Tagged “csaf”

CVEs tagged csaf, newest first.

3093 CVEsRSS

CVE-2026-92007High· 8.8

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16…

▾ TwilightMozilla · FirefoxEPSS 0.28%via NVD

CVE-2026-92005Medium· 5.3⚖ disputed

1w ago

Use-after-free in the Audio/Video: Web Codecs component

Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ SunlitMozilla · FirefoxEPSS 0.38%via NVD

CVE-2026-92013High· 8.8

1w ago

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

▾ TwilightMozilla · FirefoxEPSS 0.28%via NVD

CVE-2026-92008High· 8.8

1w ago

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

▾ TwilightMozilla · FirefoxEPSS 0.28%via NVD

CVE-2026-92011High· 8.8

1w ago

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

▾ TwilightMozilla · FirefoxEPSS 0.28%via NVD

CVE-2026-92010High· 8.8

1w ago

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

▾ TwilightMozilla · FirefoxEPSS 0.28%via NVD

CVE-2026-92009High· 8.8

1w ago

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

▾ TwilightMozilla · FirefoxEPSS 0.28%via NVD

CVE-2026-92014High· 8.8

1w ago

Privilege escalation due to incorrect boundary conditions in the Graphics component

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16.

▾ TwilightMozilla · FirefoxEPSS 0.26%via NVD

CVE-2026-92012High· 8.8

1w ago

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

▾ TwilightMozilla · FirefoxEPSS 0.28%via NVD

CVE-2026-92016High· 8.8

1w ago

Use-after-free in the Disability Access APIs component

Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ TwilightMozilla · FirefoxEPSS 0.33%via NVD

CVE-2026-92017High· 8.8

1w ago

Privilege escalation in the DOM: Service Workers component

Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ TwilightMozilla · FirefoxEPSS 0.26%via NVD

CVE-2026-92020High· 8.8

1w ago

Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component

Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, …

▾ TwilightMozilla · FirefoxEPSS 0.28%via NVD

CVE-2026-92019High· 8.1

1w ago

Mitigation bypass in the Remote Settings Client component

Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ TwilightMozilla · FirefoxEPSS 0.34%via NVD

CVE-2026-92018Critical· 9.6⚖ disputed

1w ago

Sandbox escape in the DOM: Core & HTML component

Sandbox escape in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ MidnightMozilla · FirefoxEPSS 0.35%via NVD

CVE-2026-92023High· 8.8

1w ago

Use-after-free in the XML component

Use-after-free in the XML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ TwilightMozilla · FirefoxEPSS 0.34%via NVD

CVE-2026-92021High· 8.8

1w ago

Use-after-free in the JavaScript Engine: JIT component

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16.

▾ TwilightMozilla · FirefoxEPSS 0.30%via NVD

CVE-2026-92026High· 8.8

1w ago

Use-after-free in the Networking component

Use-after-free in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ TwilightMozilla · FirefoxEPSS 0.33%via NVD

CVE-2026-92024High· 8.8

1w ago

Use-after-free in the SVG component

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ TwilightMozilla · FirefoxEPSS 0.34%via NVD

CVE-2026-92022High· 8.8

1w ago

Use-after-free in the DOM: HTML Parser component

Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ TwilightMozilla · FirefoxEPSS 0.34%via NVD

CVE-2026-92028High· 8.8

1w ago

Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ TwilightMozilla · FirefoxEPSS 0.34%via NVD

CVE-2026-92027High· 8.8

1w ago

Use-after-free in the DOM: Streams component

Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ TwilightMozilla · FirefoxEPSS 0.34%via NVD

CVE-2026-92025High· 8.8

1w ago

Use-after-free in the DOM: Navigation component

Use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ TwilightMozilla · FirefoxEPSS 0.34%via NVD

CVE-2026-92030Medium· 5.4

1w ago

Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component

Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ SunlitMozilla · FirefoxEPSS 0.24%via NVD

CVE-2026-92029High· 8.8

1w ago

Use-after-free in the SVG component

▾ TwilightMozilla · FirefoxEPSS 0.34%via NVD

CVE-2026-92033High· 8.8

1w ago

Privilege escalation in Firefox for Android

Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 156.

▾ TwilightMozilla · FirefoxEPSS 0.37%via NVD

CVE-2026-92032Critical· 9.6⚖ disputed

1w ago

Sandbox escape due to invalid pointer in the Graphics component

Sandbox escape due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ MidnightMozilla · FirefoxEPSS 0.34%via NVD

CVE-2026-92031Medium· 6.5

1w ago

Information disclosure in the Graphics: ImageLib component

Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ SunlitMozilla · FirefoxEPSS 0.33%via NVD

CVE-2026-92036Critical· 9.8⚖ disputed

1w ago

Incorrect boundary conditions in the Networking: HTTP component

Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.

▾ MidnightMozilla · FirefoxEPSS 0.59%via NVD

CVE-2026-92035Critical· 9.6⚖ disputed

1w ago

Sandbox escape due to incorrect boundary conditions in the Graphics component

Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.

▾ MidnightMozilla · FirefoxEPSS 0.48%via NVD

CVE-2026-92034Critical· 9.1

1w ago

Site isolation issue in the Graphics component

Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.

▾ MidnightMozilla · FirefoxEPSS 0.29%via NVD