CVE-2025-1932High· 8.1▾ TwilightAn inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Only affected version 122 and later. This vulnerability was fixed in Firefox 136, Firefox ESR 128.8, Thunderbird 136, an…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 44.6 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.4%
An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Only affected version 122 and later. This vulnerability was fixed in Firefox 136, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8.
firefox < 128.8.0firefox < 136.0thunderbird >= ], < 128.8.0thunderbird >= 129.0, < 136.0Upgrade past the affected range:
firefox 136.0thunderbird 136.0Connected by shared product, vendor, weakness, or advisory.
CVE-2026-2771Critical· 9.8Undefined behavior in the DOM: Core & HTML component
CVE-2026-92072High· 8.0Incorrect boundary conditions in the Safe Browsing component
CVE-2026-8092High· 8.1Memory safety bugs present in Firefox ESR 115.35.1, Firefox ESR 140.10.1 and Firefox 150.0.1
CVE-2026-12298Medium· 5.4Memory safety bug fixed in Firefox 152
CVE-2026-96869Medium· 4.3Information disclosure in the Networking component
CVE-2026-100832High· 8.8Use-after-free in the Graphics: Canvas2D component