Threat database

1,011 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.8	EPSS 0.3%	CVE-2026-92025Firefox · Vulnerability High8.8EPSS 0.3%2026-09-15CVE Database V5CVE-2026-92025 Use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. EPSS 0.3%Vulnerability Mozilla	CVE Database V5	2026-09-15
High	8.8	EPSS 0.3%	CVE-2026-92024Firefox · Vulnerability High8.8EPSS 0.3%2026-09-15CVE Database V5CVE-2026-92024 Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. EPSS 0.3%Vulnerability Mozilla	CVE Database V5	2026-09-15
High	8.8	EPSS 0.3%	CVE-2026-92023Firefox · Vulnerability High8.8EPSS 0.3%2026-09-15CVE Database V5CVE-2026-92023 Use-after-free in the XML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. EPSS 0.3%Vulnerability Mozilla	CVE Database V5	2026-09-15
High	8.8	EPSS 0.3%	CVE-2026-92022Firefox · Vulnerability High8.8EPSS 0.3%2026-09-15CVE Database V5CVE-2026-92022 Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. EPSS 0.3%Vulnerability Mozilla	CVE Database V5	2026-09-15
High	8.8	EPSS 0.3%	CVE-2026-92021Firefox · Vulnerability High8.8EPSS 0.3%2026-09-15CVE Database V5CVE-2026-92021 Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16. EPSS 0.3%Vulnerability Mozilla	CVE Database V5	2026-09-15
High	8.1	EPSS 0.3%	CVE-2026-92019Firefox · Vulnerability High8.1EPSS 0.3%2026-09-15CVE Database V5CVE-2026-92019 Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. EPSS 0.3%Vulnerability Mozilla #ghsa-6gh2-567v-rrg3	CVE Database V5	2026-09-15
Critical	9.6	EPSS 0.3%	CVE-2026-92018Firefox · Vulnerability Critical9.6EPSS 0.3%2026-09-15CVE Database V5CVE-2026-92018 Sandbox escape in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. EPSS 0.3%Vulnerability Mozilla #ghsa-f8x3-g25f-rfqc	CVE Database V5	2026-09-15
High	8.8	EPSS 0.2%	CVE-2026-92017Firefox · Vulnerability High8.8EPSS 0.2%2026-09-15CVE Database V5CVE-2026-92017 CVE-2026-92017 is a high-severity privilege escalation vulnerability in the DOM Service Workers component of Mozilla Firefox and Thunderbird. This vulnerability allows an attacker to escalate privileges within the affected applications. The issue has been fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. EPSS 0.2%Vulnerability Mozilla	CVE Database V5	2026-09-15
High	8.8	EPSS 0.3%	CVE-2026-92016Firefox · Vulnerability High8.8EPSS 0.3%2026-09-15CVE Database V5CVE-2026-92016 Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. EPSS 0.3%Vulnerability Mozilla	CVE Database V5	2026-09-15
High	8.8	EPSS 0.3%	CVE-2026-92015Firefox · Vulnerability High8.8EPSS 0.3%2026-09-15CVE Database V5CVE-2026-92015 CVE-2026-92015 is a high-severity privilege escalation vulnerability in the WebExtensions component of Mozilla Firefox. It allows an attacker to escalate privileges within the browser environment. This vulnerability has been fixed in Firefox 156 and corresponding ESR and Thunderbird versions. EPSS 0.3%Vulnerability Mozilla	CVE Database V5	2026-09-15
High	8.8	EPSS 0.2%	CVE-2026-92014Firefox · Vulnerability High8.8EPSS 0.2%2026-09-15CVE Database V5CVE-2026-92014 CVE-2026-92014 is a high-severity privilege escalation vulnerability in Mozilla Firefox due to incorrect boundary conditions in the Graphics component. This vulnerability allows an attacker to escalate privileges by exploiting memory safety issues. The issue was fixed in Firefox ESR versions 115.41 and 140.16, as well as Thunderbird 140.16. The vulnerability has a CVSS score of 8.8, indicating a critical impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported. Mozilla has published official security advisories detailing the fix and related vulnerabilities. EPSS 0.2%Vulnerability Mozilla #ghsa-mqr4-65f4-xr47	CVE Database V5	2026-09-15
High	8.8	EPSS 0.3%	CVE-2026-92013Firefox · Vulnerability High8.8EPSS 0.3%2026-09-15CVE Database V5CVE-2026-92013 CVE-2026-92013 is a high-severity privilege escalation vulnerability in Mozilla Firefox caused by incorrect boundary conditions in the Graphics: CanvasWebGL component. This flaw allows an attacker to escalate privileges due to improper handling of boundary checks. The issue affects Firefox versions prior to 156 and corresponding ESR and Thunderbird versions. Mozilla has released official fixes in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. EPSS 0.3%Vulnerability Mozilla #ghsa-mmqw-6cvj-pjr5	CVE Database V5	2026-09-15
