Search Results (4071 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-109747 1 Mozilla 1 Firefox 2026-10-19 7.3 High
Other issue in the Address Bar component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
CVE-2026-109754 1 Mozilla 1 Firefox 2026-10-19 8.1 High
Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109759 1 Mozilla 2 Firefox, Thunderbird 2026-10-19 8.1 High
Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109731 1 Mozilla 1 Firefox 2026-10-19 5.4 Medium
Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109744 1 Mozilla 1 Firefox 2026-10-19 8.1 High
Other issue in the DOM: File component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109720 1 Mozilla 1 Firefox 2026-10-19 7.1 High
JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109740 1 Mozilla 1 Firefox 2026-10-19 9.6 Critical
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109760 1 Mozilla 1 Firefox 2026-10-19 8.1 High
Mitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109736 1 Mozilla 1 Firefox 2026-10-19 8.1 High
Frame poisoning in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109734 1 Mozilla 1 Firefox 2026-10-19 8.1 High
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109712 1 Mozilla 1 Firefox 2026-10-17 7.1 High
Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-103500 1 Mozilla 1 Thunderbird 2026-10-17 6.3 Medium
An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size. This vulnerability was fixed in Thunderbird 157, Thunderbird 140.17, and Thunderbird 153.4.
CVE-2026-109774 1 Mozilla 1 Firefox 2026-10-17 N/A
Invalid pointer, undefined behavior in the DOM: Notifications component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
CVE-2026-109763 1 Mozilla 2 Firefox, Thunderbird 2026-10-17 N/A
Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109716 1 Mozilla 2 Firefox, Thunderbird 2026-10-17 8.1 High
Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109722 1 Mozilla 1 Firefox 2026-10-17 8.1 High
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109715 1 Mozilla 1 Firefox 2026-10-17 8.1 High
Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109743 1 Mozilla 1 Firefox 2026-10-17 8.8 High
Privilege escalation in the Panning and Zooming component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109757 1 Mozilla 1 Firefox 2026-10-17 8.3 High
Sandbox escape due to race condition in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109782 1 Mozilla 2 Firefox, Thunderbird 2026-10-17 N/A
Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5.