Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Mozilla Firefox ESRPrivilege escalation in the DLL Services component

Risk 86
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 159, Firefox ESR 153.6, Thunderbird 159, Thunderbird 153.6, Firefox 157, and Firefox ESR 140.17.

1 / 4
Source: Ubuntu
First published (updated )
CVE-2026-100801

Mozilla FirefoxSandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component

Risk 57
Severity
7.3
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.

1 / 4
Source: Ubuntu
First published (updated )
CVE-2025-10528

Mozilla FirefoxInteger overflow in the SVG component

Risk 88
Severity
8.8
Integer Overflow
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Integer overflow in the SVG component. This vulnerability affects Firefox < 143, Firefox ESR < 115.28, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3.

1 / 4
Source: OSV
First published (updated )
CVE-2025-10533

Mozilla FirefoxInformation disclosure in the Networking: Cache component

Risk 40
Severity
6.2
Infoleak
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.

1 / 4
Source: Ubuntu
First published (updated )
CVE-2025-10536

Mozilla FirefoxIncorrect boundary conditions in the JavaScript: GC component

Risk 44
Severity
6.5
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Incorrect boundary conditions in the JavaScript: GC component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.

1 / 4
Source: Ubuntu
First published (updated )
CVE-2025-10532

Mozilla FirefoxSandbox escape due to use-after-free in the Graphics: Canvas2D component

Risk 56
Severity
7.1
Use After Free
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.

1 / 4
Source: Ubuntu
First published (updated )
CVE-2025-10527

Mozilla Firefox ESRInternally found bugs fixed in Thunderbird ESR 140.14, Thunderbird ESR 153.1 and Thunderbird 154

Risk 95
Severity
9.8
Buffer Overflow
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Internally found bugs present in Firefox ESR 115.38, Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited.

1 / 4
Source: Mozilla
First published (updated )
CVE-2026-74990

Mozilla FirefoxRace condition, use-after-free in the Layout: Text and Fonts component

Risk 84
Severity
8.8
Use After Free, Race Condition
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Race condition, use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

1 / 3
Source: MITRE
First published (updated )
CVE-2026-74969

Mozilla FirefoxUse-after-free in the Graphics: Canvas2D component

Risk 85
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1.

1 / 2
Source: Red Hat
First published (updated )
CVE-2026-74949

Mozilla Firefox ESRInternally found bugs fixed in Thunderbird ESR 140.14, Thunderbird ESR 153.1 and Thunderbird 154

Risk 95
Severity
9.8
Buffer Overflow
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Internally found bugs present in Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited.

1 / 4
Source: Mozilla
First published (updated )
CVE-2026-74987

Mozilla FirefoxInformation disclosure due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Risk 85
Severity
8.8
Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Information disclosure due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

1 / 3
Source: MITRE
First published (updated )
CVE-2026-74946

Mozilla Firefox ESRSite isolation issue in the Panning and Zooming component

Risk 27
Severity
4.7
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Site isolation issue in the Panning and Zooming component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100821

Mozilla Firefox ESRUninitialized memory in the Storage: Quota Manager component

Risk 64
Severity
8.1
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Uninitialized memory in the Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100759

Mozilla Firefox ESRSandbox escape due to use-after-free in the DOM: Content Processes component

Risk 88
Severity
9.6
Use After Free
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100762

Mozilla Firefox ESRPrivilege escalation due to incorrect boundary conditions in the Graphics component

Risk 85
Severity
8.8
Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100782

Mozilla Firefox ESRSandbox escape in the DOM: Navigation component

Risk 88
Severity
9.6
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100758

Mozilla Firefox ESRSandbox escape due to use-after-free in the DOM: Core & HTML component

Risk 88
Severity
9.6
Use After Free
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100811

Mozilla Firefox ESRUse-after-free in the DOM: Core & HTML component

Risk 85
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100785

Mozilla Firefox ESRSandbox escape due to use-after-free in the Widget: Gtk component

Risk 88
Severity
9.6
Use After Free
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100818

Mozilla FirefoxSandbox escape due to incorrect boundary conditions in the Graphics component

Risk 60
Severity
9.6
EPSS
0.15%
Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 156 and Firefox ESR 153.3.

1 / 2
Source: Red Hat
First published (updated )
CVE-2026-92035

Mozilla Firefox ESRUse-after-free in the Layout: Text and Fonts component

Risk 85
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100784

Mozilla Firefox ESRUse-after-free in the Graphics: Canvas2D component

Risk 85
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100832

Mozilla Firefox ESRUninitialized memory in the Audio/Video component

Risk 24
Severity
4.3
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100783

Mozilla Firefox ESRInformation disclosure in the Networking: JAR component

Risk 24
Severity
4.3
Infoleak
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Information disclosure in the Networking: JAR component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100766

Mozilla Firefox ESRUse-after-free in the Widget component

Risk 85
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the Widget component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100757

Mozilla Firefox ESRPrivilege escalation in the Address Bar component

Risk 85
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100820

Mozilla Firefox ESRSandbox escape due to use-after-free in the Graphics component

Risk 88
Severity
9.6
Use After Free
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100786

Mozilla Firefox ESRSandbox escape due to incorrect boundary conditions in the XPCOM component

Risk 88
Severity
9.6
Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100819

Mozilla Firefox ESRInformation disclosure in the Networking component

Risk 17
Severity
4.3
EPSS
0.21%
Infoleak
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Information disclosure in the Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

First published (updated )
CVE-2026-96869

Mozilla FirefoxHeap buffer overflow in libvpx

Risk 60
Severity
8.8
EPSS
0.04%
Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Heap buffer overflow in libvpx. This vulnerability affects Firefox < 147.0.4, Firefox ESR < 140.7.1, and Firefox ESR < 115.32.1.

1 / 2
Source: Red Hat
First published (updated )
CVE-2026-2447

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203