High	8.8	EPSS 0.3%	CVE-2026-92012Firefox · Vulnerability High8.8EPSS 0.3%2026-09-15CVE Database V5CVE-2026-92012 CVE-2026-92012 is a high-severity privilege escalation vulnerability in Mozilla Firefox caused by incorrect boundary conditions in the Graphics: CanvasWebGL component. This flaw allows an attacker to escalate privileges within the affected application. The vulnerability affects Firefox versions prior to 156 and Firefox ESR versions prior to 115.41, 140.16, and 153.3. Mozilla has released official fixes for this issue in Firefox 156 and the specified ESR versions. EPSS 0.3%Vulnerability Mozilla #ghsa-3pq7-6j4j-pqf7	CVE Database V5	2026-09-15
High	8.8	EPSS 0.3%	CVE-2026-92011Firefox · Vulnerability High8.8EPSS 0.3%2026-09-15CVE Database V5CVE-2026-92011 CVE-2026-92011 is a high-severity privilege escalation vulnerability in Mozilla Firefox caused by incorrect boundary conditions in the Graphics: CanvasWebGL component. This issue allows an attacker to escalate privileges due to improper handling of memory boundaries. The vulnerability affects Firefox versions prior to 156 and several Firefox ESR versions prior to 115.41, 140.16, and 153.3. It was fixed in Firefox 156 and the specified ESR versions. No known exploits in the wild have been reported. Mozilla has published official advisories detailing the fix and urging users to update. EPSS 0.3%Vulnerability Mozilla #ghsa-pjx8-577g-gcqp	CVE Database V5	2026-09-15
High	8.8	EPSS 0.3%	CVE-2026-92010Firefox · Vulnerability High8.8EPSS 0.3%2026-09-15CVE Database V5CVE-2026-92010 CVE-2026-92010 is a high-severity privilege escalation vulnerability in Mozilla Firefox caused by incorrect boundary conditions in the Graphics: CanvasWebGL component. This issue allows an attacker to escalate privileges within the browser environment. The vulnerability was fixed in Firefox 156 and corresponding ESR and Thunderbird versions. The vendor has published official security advisories confirming the fix. EPSS 0.3%Vulnerability Mozilla #ghsa-hc8m-hgr8-3grq	CVE Database V5	2026-09-15
High	8.8	EPSS 0.3%	CVE-2026-92009Firefox · Vulnerability High8.8EPSS 0.3%2026-09-15CVE Database V5CVE-2026-92009 CVE-2026-92009 is a high-severity privilege escalation vulnerability in Mozilla Firefox and Thunderbird caused by incorrect boundary conditions in the Graphics: CanvasWebGL component. The issue allows an attacker to escalate privileges within the affected software. This vulnerability has been fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. EPSS 0.3%Vulnerability Mozilla #ghsa-7p38-76rq-878j	CVE Database V5	2026-09-15
High	8.8	EPSS 0.3%	CVE-2026-92008Firefox · Vulnerability High8.8EPSS 0.3%2026-09-15CVE Database V5CVE-2026-92008 CVE-2026-92008 is a high-severity privilege escalation vulnerability in Mozilla Firefox caused by incorrect boundary conditions in the Graphics: CanvasWebGL component. This flaw allows an attacker to escalate privileges within the affected Firefox versions. The vulnerability was fixed in Firefox 156 and corresponding ESR and Thunderbird versions. EPSS 0.3%Vulnerability Mozilla #ghsa-3rpr-7wjf-f32w	CVE Database V5	2026-09-15
High	8.8	EPSS 0.3%	CVE-2026-92007Firefox · Vulnerability High8.8EPSS 0.3%2026-09-15CVE Database V5CVE-2026-92007 CVE-2026-92007 is a high-severity privilege escalation vulnerability in Mozilla Firefox caused by incorrect boundary conditions in the Graphics: CanvasWebGL component. This flaw allows an attacker to escalate privileges within the affected application. The vulnerability has been fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. EPSS 0.3%Vulnerability Mozilla #ghsa-q8rx-2j8f-jqmv	CVE Database V5	2026-09-15
High	8.8	EPSS 0.3%	CVE-2026-92006Firefox · Vulnerability High8.8EPSS 0.3%2026-09-15CVE Database V5CVE-2026-92006 CVE-2026-92006 is a high-severity privilege escalation vulnerability in Mozilla Firefox caused by incorrect boundary conditions in the Graphics: CanvasWebGL component. This issue allows an attacker to escalate privileges within the affected application. The vulnerability has been fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. EPSS 0.3%Vulnerability Mozilla #ghsa-vhhq-94j2-336v	CVE Database V5	2026-09-15
Medium	5.3	EPSS 0.4%	CVE-2026-92005Firefox · Vulnerability Medium5.3EPSS 0.4%2026-09-15CVE Database V5CVE-2026-92005 Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. EPSS 0.4%Vulnerability Mozilla	CVE Database V5	2026-09-15

Showing 241–260 of 1,011 results