Mozilla Firefox

• CVE-2026-18809 Medium 6.5 Information disclosure in Firefox for Android and Firefox Focus for Android 0.4%
• CVE-2026-16361 Critical 9.8 Memory safety bugs fixed in Thunderbird ESR 140.13 0.6%
• CVE-2026-16360 Critical 9.8 Memory safety bugs fixed in Thunderbird ESR 140.13 and Thunderbird 153 0.5%
• CVE-2026-16412 Critical 9.8 Memory safety bugs fixed in Thunderbird ESR 140.13 and Thunderbird 153 0.6%
• CVE-2026-16411 Critical 9.8 Memory safety bugs fixed in Thunderbird 153 0.5%
• CVE-2026-16410 Critical 9.8 JIT miscompilation in the JavaScript Engine: JIT component 0.6%
• CVE-2026-16409 High 7.5 Invalid pointer in the Security: PSM component 0.5%
• CVE-2026-16408 Critical 9.8 Integer overflow in the Audio/Video: Playback component 0.6%
• CVE-2026-16407 Critical 9.8 Mitigation bypass in the DOM: Service Workers component 0.5%
• CVE-2026-16406 Critical 9.1 Mitigation bypass in the Networking component 0.4%
• CVE-2026-16405 High 7.5 Information disclosure in the Networking: WebSockets component 0.4%
• CVE-2026-16404 High 7.4 Spoofing issue in Firefox for Android 0.3%
• CVE-2026-16403 Medium 6.5 Spoofing issue in the Address Bar component 0.4%
• CVE-2026-16402 Critical 9.8 Integer overflow in the Graphics: ImageLib component 0.6%
• CVE-2026-16401 High 8.8 Privilege escalation in the Data Loss Prevention component 0.4%
• CVE-2026-16400 High 7.5 Information disclosure in the DOM: Security component 0.4%
• CVE-2026-16399 High 7.5 Site isolation issue in the DOM: Navigation component 0.2%
• CVE-2026-16398 High 7.5 Site isolation issue in the Graphics component 0.2%
• CVE-2026-16397 Medium 6.5 Clickjacking issue in the WebExtensions component in Firefox for Android 0.3%
• CVE-2026-16396 High 8.8 Privilege escalation in WebExtensions 0.5%
• CVE-2026-16395 Critical 9.8 Integer overflow in the Audio/Video component 0.6%
• CVE-2026-16394 Critical 9.1 Mitigation bypass in the DOM: Security component 0.4%
• CVE-2026-16359 Critical 9.1 Incorrect boundary conditions in the Audio/Video: GMP component 0.5%
• CVE-2026-16393 Critical 9.1 Incorrect boundary conditions in the Graphics: WebGPU component 0.5%
• CVE-2026-16392 Critical 9.1 JIT miscompilation in the JavaScript Engine: JIT component 0.5%
• CVE-2026-16391 High 7.5 Information disclosure in the Storage: IndexedDB component 0.4%
• CVE-2026-16390 Critical 9.1 Mitigation bypass in the Enterprise Policies component 0.4%
• CVE-2026-16389 Critical 9.8 Incorrect boundary conditions, integer overflow in the Libraries component in NSS 0.6%
• CVE-2026-16388 Critical 9.8 Sandbox escape in the DOM: Networking component 0.6%
• CVE-2026-16387 Critical 9.8 Site isolation issue in the Networking component 0.3%
• CVE-2026-16386 High 7.5 Information disclosure due to uninitialized memory in the Graphics: WebGPU component 0.4%
• CVE-2026-16385 High 7.5 Information disclosure due to uninitialized memory in the Graphics: WebGPU component 0.4%
• CVE-2026-16384 High 7.5 Information disclosure due to uninitialized memory in the Graphics: WebGPU component 0.4%
• CVE-2026-16383 Critical 9.8 Mitigation bypass in the DOM: Networking component 0.6%
• CVE-2026-16382 Critical 9.8 Mitigation bypass in the DOM: Service Workers component 0.6%
• CVE-2026-16381 Critical 9.1 Same-origin policy bypass in the Networking: DNS component 0.2%
• CVE-2026-16380 Critical 9.1 Mitigation bypass in the Networking component 0.3%
• CVE-2026-16358 Critical 9.8 Site isolation issue in the Graphics: WebRender component 0.3%
• CVE-2026-16379 High 8.8 Privilege escalation in the DOM: Content Processes component 0.4%
• CVE-2026-16378 High 7.5 Other issue in the DOM: Copy & Paste and Drag & Drop component 0.4%
• CVE-2026-16377 Critical 9.8 Mitigation bypass in the PDF Viewer component 0.6%
• CVE-2026-16376 High 7.5 Denial-of-service in the Graphics: WebGPU component 0.5%
• CVE-2026-16375 Critical 9.8 Site isolation issue in the Networking: HTTP component 0.3%
• CVE-2026-16374 High 7.5 Information disclosure in the Framework component in DevTools 0.4%
• CVE-2026-16373 High 7.5 Information disclosure in the Privacy component in Firefox for Android 0.4%
• CVE-2026-16372 High 8.8 Privilege escalation in the DOM: Content Processes component 0.4%
• CVE-2026-16371 High 8.8 Privilege escalation in the DOM: Navigation component 0.4%
• CVE-2026-16370 Critical 9.1 Mitigation bypass in the DOM: Networking component 0.4%
• CVE-2026-16357 Critical 9.8 Incorrect boundary conditions in the Graphics component 0.9%
• CVE-2026-16356 Critical 9.8 Sandbox escape due to use-after-free in the Disability Access APIs component 0.6%