Vulnerabilities

TI-2026-68415 CVE-2026-106016 · GHSA-chh8-pxv3-95vg

Mitigation bypass in Mozilla Firefox and Thunderbird File Handling

MEDIUM 49

Mitigation bypass in the File Handling component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00319 Published 2026-10-06 Partial fix · 157.0.1, 158 CWE-693

TI-2026-64970 CVE-2026-100832 · GHSA-8ffm-wqc4-j2qw

Use after free in Mozilla Firefox

MEDIUM 40

Use-after-free in the Graphics: Canvas2D component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00245 Published 2026-09-29 Partial fix · 115.42, 140.17 +1 CWE-416

TI-2026-64969 CVE-2026-100831 · GHSA-j53f-3p69-9c6v

Use after free in Mozilla Firefox

MEDIUM 40

Use-after-free in the DOM: UI Events & Focus Handling component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00237 Published 2026-09-29 Fixed in 153.4, 157 CWE-416

TI-2026-64968 CVE-2026-100830 · GHSA-45ch-w6fw-c7j7

Origin validation error in Mozilla Firefox

LOW 36

Mitigation bypass in the DOM: Navigation component.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00135 Published 2026-09-29 Fixed in 153.4, 157 CWE-346

TI-2026-64967 CVE-2026-100829 · GHSA-wx3p-84r9-jc7f

Protection mechanism failure in Mozilla Firefox

MEDIUM 42

Mitigation bypass in the DOM: Security component.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00239 Published 2026-09-29 Fixed in 153.4, 157 CWE-693

TI-2026-64966 CVE-2026-100828 · GHSA-hccq-gj23-w7rq

Protection mechanism failure in Mozilla Firefox

MEDIUM 42

Mitigation bypass in the Bookmarks & History component.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00239 Published 2026-09-29 Fixed in 153.4, 157 CWE-693

TI-2026-64965 CVE-2026-100826 · GHSA-2h35-xmc4-q3jw

Resource allocation without limits in Mozilla Firefox

LOW 28

Denial-of-service in the Storage: StorageManager component.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00217 Published 2026-09-29 Fixed in 153.4, 157 CWE-770

TI-2026-64964 CVE-2026-100825 · GHSA-wcxv-996h-6v52

Use after free in Mozilla Firefox

MEDIUM 40

Use-after-free in the JavaScript Engine: JIT component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00233 Published 2026-09-29 Fixed in 153.4, 157 CWE-416

TI-2026-64963 CVE-2026-100824 · GHSA-9q9m-5pqf-q3gj

Improper privilege management in Mozilla Firefox

LOW 39

Privilege escalation in the Places component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00221 Published 2026-09-29 Fixed in 153.4, 157 CWE-269

TI-2026-64961 CVE-2026-100822 · GHSA-6v29-2pf5-53r5

Spoofing issue in the Networking: HTTP component

LOW 24

Spoofing issue in the Networking: HTTP component.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00284 Published 2026-09-29 Fixed in 153.4, 157 CWE-451

TI-2026-64960 CVE-2026-100821 · GHSA-r8hv-xg2w-55rq

Origin validation error in Mozilla Firefox

LOW 21

Site isolation issue in the Panning and Zooming component.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00143 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-346

TI-2026-64959 CVE-2026-100820 · GHSA-257v-qj3f-78fw

Improper privilege management in Mozilla Thunderbird

MEDIUM 40

Privilege escalation in the Address Bar component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00238 Published 2026-09-29 Partial fix · 140.17, 153.4 +1 CWE-269

TI-2026-64958 CVE-2026-100819 · GHSA-2x4q-w8v4-vwxh

Memory corruption in Mozilla Firefox

MEDIUM 42

Sandbox escape due to incorrect boundary conditions in the XPCOM component.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00264 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-119

TI-2026-64957 CVE-2026-100818 · GHSA-5pwm-rr4f-fh76

Use after free in Mozilla Thunderbird

MEDIUM 42

Sandbox escape due to use-after-free in the Widget: Gtk component.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00265 Published 2026-09-29 Partial fix · 140.17, 153.4 +1 CWE-416

TI-2026-64956 CVE-2026-100817 · GHSA-f68q-ff49-59jx

Other issue in the JavaScript: WebAssembly component

LOW 24

Other issue in the JavaScript: WebAssembly component.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00197 Published 2026-09-29 Fixed in 157

TI-2026-64955 CVE-2026-100816 · GHSA-g257-qfqp-63c9

Origin validation error in Mozilla Firefox

LOW 36

Site isolation issue in the DOM: Networking component.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00153 Published 2026-09-29 Fixed in 153.4, 157 CWE-346

TI-2026-64954 CVE-2026-100815 · GHSA-wqm5-c82v-g3hg

Use after free in Mozilla Firefox

MEDIUM 40

Use-after-free in the CSS Parsing and Computation component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00237 Published 2026-09-29 Fixed in 153.4, 157 CWE-416

TI-2026-64953 CVE-2026-100814 · GHSA-jqcr-9p6m-338j

Memory corruption in Mozilla Firefox

MEDIUM 40

Incorrect boundary conditions in the JavaScript Engine: JIT component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00244 Published 2026-09-29 Fixed in 153.4, 157 CWE-119

TI-2026-64952 CVE-2026-100813 · GHSA-2q85-hjwm-gmxv

Invalid pointer in the JavaScript Engine: JIT component

MEDIUM 40

Invalid pointer in the JavaScript Engine: JIT component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00231 Published 2026-09-29 Fixed in 157 CWE-763

TI-2026-64951 CVE-2026-100812 · GHSA-3fxp-4mmr-7r8h

Resource allocation without limits in Mozilla Firefox

LOW 29

Denial-of-service in the Graphics component.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00272 Published 2026-09-29 Fixed in 153.4, 157 CWE-770

TI-2026-64950 CVE-2026-100811 · GHSA-646m-ffpr-629f

Use after free in Mozilla Thunderbird

MEDIUM 42

Sandbox escape due to use-after-free in the DOM: Core & HTML component.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00265 Published 2026-09-29 Partial fix · 140.17, 153.4 +1 CWE-416

TI-2026-64949 CVE-2026-100810 · GHSA-789r-f72w-5r5j

Information disclosure in Mozilla Thunderbird

MEDIUM 49

Other issue in the DevTools component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00375 Published 2026-09-29 Fixed in 157 CWE-200

TI-2026-64948 CVE-2026-100809 · GHSA-gggx-8wj9-87fx

Origin validation error in Mozilla Firefox

LOW 36

Same-origin policy bypass in the DevTools component.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00153 Published 2026-09-29 Fixed in 153.4, 157 CWE-346

TI-2026-64947 CVE-2026-100808 · GHSA-g3qf-g4gj-3c9g

Protection mechanism failure in Mozilla Firefox

MEDIUM 40

Mitigation bypass in the DOM: Service Workers component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00299 Published 2026-09-29 Fixed in 153.4, 157 CWE-693

TI-2026-64946 CVE-2026-100807 · GHSA-5fmw-j564-6qjv

Improper privilege management in Mozilla Thunderbird

MEDIUM 40

Privilege escalation in the DOM: Service Workers component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00234 Published 2026-09-29 Partial fix · 140.17, 153.4 +1 CWE-269

Vulnerabilities

Filters