CVEs

375,955 total · page 28 of 7,520

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2026-92054	Mozilla Corporation Firefox	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation in the Memory component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92053	Mozilla Corporation Firefox	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92052	Mozilla Corporation Firefox	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92051	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Spoofing issue due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92050	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Sandbox escape due to race condition in the XPConnect component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92049	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Use-after-free in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92048	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92047	Mozilla Corporation Firefox	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation in the Crash Reporting component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92046	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92045	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Sandbox escape due to incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92044	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92043	Mozilla Corporation Firefox	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92042	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Race condition in the DOM: Content Processes component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92041	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92040	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92039	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Mitigation bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92038	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92037	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Incorrect boundary conditions in the DOM: Animation component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92036	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92035	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92034	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92033	Mozilla Corporation Firefox for Android	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 156.
CVE-2026-92032	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Sandbox escape due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92031	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92030	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92029	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92028	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92027	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92026	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Use-after-free in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92025	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92024	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92023	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Use-after-free in the XML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92022	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92021	Mozilla Corporation Thunderbird		0.00	—	—	Sep 15, 2026	Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16.
CVE-2026-92020	Mozilla Corporation Firefox	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92019	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92018	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Sandbox escape in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92017	Mozilla Corporation Firefox	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92016	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92015	Mozilla Corporation Firefox	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92014	Mozilla Corporation Thunderbird	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16.
CVE-2026-92013	Mozilla Corporation Firefox	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92012	Mozilla Corporation Firefox	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92011	Mozilla Corporation Firefox	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92010	Mozilla Corporation Firefox	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92009	Mozilla Corporation Firefox	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92008	Mozilla Corporation Firefox	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92007	Mozilla Corporation Firefox	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92006	Mozilla Corporation Firefox	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92005	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.

CVE-2026-92054HigSep 15, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss —
Privilege escalation in the Memory component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92053HigSep 15, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss —
Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92052HigSep 15, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss —
Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92051Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Spoofing issue due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92050Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Sandbox escape due to race condition in the XPConnect component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92049Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Use-after-free in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92048Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92047HigSep 15, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss —
Privilege escalation in the Crash Reporting component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92046Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92045Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Sandbox escape due to incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92044Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92043HigSep 15, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss —
Privilege escalation due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92042Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Race condition in the DOM: Content Processes component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92041Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92040Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92039Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Mitigation bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92038Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92037Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Incorrect boundary conditions in the DOM: Animation component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92036Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92035Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92034Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92033HigSep 15, 2026
Mozilla Corporation
Firefox for Android
risk 0.57cvss 8.8epss —
Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 156.
CVE-2026-92032Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Sandbox escape due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92031Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92030Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92029Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92028Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92027Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92026Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Use-after-free in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92025Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92024Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92023Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Use-after-free in the XML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92022Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92021Sep 15, 2026
Mozilla Corporation
Thunderbird
risk 0.00cvss —epss —
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16.
CVE-2026-92020HigSep 15, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss —
Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92019Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92018Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Sandbox escape in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92017HigSep 15, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss —
Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92016Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92015HigSep 15, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss —
Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92014HigSep 15, 2026
Mozilla Corporation
Thunderbird
risk 0.57cvss 8.8epss —
Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16.
CVE-2026-92013HigSep 15, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss —
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92012HigSep 15, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss —
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92011HigSep 15, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss —
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92010HigSep 15, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss —
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92009HigSep 15, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss —
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92008HigSep 15, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss —
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92007HigSep 15, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss —
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92006HigSep 15, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss —
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.
CVE-2026-92005Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.