Skip to content
OpenAdvisories

Summary

Ein Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Firefox ESR und Thunderbird ausnutzen, um seine Privilegien zu erhöhen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Spoofing- oder Clickjacking-Angriffe durchzuführen oder Denial-of-Service-Zustände herbeizuführen.

Product

Firefox ist ein Open Source Web Browser.
ESR ist die Variante mit verlängertem Support.
Thunderbird ist ein Open Source E-Mail Client.

Vulnerabilities 58

  • Critical 10.0

    Sandbox escape in the Remote Settings Client component

    Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Thunderbird 154, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 140.15, and Thunderbird 153.2.

  • Critical 9.8
    CVE-2026-74936 Public exploit

    Use-after-free in the JavaScript: WebAssembly component

    Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  • Critical 9.8

    Use-after-free in the Graphics: Text component

    Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  • Critical 9.8
    CVE-2026-74943 Public exploit

    Use-after-free in the Graphics: ImageLib component

    Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  • Critical 9.8

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  • Critical 9.8

    Integer overflow in the Graphics component

    Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  • Critical 9.8

    Mitigation bypass in the Add-ons Manager component

    Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

  • Critical 9.8

    Privilege escalation in the Enterprise Policies component

    Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

  • Critical 9.8

    Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154

    Internally found bugs present in Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited.…

  • Critical 9.8

    Internally found bugs fixed in Firefox ESR 153.1 and Firefox 154

    Internally found bugs present in Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability …

  • Critical 9.8

    Internally found bugs fixed in Firefox 154

    Internally found bugs present in Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 1…

  • Critical 9.8

    Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154

    Internally found bugs present in Firefox ESR 115.38, Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could …

  • Critical 9.1

    Mitigation bypass in the JavaScript: GC component

    Mitigation bypass in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

  • Critical 9.1

    Same-origin policy bypass in the DOM: Service Workers component

    Same-origin policy bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

  • Critical 9.1

    Mitigation bypass in the Storage: Cache API component

    Mitigation bypass in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  • Critical 9.1

    Side-channel in the Web Audio component

    Side-channel in the Web Audio component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

  • Critical 9.1

    Site isolation issue in the CSS Parsing and Computation component

    Site isolation issue in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

  • High 8.8

    Privilege escalation in the DOM: Networking component

    Privilege escalation in the DOM: Networking component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  • High 8.8

    Use-after-free in the JavaScript: GC component

    Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

  • High 8.8
    CVE-2026-74939 Public exploit

    Privilege escalation in the DOM: Navigation component

    Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  • High 8.8

    Privilege escalation in the Graphics: CanvasWebGL component

    Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  • High 8.8

    Privilege escalation in the Remote Settings Client component

    Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  • High 8.8

    Information disclosure due to incorrect boundary conditions in the Graphics: CanvasWebGL component

    Information disclosure due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 15…

  • High 8.8

    Privilege escalation due to invalid pointer in the Graphics component

    Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

  • High 8.8

    Use-after-free in the Graphics: Canvas2D component

    Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  • High 8.8

    Privilege escalation in the Downloads API component

    Privilege escalation in the Downloads API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

  • High 8.8

    Privilege escalation in the Application Update component

    Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 154, Thunderbird 154, Firefox ESR 153.2, and Thunderbird 153.2.

  • High 8.8

    Privilege escalation in the Networking: Cookies component

    Privilege escalation in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  • High 8.8

    Privilege escalation in the Request Handling component

    Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

  • High 8.8

    Privilege escalation in the Shell Integration component

    Privilege escalation in the Shell Integration component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  • High 8.8

    Race condition, use-after-free in the Layout: Text and Fonts component

    Race condition, use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  • High 8.1

    Mitigation bypass in the Safe Browsing component

    Mitigation bypass in the Safe Browsing component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  • High 8.1

    Site isolation issue in the WebExtensions component

    Site isolation issue in the WebExtensions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  • High 8.1

    Site isolation issue in the Networking: Cookies component

    Site isolation issue in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  • High 8.1

    Clickjacking issue in the Widget component

    Clickjacking issue in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

  • High 8.1

    Site isolation issue in the Audio/Video: Web Codecs component

    Site isolation issue in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

  • High 8.1

    Mitigation bypass in the Data Loss Prevention component

    Mitigation bypass in the Data Loss Prevention component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  • High 7.5

