Infinity
0

Trending

Last week
Last month
Last year

Mozilla Firefox ESRSandbox escape due to incorrect boundary conditions in the Networking component

Risk 80
Severity
9.6
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

First published (updated )
CVE-2026-12297

Mozilla Firefox ESRSandbox escape in the DOM: Workers component

Risk 80
Severity
9.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

First published (updated )
CVE-2026-12294

Mozilla Firefox ESRSandbox escape in the DOM: Navigation component

Risk 80
Severity
9.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

First published (updated )
CVE-2026-12295

Mozilla FirefoxUse-after-free in the Layout: Text and Fonts component

Risk 61
Severity
9.8
EPSS
0.03%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Use-after-free in the Layout: Text and Fonts component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.

1 / 2
Source: Red Hat
First published (updated )
CVE-2026-4696

Mozilla FirefoxUse-after-free in the CSS Parsing and Computation component

Risk 61
Severity
9.8
EPSS
0.03%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Use-after-free in the CSS Parsing and Computation component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.

1 / 2
Source: Red Hat
First published (updated )
CVE-2026-4691

Mozilla FirefoxSandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component

Risk 58
Severity
9.6
EPSS
0.02%
Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.

1 / 2
Source: Red Hat
First published (updated )
CVE-2026-4690

Mozilla FirefoxJIT miscompilation in the JavaScript Engine: JIT component

Risk 61
Severity
9.8
EPSS
0.03%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.

1 / 2
Source: Red Hat
First published (updated )
CVE-2026-4698

Mozilla FirefoxSandbox escape in the Responsive Design Mode component

Risk 61
Severity
10
EPSS
0.03%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Sandbox escape in the Responsive Design Mode component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.

1 / 2
Source: Red Hat
First published (updated )
CVE-2026-4692

Mozilla FirefoxSandbox escape due to incorrect boundary conditions in the Telemetry component

Risk 58
Severity
9.6
EPSS
0.02%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Sandbox escape due to incorrect boundary conditions in the Telemetry component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.

1 / 2
Source: Red Hat
First published (updated )
CVE-2026-4687

Mozilla FirefoxMemory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149

Risk 61
Severity
9.8
EPSS
0.02%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.

1 / 3
Source: Mozilla
First published (updated )
CVE-2026-4721

Mozilla FirefoxSandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component

Risk 61
Severity
10
EPSS
0.03%
Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.

1 / 2
Source: Red Hat
First published (updated )
CVE-2026-4689

Mozilla FirefoxMitigation bypass in the DOM: HTML Parser component

Risk 61
Severity
9.8
EPSS
0.06%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Mitigation bypass in the DOM: HTML Parser component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8.

1 / 2
Source: Red Hat
First published (updated )
CVE-2026-2775

Mozilla FirefoxPrivilege escalation in the Messaging System component

Risk 61
Severity
9.8
EPSS
0.06%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Privilege escalation in the Messaging System component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8.

1 / 2
Source: Red Hat
First published (updated )
CVE-2026-2777

Mozilla FirefoxIncorrect boundary conditions in the WebRTC: Audio/Video component

Risk 61
Severity
9.8
EPSS
0.06%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Incorrect boundary conditions in the WebRTC: Audio/Video component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8.

1 / 2
Source: Red Hat
First published (updated )
CVE-2026-2757

Mozilla FirefoxUndefined behavior in the DOM: Core & HTML component

Risk 61
Severity
9.8
EPSS
0.06%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Undefined behavior in the DOM: Core & HTML component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8.

1 / 2
Source: Red Hat
First published (updated )
CVE-2026-2771

Mozilla FirefoxIncorrect boundary conditions in the Web Audio component

Risk 61
Severity
9.8
EPSS
0.06%
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Incorrect boundary conditions in the Web Audio component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8.

1 / 2
Source: Red Hat
First published (updated )
CVE-2026-2773

Mozilla FirefoxMemory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148

Risk 61
Severity
9.8
EPSS
0.07%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Memory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.

1 / 3
Source: Mozilla
First published (updated )
CVE-2026-2793

Mozilla FirefoxIncorrect boundary conditions in the Graphics: ImageLib component

Risk 61
Severity
9.8
EPSS
0.06%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Incorrect boundary conditions in the Graphics: ImageLib component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8.

1 / 2
Source: Red Hat
First published (updated )
CVE-2026-2759

Mozilla FirefoxUse-after-free in the DOM: Bindings (WebIDL) component

Risk 61
Severity
9.8
EPSS
0.05%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8.

1 / 2
Source: Red Hat
First published (updated )
CVE-2026-2770

Mozilla FirefoxSandbox escape due to incorrect boundary conditions in the Telemetry component in External Software

Risk 61
Severity
10
EPSS
0.07%
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8.

1 / 2
Source: Red Hat
First published (updated )
CVE-2026-2776

Mozilla FirefoxJIT miscompilation, use-after-free in the JavaScript Engine: JIT component

Risk 61
Severity
9.8
EPSS
0.06%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8.

1 / 2
Source: Red Hat
First published (updated )
CVE-2026-2764

Mozilla FirefoxUse-after-free in the Graphics: ImageLib component

Risk 61
Severity
9.8
EPSS
0.05%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Use-after-free in the Graphics: ImageLib component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8.

1 / 2
Source: Red Hat
First published (updated )
CVE-2026-2789

Mozilla FirefoxSandbox escape in the Graphics: WebRender component

Risk 61
Severity
10
EPSS
0.13%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Sandbox escape in the Graphics: WebRender component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8.

1 / 2
Source: Red Hat
First published (updated )
CVE-2026-2761

Mozilla FirefoxSandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component

Risk 61
Severity
10
EPSS
0.07%
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8.

1 / 2
Source: Red Hat
First published (updated )
CVE-2026-2778

Mozilla FirefoxUse-after-free in the Audio/Video: Playback component

Risk 61
Severity
9.8
EPSS
0.05%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Use-after-free in the Audio/Video: Playback component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8.

1 / 2
Source: Red Hat
First published (updated )
CVE-2026-2772

Mozilla FirefoxUse-after-free in the JavaScript: GC component

Risk 61
Severity
9.8
EPSS
0.06%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Use-after-free in the JavaScript: GC component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8.

1 / 2
Source: Red Hat
First published (updated )
CVE-2026-2758

Mozilla FirefoxInteger overflow in the Audio/Video component

Risk 61
Severity
9.8
EPSS
0.05%
Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Integer overflow in the Audio/Video component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8.

1 / 2
Source: Red Hat
First published (updated )
CVE-2026-2774

Mozilla FirefoxSandbox escape due to incorrect boundary conditions in the Graphics: WebRender component

Risk 61
Severity
10
EPSS
0.07%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8.

1 / 2
Source: Red Hat
First published (updated )
CVE-2026-2760

Mozilla FirefoxUse-after-free in the JavaScript Engine component

Risk 61
Severity
9.8
EPSS
0.06%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Use-after-free in the JavaScript Engine component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8.

1 / 2
Source: Red Hat
First published (updated )
CVE-2026-2763

Mozilla FirefoxIncorrect boundary conditions in the Audio/Video: GMP component

Risk 61
Severity
9.8
EPSS
0.06%
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8.

1 / 2
Source: Red Hat
First published (updated )
CVE-2026-2788

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203