Latest high severity vulnerabilities for "mozilla firefox"

Mozilla Firefox23 vulnerabilities

Risk 33

Severity

7

First published (updated )

Advisory

MFSA2026-46

Sandbox escape in Firefox and Firefox Focus for Android

Risk 51

Severity

7.5

EPSS

0.05%

First published (updated )

CVE-2026-8945

Mitigation bypass in the DOM: Security component

Risk 42

Severity

8.1

EPSS

0.04%

First published (updated )

CVE-2026-8962

Incorrect boundary conditions in the Audio/Video: Web Codecs component

Risk 31

Severity

7.5

EPSS

0.04%

First published (updated )

CVE-2026-8946

Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component

Risk 31

Severity

7.5

EPSS

0.05%

First published (updated )

CVE-2026-8968

Information disclosure in the IP Protection component

Risk 31

Severity

7.5

EPSS

0.03%

First published (updated )

CVE-2026-8966

Privilege escalation in the Security component

Risk 56

Severity

8.8

EPSS

0.04%

First published (updated )

CVE-2026-8970

Spoofing issue in WebExtensions

Risk 31

Severity

7.5

EPSS

0.03%

First published (updated )

CVE-2026-8960

Use-after-free in the DOM: Bindings (WebIDL) component

Risk 36

Severity

7.3

EPSS

0.05%

First published (updated )

CVE-2026-8947

Incorrect boundary conditions, integer overflow in the Audio/Video component

Risk 31

Severity

7.5

EPSS

0.03%

First published (updated )

CVE-2026-8954

Information disclosure in the Graphics: WebGPU component

Risk 31

Severity

7.5

EPSS

0.03%

First published (updated )

CVE-2026-8967

Privilege escalation in the Application Update component

Risk 56

Severity

8.8

EPSS

0.04%

First published (updated )

CVE-2026-8952

Privilege escalation in the DOM: Workers component

Risk 56

Severity

8.8

EPSS

0.04%

First published (updated )

CVE-2026-8955

Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151

Risk 56

Severity

8.8

EPSS

0.04%

First published (updated )

CVE-2026-8974

Information disclosure, sandbox escape in the Security: Process Sandboxing component

Risk 34

Severity

8.6

EPSS

0.04%

First published (updated )

CVE-2026-8958

Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151

Risk 56

Severity

8.8

EPSS

0.04%

First published (updated )

CVE-2026-8975

Privilege escalation in the Enterprise Policies component

Risk 56

Severity

8.8

EPSS

0.04%

First published (updated )

CVE-2026-8957

Information disclosure in the DOM: Security component

Risk 31

Severity

7.5

EPSS

0.03%

First published (updated )

CVE-2026-8965

Memory safety bugs fixed in Thunderbird 151

Risk 56

Severity

8.8

EPSS

0.04%

First published (updated )

CVE-2026-8973

Privilege escalation in the WebRTC: Audio/Video component

Risk 56

Severity

8.8

EPSS

0.04%

First published (updated )

CVE-2026-8972

Spoofing issue in the Web Speech component

Risk 31

Severity

7.5

EPSS

0.03%

First published (updated )

CVE-2026-8963

Spoofing issue in the Popup Blocker component

Risk 31

Severity

7.5

EPSS

0.03%

First published (updated )

CVE-2026-8964

Integer overflow in the Widget: Win32 component

Risk 31

Severity

7.5

EPSS

0.05%

First published (updated )

CVE-2026-8949

Mitigation bypass in the DOM: Security component

Risk 42

Severity

8.1

EPSS

0.04%

First published (updated )

CVE-2026-8969

Mozilla FirefoxSecurity Vulnerabilities fixed in Firefox for iOS 151.0

Risk 33

Severity

7

First published (updated )

Advisory

MFSA2026-49

Mozilla Firefox2 vulnerabilities

Risk 33

Severity

7

First published (updated )

Advisory

MFSA2026-45

Use-after-free in the JavaScript: WebAssembly component

Risk 36

Severity

7.3

EPSS

0.02%

First published (updated )

CVE-2026-8390

JIT miscompilation in the JavaScript Engine: JIT component

Risk 36

Severity

7.3

EPSS

0.05%

First published (updated )

CVE-2026-8389

Mozilla FirefoxMemory safety bugs fixed in Thunderbird ESR 140.10.2 and Thunderbird 150.0.2

Risk 54

Severity

8.1

EPSS

0.02%

First published (updated )

CVE-2026-8092

Mozilla FirefoxUse-after-free in the DOM: Networking component

Risk 36

Severity

7.3

EPSS

0.02%

First published (updated )

CVE-2026-8090

Trending

Versions

Mozilla Firefox23 vulnerabilities

Sandbox escape in Firefox and Firefox Focus for Android

Mitigation bypass in the DOM: Security component

Incorrect boundary conditions in the Audio/Video: Web Codecs component

Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component

Information disclosure in the IP Protection component

Privilege escalation in the Security component

Spoofing issue in WebExtensions

Use-after-free in the DOM: Bindings (WebIDL) component

Incorrect boundary conditions, integer overflow in the Audio/Video component

Information disclosure in the Graphics: WebGPU component

Privilege escalation in the Application Update component

Privilege escalation in the DOM: Workers component

Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151

Information disclosure, sandbox escape in the Security: Process Sandboxing component

Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151

Privilege escalation in the Enterprise Policies component

Information disclosure in the DOM: Security component

Memory safety bugs fixed in Thunderbird 151

Privilege escalation in the WebRTC: Audio/Video component

Spoofing issue in the Web Speech component

Spoofing issue in the Popup Blocker component

Integer overflow in the Widget: Win32 component

Mitigation bypass in the DOM: Security component

Mozilla FirefoxSecurity Vulnerabilities fixed in Firefox for iOS 151.0

Mozilla Firefox2 vulnerabilities

Use-after-free in the JavaScript: WebAssembly component

JIT miscompilation in the JavaScript Engine: JIT component

Mozilla FirefoxMemory safety bugs fixed in Thunderbird ESR 140.10.2 and Thunderbird 150.0.2

Mozilla FirefoxUse-after-free in the DOM: Networking component

Don't miss critical vulnerabilities

Company

Resources

Contact