Where
AND
-Infinity
0
Severity
1

Security Vulnerabilities fixed in Firefox for iOS 155.1

First published (updated )
Advisory
MFSA2026-89
Severity
1

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1.

First published (updated )
Severity
1

Mitigation bypass in the Data Loss Prevention component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1.

First published (updated )
Severity
1

Information disclosure in the Networking: WebSockets component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13.

First published (updated )
Severity
1

Security Vulnerabilities fixed in Firefox for iOS 152.4

First published (updated )
Advisory
MFSA2026-66
Severity
1

Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 152 and Firefox ESR 140.12.

First published (updated )
Severity
1

Denial-of-service in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, and Firefox ESR 115.37.

First published (updated )
Severity
1

Security Vulnerabilities fixed in Firefox for iOS 151.1

First published (updated )
Advisory
MFSA2026-52
Severity
1

Spoofing issue in the Form Autofill component. This vulnerability was fixed in Firefox 151 and Firefox ESR 140.11.

First published (updated )
Severity
1

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Firefox ESR 140.11.

First published (updated )
Severity
1

Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151 and Firefox ESR 140.11.

First published (updated )
Severity
1

Privilege escalation in the Security component. This vulnerability was fixed in Firefox 151 and Firefox ESR 140.11.

First published (updated )
Severity
1

Incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.

First published (updated )
Severity
1

Security Vulnerabilities fixed in Firefox ESR 115.34.1

First published (updated )
Advisory
MFSA2026-26
Severity
1

Spoofing issue in Thunderbird. This vulnerability affects Thunderbird < 149 and Thunderbird < 140.9.

First published (updated )
Severity
1

Incorrect boundary conditions in the Graphics: Text component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.

First published (updated )
Severity
1

Undefined behavior in the WebRTC: Signaling component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.

First published (updated )
Severity
1

Mitigation bypass in the Networking: Cache component. This vulnerability affects Firefox < 148 and Firefox ESR < 140.8.

First published (updated )
Severity
1

Same-origin policy bypass in the Networking: JAR component. This vulnerability affects Firefox < 148 and Firefox ESR < 140.8.

First published (updated )
Severity
1

Spoofing issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability affects Firefox < 147 and Firefox ESR < 140.7.

First published (updated )
Severity
1

Security Vulnerabilities fixed in Firefox for iOS 144.0

First published (updated )
Advisory
MFSA2025-97
Severity
1

Spoofing issue in Firefox. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, and Firefox ESR < 115.30.

First published (updated )
Severity
3.4
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N

Spoofing issue in Firefox. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, and Firefox ESR < 115.30.

1 / 2
Source: Red Hat
First published (updated )
Severity
1

This vulnerability affects Firefox < 143 and Firefox ESR < 140.3.

First published (updated )
Severity
1

'Denial-of-service due to out-of-memory in the Graphics: WebRender component.' This vulnerability affects Firefox < 142, Firefox ESR < 140.2, Thunderbird < 142, and Thunderbird < 140.2.

First published (updated )
Severity
1
Null Pointer Dereference

The JavaScript engine did not handle closed generators correctly and it was possible to resume them leading to a nullptr deref. This vulnerability affects Firefox < 141, Firefox ESR < 115.26, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1.

First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203