firefox

10 results · Clear filters · Feed

• Critical 9.2
  CVE-2026-111497 Exploited Public exploit EPSS 83%

  Out-of-Bounds Write in Google Brotli Decoder

  A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause …

  Google Brotli firefox open-webui Debian Ubuntu Azure Linux Alpine Wolfi PyPI Go Hex
  Oct 22, 2026

  KEV Oct 27, 2026
• Critical 9.6
  CVE-2026-12295 Public exploit

  Sandbox escape in the DOM: Navigation component

  Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• Critical 9.6
  CVE-2026-4692 Public exploit

  Sandbox escape in the Responsive Design Mode component

  Sandbox escape in the Responsive Design Mode component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• Critical 9.8
  CVE-2026-2796 Public exploit

  JIT miscompilation in the JavaScript: WebAssembly component

  JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2026-2766 Public exploit

  Use-after-free in the JavaScript Engine: JIT component

  Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2026-2764 Public exploit

  JIT miscompilation, use-after-free in the JavaScript Engine: JIT component

  JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2026-2763 Public exploit

  Use-after-free in the JavaScript Engine component

  Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2025-14321 Public exploit

  Use-after-free in the WebRTC: Signaling component

  Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Dec 9, 2025
• Critical 9.8
  CVE-2024-9680 Exploited · Ransomware Public exploit EPSS 23%

  An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timel…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine Wolfi
  Oct 9, 2024

  KEV Oct 15, 2024
• Critical 9.8
  CVE-2024-8381 Public exploit

  A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Sep 3, 2024