VYPR

Firefox

by Mozilla Corporation

Source repositories

CVEs (3,179)

  • CVE-2026-2765CriFeb 24, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  • CVE-2026-2764CriFeb 24, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  • CVE-2026-2763CriFeb 24, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  • CVE-2026-2762CriFeb 24, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.01

    Integer overflow in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  • CVE-2026-2759CriFeb 24, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    Incorrect boundary conditions in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  • CVE-2026-2758CriFeb 24, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  • CVE-2026-2757CriFeb 24, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    Incorrect boundary conditions in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  • CVE-2026-2634CriFeb 24, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be presented under spoofed domains. This vulnerability was fixed in Firefox for iOS 147.4.

  • CVE-2026-0892CriJan 13, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    Memory safety bugs present in Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 147 and…

  • CVE-2026-0884CriJan 13, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.

  • CVE-2026-0879CriJan 13, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.01

    Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.

  • CVE-2025-14860CriDec 18, 2025
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 146.0.1.

  • CVE-2025-14330CriDec 9, 2025
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.

  • CVE-2025-14326CriDec 9, 2025
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    Use-after-free in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 146 and Thunderbird 146.

  • CVE-2025-14324CriDec 9, 2025
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.

  • CVE-2025-14321CriDec 9, 2025
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.01

    Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.

  • CVE-2025-13026CriNov 11, 2025
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145.

  • CVE-2025-13024CriNov 11, 2025
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 145 and Thunderbird 145.

  • CVE-2025-13023CriNov 11, 2025
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145.

  • CVE-2025-13022CriNov 11, 2025
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145.

Page 6 of 159