    Site isolation issue in the Graphics: CanvasWebGL component

    Site isolation issue in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  • High 7.5

    Information disclosure due to side-channel in the Storage: Cache API component

    Information disclosure due to side-channel in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

  • High 7.5

    Information disclosure in the WebRTC component

    Information disclosure in the WebRTC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

  • High 7.5

    Information disclosure in the Form Autofill component

    Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

  • High 7.5

    Integer overflow in the Graphics component

    Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

  • High 7.5

    Denial-of-service in the Widget component

    Denial-of-service in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

  • Medium 6.8

    Race condition in the JavaScript Engine component

    Race condition in the JavaScript Engine component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

  • Medium 6.5
    CVE-2026-74945 Public exploit

    Information disclosure in the Graphics: Text component

    Information disclosure in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  • Medium 6.5

    Information disclosure in the Graphics component

    Information disclosure in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  • Medium 6.5

    Clickjacking issue in Firefox for Android

    Clickjacking issue in Firefox for Android. This vulnerability was fixed in Firefox 154.

  • Medium 6.5

    JIT miscompilation in the JavaScript Engine: JIT component

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  • Medium 6.5

    Clickjacking issue in the Downloads component in Firefox for Android

    Clickjacking issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.

  • Medium 5.4

    Same-origin policy bypass in the Networking: Cookies component

    Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  • Medium 5.4

    Same-origin policy bypass in the Audio/Video: Playback component

    Same-origin policy bypass in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  • Medium 5.4

    Site isolation issue in the Graphics: WebRender component

    Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

  • Medium 5.4
    CVE-2026-74970 Public exploit

    Site isolation issue in the Graphics component

    Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

  • Medium 5.4

    Same-origin policy bypass in the Graphics: ImageLib component

    Same-origin policy bypass in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  • Medium 5.4

    Spoofing issue in the Downloads component in Firefox for Android

    Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.

  • Medium 4.3

    Information disclosure in the DOM: UI Events & Focus Handling component

    Information disclosure in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  • Medium 4.3

    Information disclosure in the DOM: Push Subscriptions component

    Information disclosure in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  • Medium 4.2

    Race condition, use-after-free in the Graphics component

    Race condition, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

Revision history

  1. #32

    Neue Updates von Oracle Linux aufgenommen

  2. #31

    Neue Updates von Oracle Linux aufgenommen

  3. #30

    Neue Updates von openSUSE aufgenommen

  4. #29

    Neue Updates von Red Hat aufgenommen

  5. #28

    Neue Updates von Red Hat aufgenommen

  6. #27

    Neue Updates von Red Hat aufgenommen

  7. #26

    Neue Updates von Red Hat aufgenommen

  8. #25

    Neue Updates von Oracle Linux und Rocky Enterprise Software Foundation aufgenommen

  9. #24

    Neue Updates von Rocky Enterprise Software Foundation und Red Hat aufgenommen

  10. #23

    Neue Updates von Oracle Linux aufgenommen

  11. #22

    Neue Updates von Red Hat aufgenommen

  12. #21

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

  13. #20

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

  14. #19

    Neue Updates von Red Hat aufgenommen

  15. #18

    Neue Updates von SUSE aufgenommen

  16. #17

    Neue Updates von openSUSE und Oracle Linux aufgenommen

  17. #16

    Neue Updates von SUSE und Red Hat aufgenommen

  18. #15

    Neue Updates von Oracle Linux aufgenommen

  19. #14

    Neue Updates von Red Hat aufgenommen

  20. #13

    Neue Updates von SUSE, Rocky Enterprise Software Foundation, Red Hat und Oracle Linux aufgenommen

  21. #12

    Neue Updates von Red Hat aufgenommen

  22. #11

    Neue Updates von Red Hat aufgenommen

  23. #10

    Neue Updates von openSUSE und Debian aufgenommen

  24. #9

    Neue Updates von Debian aufgenommen

  25. #8

    Neue Updates von IGEL, openSUSE und Debian aufgenommen

References