Live · 98 sources · updated 17m ago

· 23:17 UTC

The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

Clear

362 matching records.

  1. 38
    CVE NVD

    Thunderbird allowed feed subscriptions to file: URLs that point to a network share.

    Thunderbird allowed feed subscriptions to file: URLs that point to a network share. If a user was tricked into subscribing to such a URL, Thunderbird connected to the attacker's server when fetching the feed. Windows then sent…

    Fix available CVE-2026-126134 Mozilla Identity
  2. 35
    CVE NVD

    Privilege escalation in Firefox for iOS.

    Privilege escalation in Firefox for iOS. This vulnerability was fixed in Firefox for iOS 160.0.

    CVSS 8.8 Fix available CVE-2026-121843 Mozilla Mobile OS
  3. 35
    CVE NVD

    Privilege escalation in the Reader View component in Firefox for iOS.

    Privilege escalation in the Reader View component in Firefox for iOS. This vulnerability was fixed in Firefox for iOS 160.0.

    CVSS 8.8 Fix available CVE-2026-121842 Mozilla Mobile OS
  4. 32
    CVE NVD

    For Exchange accounts using EWS or Microsoft Graph with OAuth2 authentication, Thunderbird sent the OAuth2 access token to the server even when the…

    For Exchange accounts using EWS or Microsoft Graph with OAuth2 authentication, Thunderbird sent the OAuth2 access token to the server even when the configured server URL used unencrypted HTTP. An attacker able to observe network…

    Fix available CVE-2026-126136 Mozilla Email
  5. 32
    CVE NVD

    If an attacker was able to perform a man-in-the-middle attack on an SMTP or POP3 server connection using STARTTLS, the attacker could inject server…

    If an attacker was able to perform a man-in-the-middle attack on an SMTP or POP3 server connection using STARTTLS, the attacker could inject server responses before the TLS handshake completed. Thunderbird would process these…

    Fix available CVE-2026-126135 Mozilla Email
  6. 32
    CVE NVD

    When a CalDAV or ICS calendar was accessed through an HTTP proxy that requested authentication, Thunderbird could answer the proxy with the calendar…

    When a CalDAV or ICS calendar was accessed through an HTTP proxy that requested authentication, Thunderbird could answer the proxy with the calendar server's username and password. This affected both setting up a new calendar and…

    Fix available CVE-2026-126133 Mozilla Email
  7. 32
    CVE NVD

    When a message was forwarded inline, edited as new, or had an attachment dragged into a compose window, a specially crafted link attachment (a…

    When a message was forwarded inline, edited as new, or had an attachment dragged into a compose window, a specially crafted link attachment (a .desktop file on Linux, or a .url or .lnk file on Windows) was replaced with the…

    Fix available CVE-2026-126132 Mozilla Email
  8. 31
    CVE NVD

    Other issue in the Media component in Firefox for Android.

    Other issue in the Media component in Firefox for Android. This vulnerability was fixed in Firefox 160.

    Fix available CVE-2026-124937 Mozilla Mobile OS
  9. 31
    CVE NVD

    Clickjacking issue in the Autofill component in Firefox for Android.

    Clickjacking issue in the Autofill component in Firefox for Android. This vulnerability was fixed in Firefox 160.

    Fix available CVE-2026-124911 Mozilla Mobile OS
  10. 26
    CVE NVD

    When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was valid base64.

    When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was valid base64. A malicious server could send a challenge that caused Thunderbird to include uninitialized heap…

    CVSS 5.3 Fix available CVE-2026-113868 Microsoft Mozilla Identity
  11. 25
    CVE NVD

    Use-after-free in the Audio/Video component.

    Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox ESR 115.45.

    Fix available CVE-2026-124952 Mozilla Browser
  12. 25
    CVE NVD

    Privilege escalation in the Nimbus Desktop Client component.

    Privilege escalation in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124951 Mozilla Browser
  13. 25
    CVE NVD

    Same-origin policy bypass in the CSS Parsing and Computation component.

    Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160.

    Fix available CVE-2026-124950 Mozilla Browser
  14. 25
    CVE NVD

    Other issue in the SVG component.

    Other issue in the SVG component. This vulnerability was fixed in Firefox 160.

    Fix available CVE-2026-124949 Mozilla Browser
  15. 25
    CVE NVD

    Incorrect boundary conditions, use-after-free in the Graphics component.

    Incorrect boundary conditions, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124948 Mozilla Browser
  16. 25
    CVE NVD

    Incorrect boundary conditions in the Graphics component.

    Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 160.

    Fix available CVE-2026-124947 Mozilla Browser
  17. 25
    CVE NVD

    Invalid pointer in the JavaScript Engine: JIT component.

    Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 160.

    Fix available CVE-2026-124946 Mozilla Browser
  18. 25
    CVE NVD

    Invalid pointer in the Layout: Text and Fonts component.

    Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160.

    Fix available CVE-2026-124945 Mozilla Browser
  19. 25
    CVE NVD

    Information disclosure in the Marionette component.

    Information disclosure in the Marionette component. This vulnerability was fixed in Firefox 160.

    Fix available CVE-2026-124944 Mozilla Browser
  20. 25
    CVE NVD

    Use-after-free in the Layout component.

    Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160.

    Fix available CVE-2026-124943 Mozilla Browser
  21. 25
    CVE NVD

    Invalid pointer in the DOM: Streams component.

    Invalid pointer in the DOM: Streams component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124942 Mozilla Browser
  22. 25
    CVE NVD

    Information disclosure in the Security: RLBox component.

    Information disclosure in the Security: RLBox component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124941 Mozilla Browser
  23. 25
    CVE NVD

    Mitigation bypass in the File Handling component.

    Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124940 Mozilla Browser
  24. 25
    CVE NVD

    JIT miscompilation in the JavaScript Engine: JIT component.

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124939 Mozilla Browser
  25. 25
    CVE NVD

    Mitigation bypass in the Add-ons Manager component.

    Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124938 Mozilla Browser
  26. 25
    CVE NVD

    Spoofing issue in the Address Bar component.

    Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 160.

    Fix available CVE-2026-124936 Mozilla Browser
  27. 25
    CVE NVD

    Undefined behavior in the WebRTC: Networking component.

    Undefined behavior in the WebRTC: Networking component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124935 Mozilla Browser
  28. 25
    CVE NVD

    Spoofing issue in the Security component.

    Spoofing issue in the Security component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124934 Mozilla Browser
  29. 25
    CVE NVD

    Sandbox escape in the Console component.

    Sandbox escape in the Console component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124933 Mozilla Browser
  30. 25
    CVE NVD

    Use-after-free in the Graphics component.

    Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124932 Mozilla Browser
  31. 25
    CVE NVD

    Same-origin policy bypass in the DOM: Core & HTML component.

    Same-origin policy bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124931 Mozilla Browser
  32. 25
    CVE NVD

    Information disclosure in the Address Bar component.

    Information disclosure in the Address Bar component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124930 Mozilla Browser
  33. 25
    CVE NVD

    Information disclosure in the Layout: Form Controls component.

    Information disclosure in the Layout: Form Controls component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124929 Mozilla Browser
  34. 25
    CVE NVD

    Mitigation bypass in the SVG component.

    Mitigation bypass in the SVG component. This vulnerability was fixed in Firefox 160.

    Fix available CVE-2026-124928 Mozilla Browser
  35. 25
    CVE NVD

    Site isolation issue in the Graphics: WebRender component.

    Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124927 Mozilla Browser
  36. 25
    CVE NVD

    Incorrect boundary conditions in the WebRTC component.

    Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124926 Mozilla Browser
  37. 25
    CVE NVD

    Information disclosure in the Layout component.

    Information disclosure in the Layout component. This vulnerability was fixed in Firefox 160.

    Fix available CVE-2026-124925 Mozilla Browser
  38. 25
    CVE NVD

    Incorrect boundary conditions in the Graphics: WebRender component.

    Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124924 Mozilla Browser
  39. 25
    CVE NVD

    Sandbox escape in the Agent component.

    Sandbox escape in the Agent component. This vulnerability was fixed in Firefox 160.

    Fix available CVE-2026-124923 Mozilla Browser
  40. 25
    CVE NVD

    Use-after-free in the CSS Transitions and Animations component.

    Use-after-free in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124922 Mozilla Browser
  41. 25
    CVE NVD

    Sandbox escape in the Graphics: WebGPU component.

    Sandbox escape in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160.

    Fix available CVE-2026-124921 Mozilla Browser
  42. 25
    CVE NVD

    Uninitialized memory in the Graphics: WebGPU component.

    Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160.

    Fix available CVE-2026-124920 Mozilla Browser
  43. 25
    CVE NVD

    Privilege escalation due to use-after-free in the WebRTC: Networking component.

    Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124919 Mozilla Browser
  44. 25
    CVE NVD

    Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component.

    Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124918 Mozilla Browser
  45. 25
    CVE NVD

    Sandbox escape due to use-after-free in the Widget: Gtk component.

    Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124917 Mozilla Browser
  46. 25
    CVE NVD

    Incorrect boundary conditions in the Graphics: WebGPU component.

    Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124915 Mozilla Browser
  47. 25
    CVE NVD

    Site isolation issue in the DOM: Navigation component.

    Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124914 Mozilla Browser
  48. 25
    CVE NVD

    Site isolation issue in the Networking component.

    Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124913 Mozilla Browser
  49. 25
    CVE NVD

    Spoofing issue in the DOM: Security component.

    Spoofing issue in the DOM: Security component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124912 Mozilla Browser
  50. 25
    CVE NVD

    Mitigation bypass in the WebExtensions component.

    Mitigation bypass in the WebExtensions component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124910 Mozilla Browser
  51. 25
    CVE NVD

    Information disclosure in the Private Browsing component.

    Information disclosure in the Private Browsing component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124909 Mozilla Browser
  52. 25
    CVE NVD

    Use-after-free in the CSS Parsing and Computation component.

    Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160.

    Fix available CVE-2026-124908 Mozilla Browser
  53. 25
    CVE NVD

    Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component.

    Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124907 Mozilla Browser
  54. 25
    CVE NVD

    Use-after-free in the Graphics: WebRender component.

    Use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124906 Mozilla Browser
  55. 25
    CVE NVD

    Sandbox escape in the DOM: Navigation component.

    Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

    Fix available CVE-2026-124905 Mozilla Browser
  56. 25
    CVE NVD

    Use-after-free in the SVG component.

    Use-after-free in the SVG component. This vulnerability was fixed in Firefox 160.

    Fix available CVE-2026-124904 Mozilla Browser
  57. 25
    CVE NVD

    Sandbox escape due to use-after-free in the IPC component.

    Sandbox escape due to use-after-free in the IPC component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

    Fix available CVE-2026-124903 Mozilla Browser
  58. 25
    CVE NVD

    Same-origin policy bypass due to race condition in the Audio/Video component.

    Same-origin policy bypass due to race condition in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

    Fix available CVE-2026-124902 Mozilla Browser
  59. 25
    CVE NVD

    Other issue in the Networking: JAR component.

    Other issue in the Networking: JAR component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

    Fix available CVE-2026-124901 Mozilla Browser
  60. 25
    CVE NVD

    Sandbox escape due to use-after-free in the DOM: Service Workers component.

    Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160.

    Fix available CVE-2026-124900 Mozilla Browser
  61. 25
    CVE NVD

    Use-after-free in the Layout: Text and Fonts component.

    Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

    Fix available CVE-2026-124899 Mozilla Browser
  62. 25
    CVE NVD

    Use-after-free in the DOM: Editor component.

    Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

    Fix available CVE-2026-124898 Mozilla Browser
  63. 25
    CVE NVD

    Use-after-free in the JavaScript: GC component.

    Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124897 Mozilla Browser
  64. 25
    CVE NVD

    Invalid pointer in the Layout: Text and Fonts component.

    Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124896 Mozilla Browser
  65. 25
    CVE NVD

    Use-after-free in the Storage: localStorage & sessionStorage component.

    Use-after-free in the Storage: localStorage & sessionStorage component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

    Fix available CVE-2026-124895 Mozilla Browser
  66. 25
    CVE NVD

    Use-after-free in the Networking: Cookies component.

    Use-after-free in the Networking: Cookies component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124894 Mozilla Browser
  67. 25
    CVE NVD

    Use-after-free in the DOM: Workers component.

    Use-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124893 Mozilla Browser
  68. 25
    CVE NVD

    Use-after-free in the JavaScript: GC component.

    Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124892 Mozilla Browser
  69. 25
    CVE NVD

    Incorrect boundary conditions in the DOM: Selection component.

    Incorrect boundary conditions in the DOM: Selection component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124891 Mozilla Browser
  70. 25
    CVE NVD

    Use-after-free in the DOM: Core & HTML component.

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

    Fix available CVE-2026-124890 Mozilla Browser
  71. 25
    CVE NVD

    Use-after-free in the CSS Parsing and Computation component.

    Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124889 Mozilla Browser
  72. 25
    CVE NVD

    Incorrect boundary conditions in the Layout: Text and Fonts component.

    Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124888 Mozilla Browser
  73. 25
    CVE NVD

    Incorrect boundary conditions in the Layout: Text and Fonts component.

    Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124887 Mozilla Browser
  74. 25
    CVE NVD

    Invalid pointer in the Layout: Text and Fonts component.

    Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124886 Mozilla Browser
  75. 25
    CVE NVD

    Use-after-free in the Graphics: Text component.

    Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

    Fix available CVE-2026-124885 Mozilla Browser
  76. 25
    CVE NVD

    Use-after-free in the JavaScript: GC component.

    Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124884 Mozilla Browser
  77. 25
    CVE NVD

    Use-after-free in the DOM: Core & HTML component.

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124883 Mozilla Browser
  78. 25
    CVE NVD

    Use-after-free in the CSS Parsing and Computation component.

    Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

    Fix available CVE-2026-124882 Mozilla Browser
  79. 25
    CVE NVD

    Use-after-free in the CSS Parsing and Computation component.

    Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

    Fix available CVE-2026-124881 Mozilla Browser
  80. 25
    CVE NVD

    Use-after-free in the DOM: Core & HTML component.

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

    Fix available CVE-2026-124880 Mozilla Browser
  81. 25
    CVE NVD

    Invalid pointer in the Networking: Cache component.

    Invalid pointer in the Networking: Cache component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124879 Mozilla Browser
  82. 25
    CVE NVD

    Use-after-free in the Layout: Positioned component.

    Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 160.

    Fix available CVE-2026-124878 Mozilla Browser
  83. 25
    CVE NVD

    Use-after-free in the Layout: Positioned component.

    Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

    Fix available CVE-2026-124877 Mozilla Browser
  84. 25
    CVE NVD

    Use-after-free in the CSS Parsing and Computation component.

    Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

    Fix available CVE-2026-124876 Mozilla Browser
  85. 25
    CVE NVD

    Incorrect boundary conditions in the DOM: CSS Object Model component.

    Incorrect boundary conditions in the DOM: CSS Object Model component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

    Fix available CVE-2026-124875 Mozilla Browser
  86. 25
    CVE NVD

    Same-origin policy bypass in the Networking: HTTP component.

    Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

    Fix available CVE-2026-124874 Mozilla Browser
  87. 25
    CVE NVD

    Invalid pointer in the DOM: Editor component.

    Invalid pointer in the DOM: Editor component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124873 Mozilla Browser
  88. 25
    CVE NVD

    Use-after-free in the Cycle Collector component.

    Use-after-free in the Cycle Collector component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

    Fix available CVE-2026-124872 Mozilla Browser
  89. 25
    CVE NVD

    Use-after-free in the DOM: HTML Parser component.

    Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160.

    Fix available CVE-2026-124871 Mozilla Browser
  90. 25
    CVE NVD

    Incorrect boundary conditions in the JavaScript: GC component.

    Incorrect boundary conditions in the JavaScript: GC component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124870 Mozilla Browser
  91. 25
    CVE NVD

    Use-after-free in the DOM: Core & HTML component.

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124869 Mozilla Browser
  92. 25
    CVE NVD

    Incorrect boundary conditions in the DOM: Core & HTML component.

    Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124868 Mozilla Browser
  93. 25
    CVE NVD

    Use-after-free in the DOM: Editor component.

    Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 160.

    Fix available CVE-2026-124867 Mozilla Browser
  94. 25
    CVE NVD

    Use-after-free in the Layout component.

    Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124866 Mozilla Browser
  95. 25
    CVE NVD

    Use-after-free in the Audio/Video component.

    Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

    Fix available CVE-2026-124865 Mozilla Browser
  96. 25
    CVE NVD

    Sandbox escape due to use-after-free in the DOM: Service Workers component.

    Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

    Fix available CVE-2026-124864 Mozilla Browser
  97. 25
    CVE NVD

    Use-after-free in the DOM: HTML Parser component.

    Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

    Fix available CVE-2026-124863 Mozilla Browser
  98. 25
    CVE NVD

    Use-after-free in the DOM: Core & HTML component.

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

    Fix available CVE-2026-124862 Mozilla Browser
  99. 25
    CVE NVD

    Sandbox escape due to use-after-free in the Audio/Video: cubeb component.

    Sandbox escape due to use-after-free in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

    Fix available CVE-2026-124861 Mozilla Browser
  100. 25
    CVE NVD

    Use-after-free in the Audio/Video component.

    Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

    Fix available CVE-2026-124860 Mozilla Browser

Reuse this view

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Mozilla&limit=100. RSS for this section: feed.xml.

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help