Mozilla Firefox

• CVE-2026-8092 High 8.1 Memory safety bugs fixed in Thunderbird ESR 140.10.2 and Thunderbird 150.0.2 0.4%
• CVE-2026-8091 Critical 9.8 Incorrect boundary conditions in the Audio/Video: Playback component 0.5%
• CVE-2026-8090 High 7.3 Use-after-free in the DOM: Networking component 0.3%
• CVE-2026-7321 Critical 9.6 Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component 0.3%
• CVE-2026-7324 High 7.3 Memory safety bugs fixed in Thunderbird 150.0.1 0.3%
• CVE-2026-7323 High 7.3 Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 0.4%
• CVE-2026-7322 High 7.3 Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 0.3%
• CVE-2026-7320 High 7.5 Information disclosure due to incorrect boundary conditions in the Audio/Video component 0.3%
• CVE-2026-6786 High 7.5 Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 0.5%
• CVE-2026-6785 High 7.5 Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 0.5%
• CVE-2026-6784 High 7.5 Memory safety bugs fixed in Firefox 150 and Thunderbird 150 0.4%
• CVE-2026-6783 Medium 5.3 Incorrect boundary conditions, integer overflow in the Audio/Video: Playback component 0.2%
• CVE-2026-6782 High 7.5 Information disclosure in the IP Protection component 0.3%
• CVE-2026-6781 High 7.5 Denial-of-service in the Audio/Video: Playback component 0.3%
• CVE-2026-6780 High 7.5 Denial-of-service in the Audio/Video: Playback component 0.3%
• CVE-2026-6779 Medium 5.3 Other issue in the JavaScript Engine component 0.2%
• CVE-2026-6778 Medium 5.3 Invalid pointer in the Audio/Video: Playback component 0.3%
• CVE-2026-6777 Medium 5.3 Other issue in the Networking: DNS component 0.2%
• CVE-2026-6776 High 7.8 Incorrect boundary conditions in the WebRTC: Networking component 0.1%
• CVE-2026-6775 Medium 5.3 Incorrect boundary conditions in the WebRTC component 0.2%
• CVE-2026-6774 Medium 5.4 Mitigation bypass in the DOM: Security component 0.2%
• CVE-2026-6773 High 7.5 Denial-of-service due to integer overflow in the Graphics: WebGPU component 0.3%
• CVE-2026-6772 High 7.5 Incorrect boundary conditions in the Libraries component in NSS 0.4%
• CVE-2026-6771 Critical 9.8 Mitigation bypass in the DOM: Security component 0.3%
• CVE-2026-6770 Medium 6.5 Other issue in the Storage: IndexedDB component 3.9%
• CVE-2026-6769 High 8.8 Privilege escalation in the Debugger component 0.2%
• CVE-2026-6768 Critical 9.8 Mitigation bypass in the Networking: Cookies component 0.3%
• CVE-2026-6767 Medium 5.3 Other issue in the Libraries component in NSS 0.2%
• CVE-2026-6766 High 7.5 Incorrect boundary conditions in the Libraries component in NSS 0.3%
• CVE-2026-6765 Medium 5.3 Information disclosure in the Form Autofill component 0.2%
• CVE-2026-6764 Medium 6.5 Incorrect boundary conditions in the DOM: Device Interfaces component 0.2%
• CVE-2026-6763 Medium 6.5 Mitigation bypass in the File Handling component 0.2%
• CVE-2026-6762 Medium 6.3 Spoofing issue in the DOM: Core & HTML component 0.2%
• CVE-2026-6761 High 8.8 Privilege escalation in the Networking component 0.2%
• CVE-2026-6760 Critical 9.8 Mitigation bypass in the Networking: Cookies component 0.3%
• CVE-2026-6759 High 7.5 Use-after-free in the Widget: Cocoa component 0.4%
• CVE-2026-6758 High 7.5 Use-after-free in the JavaScript: WebAssembly component 0.8%
• CVE-2026-6757 Medium 6.3 Invalid pointer in the JavaScript: WebAssembly component 0.5%
• CVE-2026-6756 High 7.5 Mitigation bypass in Firefox for Android 0.3%
• CVE-2026-6755 Medium 6.5 Mitigation bypass in the DOM: postMessage component 0.3%
• CVE-2026-6754 High 7.5 Use-after-free in the JavaScript Engine component 0.4%
• CVE-2026-6753 High 7.3 Incorrect boundary conditions in the WebRTC component 0.3%
• CVE-2026-6752 High 7.3 Incorrect boundary conditions in the WebRTC component 0.3%
• CVE-2026-6751 High 7.3 Uninitialized memory in the Audio/Video: Web Codecs component 0.3%
• CVE-2026-6750 High 8.8 Privilege escalation in the Graphics: WebRender component 0.5%
• CVE-2026-6749 High 7.5 Information disclosure due to uninitialized memory in the Graphics: Canvas2D component 0.4%
• CVE-2026-6748 Critical 9.8 Uninitialized memory in the Audio/Video: Web Codecs component 0.4%
• CVE-2026-6747 High 7.5 Use-after-free in the WebRTC component 0.4%
• CVE-2026-6746 High 7.5 Use-after-free in the DOM: Core & HTML component 0.9%
• CVE-2026-5735 High 8.1 Memory safety bugs fixed in Firefox 149.0.2 and Thunderbird 149.0.2 0.3%