Mozilla Firefox

• CVE-2026-92017 High 8.8 Privilege escalation in the DOM: Service Workers component 0.2%
• CVE-2026-92016 High 8.8 Use-after-free in the Disability Access APIs component 0.3%
• CVE-2026-92015 High 8.8 Privilege escalation in the WebExtensions component 0.3%
• CVE-2026-92014 High 8.8 Privilege escalation due to incorrect boundary conditions in the Graphics component 0.2%
• CVE-2026-92013 High 8.8 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component 0.3%
• CVE-2026-92012 High 8.8 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component 0.3%
• CVE-2026-92011 High 8.8 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component 0.3%
• CVE-2026-92010 High 8.8 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component 0.3%
• CVE-2026-92009 High 8.8 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component 0.3%
• CVE-2026-92008 High 8.8 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component 0.3%
• CVE-2026-92007 High 8.8 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component 0.3%
• CVE-2026-92006 High 8.8 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component 0.3%
• CVE-2026-92005 Medium 5.3 Use-after-free in the Audio/Video: Web Codecs component 0.4%
• CVE-2026-84144 High 7.5 Internally found bugs fixed in Thunderbird 155 and Thunderbird ESR 153.2 0.4%
• CVE-2026-84143 Critical 9.8 Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15 0.4%
• CVE-2026-84142 Critical 9.8 Internally found bugs fixed in Thunderbird 155 0.6%
• CVE-2026-84141 Critical 9.8 Integer overflow in the Graphics: ImageLib component 0.3%
• CVE-2026-84140 Critical 9.8 Site isolation issue in the DOM: Navigation component 0.2%
• CVE-2026-84139 Critical 9.8 Clickjacking issue in the DOM: Events component 0.3%
• CVE-2026-84138 High 7.5 Denial-of-service in the PDF Viewer component 0.4%
• CVE-2026-84137 Critical 9.8 Spoofing issue in the DOM: Core & HTML component 0.1%
• CVE-2026-84136 Critical 9.8 Other issue in the DOM: Navigation component 0.2%
• CVE-2026-84135 Critical 9.8 Other issue in Firefox Focus for Android 0.4%
• CVE-2026-84134 Critical 9.8 Other issue in the Profile Backup component 0.6%
• CVE-2026-84133 Critical 9.8 Site isolation issue in the DOM: Push Subscriptions component 0.2%
• CVE-2026-84132 High 7.5 Information disclosure in the Networking: HTTP component 0.3%
• CVE-2026-84130 High 7.5 Information disclosure in the Graphics: WebGPU component 0.4%
• CVE-2026-84129 Critical 9.8 Site isolation issue in the DOM: Navigation component 0.2%
• CVE-2026-84128 High 8.8 Privilege escalation in the WebDriver BiDi component 0.4%
• CVE-2026-84127 Medium 4.3 Information disclosure in the WebExtensions component in Firefox for Android 0.3%
• CVE-2026-84126 Medium 4.3 Incorrect boundary conditions in the Layout: Grid component 0.3%
• CVE-2026-84125 Medium 5.4 Use-after-free in the DOM: Core & HTML component 0.3%
• CVE-2026-84124 Medium 5.4 Use-after-free in the DOM: Core & HTML component 0.2%
• CVE-2026-84123 High 8.8 Privilege escalation due to use-after-free in the Graphics: WebGPU component 0.4%
• CVE-2026-84122 Medium 5.4 Use-after-free in the Audio/Video component 0.2%
• CVE-2026-84118 Medium 5.4 Use-after-free in the JavaScript: GC component 0.3%
• CVE-2026-84117 High 8.8 Privilege escalation in Firefox for Android 0.3%
• CVE-2026-84145 High 7.5 Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15 0.4%
• CVE-2026-84131 High 8.8 Privilege escalation due to invalid pointer in the Graphics component 0.3%
• CVE-2026-84121 Critical 9.6 Sandbox escape due to use-after-free in the DOM: Security component 0.3%
• CVE-2026-84120 Medium 5.4 Use-after-free in the Audio/Video component 0.2%
• CVE-2026-84119 Critical 9.6 Sandbox escape due to use-after-free in the DOM: Navigation component 0.3%
• CVE-2026-74989 Critical 9.8 Internally found bugs fixed in Firefox 154 0.6%
• CVE-2026-74988 Critical 9.8 Internally found bugs fixed in Firefox ESR 153.1 and Firefox 154 0.6%
• CVE-2026-74986 Critical 9.1 Site isolation issue in the CSS Parsing and Computation component 0.6%
• CVE-2026-74985 Critical 9.8 Privilege escalation in the Enterprise Policies component 0.5%
• CVE-2026-74984 Medium 6.8 Race condition in the JavaScript Engine component 0.3%
• CVE-2026-74982 High 7.5 Denial-of-service in the Widget component 0.5%
• CVE-2026-74981 High 8.1 Site isolation issue in the Audio/Video: Web Codecs component 0.2%
• CVE-2026-74980 Medium 6.5 Clickjacking issue in the Downloads component in Firefox for Android 0.3%