Search Results (4026 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-109724 1 Mozilla 1 Firefox 2026-10-13 5.4 Medium
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109723 1 Mozilla 1 Firefox 2026-10-13 N/A
Integer overflow in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109720 1 Mozilla 1 Firefox 2026-10-13 N/A
JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109717 1 Mozilla 1 Firefox 2026-10-13 5.4 Medium
Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109707 1 Mozilla 1 Firefox 2026-10-13 9.6 Critical
Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109705 1 Mozilla 1 Firefox 2026-10-13 9.6 Critical
Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109753 1 Mozilla 1 Firefox 2026-10-13 N/A
Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-106016 1 Mozilla 1 Firefox 2026-10-13 9.8 Critical
Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1 and Thunderbird 158.
CVE-2026-109755 1 Mozilla 1 Firefox 2026-10-13 N/A
Sandbox escape in the DOM: Content Processes component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
CVE-2026-109750 1 Mozilla 1 Firefox 2026-10-13 N/A
Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
CVE-2026-109747 1 Mozilla 1 Firefox 2026-10-13 N/A
Other issue in the Address Bar component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
CVE-2026-109746 1 Mozilla 1 Firefox 2026-10-13 N/A
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
CVE-2026-109714 1 Mozilla 1 Firefox 2026-10-13 N/A
Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
CVE-2026-100766 1 Mozilla 2 Firefox, Thunderbird 2026-10-13 4.3 Medium
Information disclosure in the Networking: JAR component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100821 1 Mozilla 2 Firefox, Thunderbird 2026-10-13 4.7 Medium
Site isolation issue in the Panning and Zooming component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100822 1 Mozilla 2 Firefox, Thunderbird 2026-10-13 5.4 Medium
Spoofing issue in the Networking: HTTP component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100824 1 Mozilla 2 Firefox, Thunderbird 2026-10-13 8.8 High
Privilege escalation in the Places component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100825 1 Mozilla 2 Firefox, Thunderbird 2026-10-13 8.8 High
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100826 1 Mozilla 2 Firefox, Thunderbird 2026-10-13 6.5 Medium
Denial-of-service in the Storage: StorageManager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100828 1 Mozilla 2 Firefox, Thunderbird 2026-10-13 9.6 Critical
Mitigation bypass in the Bookmarks & History component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.