Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how mozilla compares to other vendors in security performance

View Risk Score →

Software

mozilla firefox
2018
mozilla thunderbird
1456
mozilla firefox esr
1014
mozilla seamonkey
707
mozilla mozilla
106
mozilla focus
52
mozilla thunderbird esr
47
mozilla firefox mobile android
43
mozilla firefox android
37
mozilla nss esr
35
mozilla firefox iphone os
31
mozilla network security services
28
mozilla mozilla suite
27
mozilla firefox mobile
20
mozilla firefox mobile iphone os
20
mozilla firefox os
14
mozilla focus android
14
mozilla firefox esr 140
12
mozilla firefox esr 140.14
12
mozilla firefox esr 153.1
12
mozilla firefox esr 115
10
mozilla firefox focus iphone os
9
mozilla firefox for ios
9
mozilla firefox for android
7
mozilla bugzilla
6
mozilla firefox and thunderbird
6
mozilla vpn
6
mozilla bleach
5
mozilla firefox esr 153
5
mozilla firefox focus
5
mozilla nss
5
mozilla bonsai
4
mozilla camino
4
mozilla firefox esr 115.39
4
mozilla firefox esr 140.12
4
mozilla firefox esr 140.13
4
mozilla firefox focus android
4
mozilla hubs cloud reticulum
4
mozilla firefox esr 153.3
3
mozilla common voice
2
mozilla firefox 156
2
mozilla firefox esr 115.37
2
mozilla firefox esr 115.38
2
mozilla firefox esr 140.16
2
mozilla focus for ios
2
mozilla gecko
2
mozilla geckodriver
2
mozilla hubs cloud
2
mozilla klar
2
mozilla mozilla vpn (1360) (android)
2

Mozilla Thunderbird26 vulnerabilities

Risk 33
Severity
7

Security Vulnerabilities fixed in Thunderbird 153.3

First published (updated )
Advisory
MFSA2026-96

Privilege escalation in the WebExtensions component

Risk 56
Severity
8.8
EPSS
0.27%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

First published (updated )
CVE-2026-92015

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Risk 56
Severity
8.8
EPSS
0.27%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

First published (updated )
CVE-2026-92013

Privilege escalation in the DOM: Service Workers component

Risk 56
Severity
8.8
EPSS
0.25%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

First published (updated )
CVE-2026-92017

Sandbox escape in the DOM: Core & HTML component

Risk 58
Severity
9.6
EPSS
0.16%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Sandbox escape in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

First published (updated )
CVE-2026-92018

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Risk 56
Severity
8.8
EPSS
0.34%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

First published (updated )
CVE-2026-92006

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Risk 56
Severity
8.8
EPSS
0.27%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

First published (updated )
CVE-2026-92010

Use-after-free in the Audio/Video: Web Codecs component

Risk 19
Severity
5.3
EPSS
0.16%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

First published (updated )
CVE-2026-92005

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Risk 56
Severity
8.8
EPSS
0.27%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

First published (updated )
CVE-2026-92007

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Risk 56
Severity
8.8
EPSS
0.27%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

First published (updated )
CVE-2026-92009

Use-after-free in the Disability Access APIs component

Risk 56
Severity
8.8
EPSS
0.16%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

First published (updated )
CVE-2026-92016

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Risk 56
Severity
8.8
EPSS
0.27%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

First published (updated )
CVE-2026-92012

Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component

Risk 56
Severity
8.8
EPSS
0.27%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

First published (updated )
CVE-2026-92020

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Risk 56
Severity
8.8
EPSS
0.27%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

First published (updated )
CVE-2026-92011

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Risk 56
Severity
8.8
EPSS
0.27%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

First published (updated )
CVE-2026-92008

Use-after-free in the DOM: HTML Parser component

Risk 56
Severity
8.8
EPSS
0.16%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

First published (updated )
CVE-2026-92022

Race condition in the DOM: Content Processes component

Risk 51
Severity
7.5
EPSS
0.15%
Race Condition
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Race condition in the DOM: Content Processes component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.

First published (updated )
CVE-2026-92042

Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component

Risk 24
Severity
5.4
EPSS
0.16%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

First published (updated )
CVE-2026-92030

Sandbox escape due to invalid pointer in the Graphics component

Risk 58
Severity
9.6
EPSS
0.16%
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Sandbox escape due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

First published (updated )
CVE-2026-92032

Sandbox escape due to incorrect boundary conditions in the Graphics component

Risk 58
Severity
9.6
EPSS
0.15%
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.

First published (updated )
CVE-2026-92035

Use-after-free in the XML component

Risk 56
Severity
8.8
EPSS
0.16%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the XML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

First published (updated )
CVE-2026-92023

Information disclosure in the Graphics: ImageLib component

Risk 27
Severity
6.5
EPSS
0.16%
Infoleak
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

First published (updated )
CVE-2026-92031

Mitigation bypass in the Remote Settings Client component

Risk 47
Severity
9.1
EPSS
0.16%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.

First published (updated )
CVE-2026-92038

Use-after-free in the DOM: Streams component

Risk 56
Severity
8.8
EPSS
0.16%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

First published (updated )
CVE-2026-92027

Use-after-free in the Graphics component

Risk 56
Severity
8.8
EPSS
0.15%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.

First published (updated )
CVE-2026-92046

Use-after-free in the SVG component

Risk 56
Severity
8.8
EPSS
0.16%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

First published (updated )
CVE-2026-92024

Use-after-free in the SVG component

Risk 56
Severity
8.8
EPSS
0.16%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

First published (updated )
CVE-2026-92029

Mozilla Firefox ESRUse-after-free in the JavaScript Engine: JIT component

Risk 56
Severity
8.8
EPSS
0.15%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16.

First published (updated )
CVE-2026-92021

Firefox ESRPrivilege escalation due to incorrect boundary conditions in the Graphics component

Risk 56
Severity
8.8
EPSS
0.26%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16.

First published (updated )
CVE-2026-92014

Mozilla FirefoxUse-after-free in the JavaScript: WebAssembly component

Risk 56
Severity
8.8
EPSS
0.15%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.

First published (updated )
CVE-2026-92040

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203