Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Mozilla Firefox ESRPrivilege escalation in the DLL Services component

Risk 86
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 159, Firefox ESR 153.6, Thunderbird 159, Thunderbird 153.6, Firefox 157, and Firefox ESR 140.17.

1 / 4
Source: Ubuntu
First published (updated )
CVE-2026-100801

Mozilla Firefox ESRSite isolation issue in the Panning and Zooming component

Risk 27
Severity
4.7
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Site isolation issue in the Panning and Zooming component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100821

Mozilla Firefox ESRUndefined behavior in the DOM: Streams component

Risk 64
Severity
8.1
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Undefined behavior in the DOM: Streams component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100771

Mozilla Firefox ESRUninitialized memory in the Storage: Quota Manager component

Risk 64
Severity
8.1
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Uninitialized memory in the Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100759

Mozilla Firefox ESRSandbox escape due to use-after-free in the DOM: Content Processes component

Risk 88
Severity
9.6
Use After Free
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100762

Mozilla Firefox ESRUse-after-free in the DOM: Core & HTML component

Risk 85
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100774

Mozilla Firefox ESRPrivilege escalation due to incorrect boundary conditions in the Graphics component

Risk 85
Severity
8.8
Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100782

Mozilla Firefox ESRSandbox escape in the Graphics component

Risk 88
Severity
9.6
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Sandbox escape in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100775

Mozilla Firefox ESRSandbox escape in the DOM: Navigation component

Risk 88
Severity
9.6
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100758

Mozilla Firefox ESRUse-after-free in the Networking: Cache component

Risk 85
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the Networking: Cache component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100767

Mozilla Firefox ESRSandbox escape due to use-after-free in the DOM: Core & HTML component

Risk 88
Severity
9.6
Use After Free
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100811

Mozilla Firefox ESRUse-after-free in the Storage: IndexedDB component

Risk 85
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100773

Mozilla Firefox ESRUse-after-free in the DOM: Core & HTML component

Risk 85
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100772

Mozilla Firefox ESRUse-after-free in the DOM: Core & HTML component

Risk 85
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100785

Mozilla Firefox ESRSandbox escape due to use-after-free in the Widget: Gtk component

Risk 88
Severity
9.6
Use After Free
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100818

Mozilla Firefox ESRSandbox escape due to use-after-free in the DOM: Core & HTML component

Risk 88
Severity
9.6
Use After Free
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100778

Mozilla FirefoxSandbox escape due to incorrect boundary conditions in the Graphics component

Risk 60
Severity
9.6
EPSS
0.15%
Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 156 and Firefox ESR 153.3.

1 / 2
Source: Red Hat
First published (updated )
CVE-2026-92035

Mozilla Firefox ESRUse-after-free in the JavaScript: WebAssembly component

Risk 85
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100769

Mozilla Firefox ESRUse-after-free in the Layout: Text and Fonts component

Risk 85
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100784

Mozilla Firefox ESRUninitialized memory in the Audio/Video component

Risk 24
Severity
4.3
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100783

Mozilla Firefox ESRInformation disclosure in the Networking: JAR component

Risk 24
Severity
4.3
Infoleak
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Information disclosure in the Networking: JAR component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100766

Mozilla Firefox ESRUse-after-free in the Widget component

Risk 85
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the Widget component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100757

Mozilla Firefox ESRPrivilege escalation in the Address Bar component

Risk 85
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100820

Mozilla Firefox ESRSandbox escape due to use-after-free in the DOM: Content Processes component

Risk 88
Severity
9.6
Use After Free
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100770

Mozilla Firefox ESRSandbox escape due to use-after-free in the Graphics component

Risk 88
Severity
9.6
Use After Free
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100786

Mozilla Firefox ESRUse-after-free in the JavaScript: WebAssembly component

Risk 85
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100776

Mozilla Firefox ESRUse-after-free in the Graphics: Canvas2D component

Risk 85
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100777

Mozilla Firefox ESRSandbox escape due to incorrect boundary conditions in the XPCOM component

Risk 88
Severity
9.6
Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100819

Mozilla Firefox ESRInformation disclosure in the Networking component

Risk 17
Severity
4.3
EPSS
0.21%
Infoleak
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Information disclosure in the Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

First published (updated )
CVE-2026-96869

Mozilla Firefox ESRIncorrect boundary conditions in the Audio/Video: Playback component

Risk 65
Severity
8.1
Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

First published (updated )
CVE-2026-100756

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203