Mozilla Firefox

• CVE-2026-12298 Medium 5.4 Memory safety bug fixed in Thunderbird 152 0.3%
• CVE-2026-12297 Critical 9.6 Sandbox escape due to incorrect boundary conditions in the Networking component 0.4%
• CVE-2026-12296 Critical 9.6 Sandbox escape in the Security: Process Sandboxing component 0.4%
• CVE-2026-12295 Critical 9.6 Sandbox escape in the DOM: Navigation component 0.4%
• CVE-2026-12294 Critical 9.6 Sandbox escape in the DOM: Workers component 0.4%
• CVE-2026-12293 Critical 9.8 Use-after-free in the Graphics: WebGPU component 0.3%
• CVE-2026-12292 High 8.1 Incorrect boundary conditions in the Web Audio component 0.5%
• CVE-2026-12291 High 8.8 Use-after-free in the Networking: HTTP component 0.4%
• CVE-2026-12290 High 8.1 Memory safety bug fixed in Thunderbird 152 0.4%
• CVE-2026-12289 High 8.8 Privilege escalation in the Graphics: WebRender component 0.4%
• CVE-2026-10702 Medium 4.3 JIT miscompilation in the JavaScript Engine: JIT component 0.9%
• CVE-2026-10701 High 7.5 Incorrect boundary conditions in the Graphics: Text component 0.3%
• CVE-2026-8975 High 8.8 Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151 0.5%
• CVE-2026-8974 High 8.8 Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151 0.4%
• CVE-2026-8973 High 8.8 Memory safety bugs fixed in Thunderbird 151 0.4%
• CVE-2026-8972 High 8.8 Privilege escalation in the WebRTC: Audio/Video component 0.3%
• CVE-2026-8971 Medium 6.5 Same-origin policy bypass in the Networking: JAR component 0.2%
• CVE-2026-8970 High 8.8 Privilege escalation in the Security component 0.3%
• CVE-2026-8969 High 8.1 Mitigation bypass in the DOM: Security component 0.3%
• CVE-2026-8968 High 7.5 Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component 0.4%
• CVE-2026-8967 High 7.5 Information disclosure in the Graphics: WebGPU component 0.3%
• CVE-2026-8966 High 7.5 Information disclosure in the IP Protection component 0.3%
• CVE-2026-8965 High 7.5 Information disclosure in the DOM: Security component 0.3%
• CVE-2026-8964 High 7.5 Spoofing issue in the Popup Blocker component 0.3%
• CVE-2026-8963 High 7.5 Spoofing issue in the Web Speech component 0.3%
• CVE-2026-8962 High 8.1 Mitigation bypass in the DOM: Security component 0.4%
• CVE-2026-8961 Medium 6.5 Spoofing issue in the Form Autofill component 0.3%
• CVE-2026-8960 High 7.5 Spoofing issue in WebExtensions 0.4%
• CVE-2026-8959 Critical 9.6 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component 0.4%
• CVE-2026-8958 High 8.6 Information disclosure, sandbox escape in the Security: Process Sandboxing component 0.3%
• CVE-2026-8957 High 8.8 Privilege escalation in the Enterprise Policies component 0.4%
• CVE-2026-8956 Critical 9.8 Integer overflow in the Networking: JAR component 0.6%
• CVE-2026-8955 High 8.8 Privilege escalation in the DOM: Workers component 0.4%
• CVE-2026-8954 High 7.5 Incorrect boundary conditions, integer overflow in the Audio/Video component 0.4%
• CVE-2026-8953 Critical 9.6 Sandbox escape due to use-after-free in the Disability Access APIs component 0.5%
• CVE-2026-8952 High 8.8 Privilege escalation in the Application Update component 0.4%
• CVE-2026-8951 Medium 6.5 Spoofing issue in the Toolbar component in Firefox for Android 0.3%
• CVE-2026-8950 Critical 9.3 Same-origin policy bypass in the Networking: HTTP component 0.2%
• CVE-2026-8949 High 7.5 Integer overflow in the Widget: Win32 component 0.6%
• CVE-2026-8948 Critical 9.1 Same-origin policy bypass in the DOM: Networking component 0.4%
• CVE-2026-8947 High 7.3 Use-after-free in the DOM: Bindings (WebIDL) component 0.4%
• CVE-2026-8946 High 7.5 Incorrect boundary conditions in the Audio/Video: Web Codecs component 0.6%
• CVE-2026-8945 High 7.5 Sandbox escape in Firefox and Firefox Focus for Android 0.4%
• CVE-2026-8401 Critical 9.8 Sandbox escape in the Profile Backup component 0.3%
• CVE-2026-8391 Medium 5.3 Other issue in the JavaScript Engine component 0.3%
• CVE-2026-8390 High 7.3 Use-after-free in the JavaScript: WebAssembly component 0.5%
• CVE-2026-8389 High 8.8 JIT miscompilation in the JavaScript Engine: JIT component 0.4%
• CVE-2026-8388 Medium 6.5 Incorrect boundary conditions in the JavaScript Engine: JIT component 0.2%
• CVE-2026-8094 Critical 9.8 Other issue in the WebRTC component 0.4%
• CVE-2026-8093 High 8.1 Memory safety bugs fixed in Thunderbird 150.0.2 0.3%