Package · Wolfi

firefox

662 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

Medium 5.4

CVE-2026-84118 Public exploit

Use-after-free in the JavaScript: GC component

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi

Sep 1, 2026
Medium 4.3

CVE-2026-10702 Public exploit

JIT miscompilation in the JavaScript Engine: JIT component

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 151.0.3.

Mozilla Firefox thunderbird mozjs38 Browsers Ubuntu Wolfi

Jun 2, 2026
Medium 6.5

CVE-2026-8388 Public exploit

Incorrect boundary conditions in the JavaScript Engine: JIT component

Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi

May 12, 2026
Medium 6.5

CVE-2026-6770 Public exploit

Other issue in the Storage: IndexedDB component

Other issue in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi

Apr 21, 2026
Medium 5.3

CVE-2026-6765 Public exploit

Information disclosure in the Form Autofill component

Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi

Apr 21, 2026