Mozilla Firefox

• CVE-2026-74979 Critical 9.8 Mitigation bypass in the Add-ons Manager component 0.3%
• CVE-2026-74978 High 8.1 Clickjacking issue in the Widget component 0.4%
• CVE-2026-74977 High 7.5 Integer overflow in the Graphics component 0.6%
• CVE-2026-74975 Medium 5.4 Spoofing issue in the Downloads component in Firefox for Android 0.2%
• CVE-2026-74970 Medium 5.4 Site isolation issue in the Graphics component 0.2%
• CVE-2026-74968 Medium 5.4 Site isolation issue in the Graphics: WebRender component 0.2%
• CVE-2026-74966 High 7.5 Information disclosure in the Form Autofill component 0.4%
• CVE-2026-74961 Critical 9.1 Side-channel in the Web Audio component 0.4%
• CVE-2026-74958 High 7.5 Information disclosure in the WebRTC component 0.5%
• CVE-2026-74956 Critical 9.1 Same-origin policy bypass in the DOM: Service Workers component 0.5%
• CVE-2026-74955 High 8.8 Privilege escalation in the Request Handling component 0.4%
• CVE-2026-74954 High 7.5 Information disclosure due to side-channel in the Storage: Cache API component 0.4%
• CVE-2026-74952 High 8.8 Privilege escalation in the Application Update component 0.4%
• CVE-2026-74951 Medium 6.5 Clickjacking issue in Firefox for Android 0.3%
• CVE-2026-74950 High 8.8 Privilege escalation in the Downloads API component 0.4%
• CVE-2026-74947 High 8.8 Privilege escalation due to invalid pointer in the Graphics component 0.4%
• CVE-2026-74938 Critical 9.1 Mitigation bypass in the JavaScript: GC component 0.4%
• CVE-2026-74937 High 8.8 Use-after-free in the JavaScript: GC component 0.4%
• CVE-2026-75874 Critical 10.0 Sandbox escape in the Remote Settings Client component 0.5%
• CVE-2026-74990 Critical 9.8 Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 0.7%
• CVE-2026-74987 Critical 9.8 Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 0.7%
• CVE-2026-74983 High 8.1 Mitigation bypass in the Data Loss Prevention component 0.4%
• CVE-2026-74976 Medium 6.5 JIT miscompilation in the JavaScript Engine: JIT component 0.4%
• CVE-2026-74974 Medium 5.4 Same-origin policy bypass in the Graphics: ImageLib component 0.2%
• CVE-2026-74973 Medium 4.2 Race condition, use-after-free in the Graphics component 0.2%
• CVE-2026-74972 Medium 4.3 Information disclosure in the DOM: Push Subscriptions component 0.3%
• CVE-2026-74971 Medium 4.3 Information disclosure in the DOM: UI Events & Focus Handling component 0.3%
• CVE-2026-74969 High 8.8 Race condition, use-after-free in the Layout: Text and Fonts component 0.5%
• CVE-2026-74967 Medium 5.4 Same-origin policy bypass in the Audio/Video: Playback component 0.2%
• CVE-2026-74965 High 8.8 Privilege escalation in the Shell Integration component 0.4%
• CVE-2026-74964 Critical 9.8 Integer overflow in the Graphics component 0.7%
• CVE-2026-74963 Medium 5.4 Same-origin policy bypass in the Networking: Cookies component 0.2%
• CVE-2026-74962 High 8.1 Site isolation issue in the Networking: Cookies component 0.2%
• CVE-2026-74960 High 8.1 Site isolation issue in the WebExtensions component 0.2%
• CVE-2026-74959 Critical 9.1 Mitigation bypass in the Storage: Cache API component 0.5%
• CVE-2026-74957 High 8.1 Mitigation bypass in the Safe Browsing component 0.4%
• CVE-2026-74953 High 8.8 Privilege escalation in the Networking: Cookies component 0.4%
• CVE-2026-74949 High 8.8 Use-after-free in the Graphics: Canvas2D component 0.5%
• CVE-2026-74948 Medium 6.5 Information disclosure in the Graphics component 0.4%
• CVE-2026-74946 High 8.8 Information disclosure due to incorrect boundary conditions in the Graphics: CanvasWebGL component 0.5%
• CVE-2026-74945 Medium 6.5 Information disclosure in the Graphics: Text component 0.4%
• CVE-2026-74944 Critical 9.8 Use-after-free in the DOM: Core & HTML component 0.6%
• CVE-2026-74943 Critical 9.8 Use-after-free in the Graphics: ImageLib component 0.6%
• CVE-2026-74942 High 8.8 Privilege escalation in the Remote Settings Client component 0.5%
• CVE-2026-74941 High 8.8 Privilege escalation in the Graphics: CanvasWebGL component 0.5%
• CVE-2026-74940 Critical 9.8 Use-after-free in the Graphics: Text component 0.6%
• CVE-2026-74939 High 8.8 Privilege escalation in the DOM: Navigation component 0.5%
• CVE-2026-74936 Critical 9.8 Use-after-free in the JavaScript: WebAssembly component 0.6%
• CVE-2026-74935 High 8.8 Privilege escalation in the DOM: Networking component 0.5%
• CVE-2026-74934 High 7.5 Site isolation issue in the Graphics: CanvasWebGL component 0.2%