firefox

17 results · Clear filters · Feed

• Critical 9.2
  CVE-2026-111497 Exploited Public exploit EPSS 83%

  Out-of-Bounds Write in Google Brotli Decoder

  A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause …

  Google Brotli firefox open-webui Debian Ubuntu Azure Linux Alpine Wolfi PyPI Go Hex
  Oct 22, 2026

  KEV Oct 27, 2026
• Medium 5.4
  CVE-2026-84118 Public exploit

  Use-after-free in the JavaScript: GC component

  Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Sep 1, 2026
• Critical 9.6
  CVE-2026-12295 Public exploit

  Sandbox escape in the DOM: Navigation component

  Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• Medium 4.3
  CVE-2026-10702 Public exploit

  JIT miscompilation in the JavaScript Engine: JIT component

  JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 151.0.3.

  Mozilla Firefox thunderbird mozjs38 Browsers Ubuntu Wolfi
  Jun 2, 2026
• High 8.8
  CVE-2026-8389 Public exploit

  JIT miscompilation in the JavaScript Engine: JIT component

  JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3.

  Mozilla Firefox thunderbird mozjs38 Browsers Ubuntu Wolfi
  May 12, 2026
• Medium 6.5
  CVE-2026-8388 Public exploit

  Incorrect boundary conditions in the JavaScript Engine: JIT component

  Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  May 12, 2026
• Medium 6.5
  CVE-2026-6770 Public exploit

  Other issue in the Storage: IndexedDB component

  Other issue in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Apr 21, 2026
• Medium 5.3
  CVE-2026-6765 Public exploit

  Information disclosure in the Form Autofill component

  Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Apr 21, 2026
• Critical 9.6
  CVE-2026-4692 Public exploit

  Sandbox escape in the Responsive Design Mode component

  Sandbox escape in the Responsive Design Mode component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• Critical 9.8
  CVE-2026-2796 Public exploit

  JIT miscompilation in the JavaScript: WebAssembly component

  JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2026-2766 Public exploit

  Use-after-free in the JavaScript Engine: JIT component

  Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2026-2764 Public exploit

  JIT miscompilation, use-after-free in the JavaScript Engine: JIT component

  JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2026-2763 Public exploit

  Use-after-free in the JavaScript Engine component

  Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• High 7.3
  CVE-2025-14325 Public exploit

  JIT miscompilation in the JavaScript Engine: JIT component

  JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Dec 9, 2025
• Critical 9.8
  CVE-2025-14321 Public exploit

  Use-after-free in the WebRTC: Signaling component

  Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Dec 9, 2025
• Critical 9.8
  CVE-2024-9680 Exploited · Ransomware Public exploit EPSS 23%

  An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timel…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine Wolfi
  Oct 9, 2024

  KEV Oct 15, 2024
• Critical 9.8
  CVE-2024-8381 Public exploit

  A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Sep 3, 2024