Where
-Infinity
0

Trending

Last week
Last month
Last year

oss-secOn the issue of MIME handlers that execute arbitrary code (e.g. Wine)

First published (updated )
https://seclists.org/oss-sec/2026/q2/632

oss-secOn the issue of MIME handlers that execute arbitrary code (e.g. Wine)

First published (updated )
https://seclists.org/oss-sec/2026/q2/621

oss-secOn the issue of MIME handlers that execute arbitrary code (e.g. Wine)

First published (updated )
https://seclists.org/oss-sec/2026/q2/610

Mozilla ThunderbirdSame-origin policy bypass in the Networking: HTTP component

Risk 47
Severity
9.3
EPSS
0.02%
First published (updated )
CVE-2026-8950

Mozilla ThunderbirdSpoofing issue in the Form Autofill component

Risk 27
Severity
6.5
EPSS
0.03%
First published (updated )
CVE-2026-8961
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Mozilla FirefoxSandbox escape in Firefox and Firefox Focus for Android

Risk 51
Severity
7.5
EPSS
0.05%
First published (updated )
CVE-2026-8945

Mozilla ThunderbirdMitigation bypass in the DOM: Security component

Risk 42
Severity
8.1
EPSS
0.04%
First published (updated )
CVE-2026-8962

Mozilla FirefoxIncorrect boundary conditions in the Audio/Video: Web Codecs component

Risk 31
Severity
7.5
EPSS
0.04%
First published (updated )
CVE-2026-8946

Mozilla ThunderbirdDenial-of-service due to invalid pointer in the Audio/Video: Web Codecs component

Risk 31
Severity
7.5
EPSS
0.05%
First published (updated )
CVE-2026-8968

Mozilla FirefoxSpoofing issue in the Toolbar component in Firefox for Android

Risk 27
Severity
6.5
EPSS
0.03%
First published (updated )
CVE-2026-8951
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Mozilla FirefoxInformation disclosure in the IP Protection component

Risk 31
Severity
7.5
EPSS
0.03%
First published (updated )
CVE-2026-8966

Mozilla ThunderbirdSandbox escape due to incorrect boundary conditions in the Widget: Win32 component

Risk 58
Severity
9.6
EPSS
0.08%
First published (updated )
CVE-2026-8959

Mozilla ThunderbirdPrivilege escalation in the Security component

Risk 56
Severity
8.8
EPSS
0.04%
First published (updated )
CVE-2026-8970

Mozilla FirefoxSpoofing issue in WebExtensions

Risk 31
Severity
7.5
EPSS
0.03%
First published (updated )
CVE-2026-8960

Mozilla FirefoxUse-after-free in the DOM: Bindings (WebIDL) component

Risk 36
Severity
7.3
EPSS
0.05%
First published (updated )
CVE-2026-8947
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Mozilla FirefoxIncorrect boundary conditions, integer overflow in the Audio/Video component

Risk 31
Severity
7.5
EPSS
0.03%
First published (updated )
CVE-2026-8954

Mozilla FirefoxInformation disclosure in the Graphics: WebGPU component

Risk 31
Severity
7.5
EPSS
0.03%
First published (updated )
CVE-2026-8967

Mozilla FirefoxPrivilege escalation in the Application Update component

Risk 56
Severity
8.8
EPSS
0.04%
First published (updated )
CVE-2026-8952

Mozilla FirefoxSandbox escape due to use-after-free in the Disability Access APIs component

Risk 58
Severity
9.6
EPSS
0.04%
First published (updated )
CVE-2026-8953

Mozilla FirefoxSame-origin policy bypass in the Networking: JAR component

Risk 28
Severity
6.5
EPSS
0.01%
First published (updated )
CVE-2026-8971
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Mozilla ThunderbirdPrivilege escalation in the DOM: Workers component

Risk 56
Severity
8.8
EPSS
0.04%
First published (updated )
CVE-2026-8955

Mozilla ThunderbirdMemory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151

Risk 56
Severity
8.8
EPSS
0.04%
First published (updated )
CVE-2026-8974

Mozilla ThunderbirdInformation disclosure, sandbox escape in the Security: Process Sandboxing component

Risk 34
Severity
8.6
EPSS
0.04%
First published (updated )
CVE-2026-8958

Mozilla FirefoxMemory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151

Risk 56
Severity
8.8
EPSS
0.04%
First published (updated )
CVE-2026-8975

Mozilla FirefoxSame-origin policy bypass in the DOM: Networking component

Risk 47
Severity
9.1
EPSS
0.03%
First published (updated )
CVE-2026-8948
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Mozilla ThunderbirdPrivilege escalation in the Enterprise Policies component

Risk 56
Severity
8.8
EPSS
0.04%
First published (updated )
CVE-2026-8957

Mozilla FirefoxInformation disclosure in the DOM: Security component

Risk 31
Severity
7.5
EPSS
0.03%
First published (updated )
CVE-2026-8965

Mozilla FirefoxMemory safety bugs fixed in Thunderbird 151

Risk 56
Severity
8.8
EPSS
0.04%
First published (updated )
CVE-2026-8973

Mozilla FirefoxPrivilege escalation in the WebRTC: Audio/Video component

Risk 56
Severity
8.8
EPSS
0.04%
First published (updated )
CVE-2026-8972

Mozilla ThunderbirdInteger overflow in the Networking: JAR component

Risk 61
Severity
9.8
EPSS
0.05%
First published (updated )
CVE-2026-8956
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203