VYPR

Firefox

by Mozilla Corporation

Source repositories

CVEs (3,441)

  • CVE-2026-2780CriFeb 24, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  • CVE-2026-2779CriFeb 24, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.01

    Incorrect boundary conditions in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  • CVE-2026-2777CriFeb 24, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    Privilege escalation in the Messaging System component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  • CVE-2026-2775CriFeb 24, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.01

    Mitigation bypass in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  • CVE-2026-2774CriFeb 24, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.01

    Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  • CVE-2026-2773CriFeb 24, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.01

    Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  • CVE-2026-2772CriFeb 24, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  • CVE-2026-2771CriFeb 24, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    Undefined behavior in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  • CVE-2026-2770CriFeb 24, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  • CVE-2026-2767CriFeb 24, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  • CVE-2026-2766CriFeb 24, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  • CVE-2026-2765CriFeb 24, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  • CVE-2026-2764CriFeb 24, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  • CVE-2026-2763CriFeb 24, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  • CVE-2026-2762CriFeb 24, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.01

    Integer overflow in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  • CVE-2026-2759CriFeb 24, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    Incorrect boundary conditions in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  • CVE-2026-2758CriFeb 24, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  • CVE-2026-2757CriFeb 24, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    Incorrect boundary conditions in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  • CVE-2026-2634CriFeb 24, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be presented under spoofed domains. This vulnerability was fixed in Firefox for iOS 147.4.

  • CVE-2026-0892CriJan 13, 2026
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.00

    Memory safety bugs present in Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 147 and…

Page 8 of 173