Threat database

991 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.5	EPSS 0.4%	CVE-2026-84130Firefox · Vulnerability High7.5EPSS 0.4%2026-09-01CVE Database V5CVE-2026-84130 Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2. EPSS 0.4%Vulnerability Mozilla	CVE Database V5	2026-09-01
Critical	9.8	EPSS 0.2%	CVE-2026-84129Firefox · Vulnerability Critical9.8EPSS 0.2%2026-09-01CVE Database V5CVE-2026-84129 Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2. EPSS 0.2%Vulnerability Mozilla #ghsa-vhhv-v3m2-wvqf	CVE Database V5	2026-09-01
High	8.8	EPSS 0.4%	CVE-2026-84128Firefox · Vulnerability High8.8EPSS 0.4%2026-09-01CVE Database V5CVE-2026-84128 Privilege escalation in the WebDriver BiDi component. This vulnerability was fixed in Firefox 155 and Thunderbird 155. EPSS 0.4%Vulnerability Mozilla	CVE Database V5	2026-09-01
Medium	4.3	EPSS 0.3%	CVE-2026-84127Firefox · Vulnerability Medium4.3EPSS 0.3%2026-09-01CVE Database V5CVE-2026-84127 Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155. EPSS 0.3%Vulnerability Mozilla	CVE Database V5	2026-09-01
Medium	4.3	EPSS 0.3%	CVE-2026-84126Firefox · Vulnerability Medium4.3EPSS 0.3%2026-09-01CVE Database V5CVE-2026-84126 Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155. EPSS 0.3%Vulnerability Mozilla #ghsa-3jcw-33fg-2hgv	CVE Database V5	2026-09-01
Medium	5.4	EPSS 0.3%	CVE-2026-84125Firefox · Vulnerability Medium5.4EPSS 0.3%2026-09-01CVE Database V5CVE-2026-84125 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2. EPSS 0.3%Vulnerability Mozilla	CVE Database V5	2026-09-01
Medium	5.4	EPSS 0.2%	CVE-2026-84124Firefox · Vulnerability Medium5.4EPSS 0.2%2026-09-01CVE Database V5CVE-2026-84124 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2. EPSS 0.2%Vulnerability Mozilla	CVE Database V5	2026-09-01
High	8.8	EPSS 0.4%	CVE-2026-84123Firefox · Vulnerability High8.8EPSS 0.4%2026-09-01CVE Database V5CVE-2026-84123 Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2. EPSS 0.4%Vulnerability Mozilla #ghsa-9q9x-3h5p-qv27	CVE Database V5	2026-09-01
Medium	5.4	EPSS 0.2%	CVE-2026-84122Firefox · Vulnerability Medium5.4EPSS 0.2%2026-09-01CVE Database V5CVE-2026-84122 Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2. EPSS 0.2%Vulnerability Mozilla	CVE Database V5	2026-09-01
Medium	5.4	EPSS 0.3%	CVE-2026-84118Firefox · Vulnerability Medium5.4EPSS 0.3%2026-09-01CVE Database V5CVE-2026-84118 Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2. EPSS 0.3%Vulnerability Mozilla	CVE Database V5	2026-09-01
High	7.5	EPSS 0.4%	CVE-2026-84145Thunderbird · Vulnerability High7.5EPSS 0.4%2026-09-01CVE Database V5CVE-2026-84145 Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2. EPSS 0.4%Vulnerability Mozilla #ghsa-6w89-9jrv-4j59	CVE Database V5	2026-09-01
High	8.8	EPSS 0.3%	CVE-2026-84131Firefox · Vulnerability High8.8EPSS 0.3%2026-09-01CVE Database V5CVE-2026-84131 Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2. EPSS 0.3%Vulnerability Mozilla #ghsa-8v78-cgm6-v8h8	CVE Database V5	2026-09-01
Critical	9.6	EPSS 0.3%	CVE-2026-84121Firefox · Vulnerability Critical9.6EPSS 0.3%2026-09-01CVE Database V5CVE-2026-84121 Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2. EPSS 0.3%Vulnerability Mozilla #ghsa-5g9x-cffv-ccj8	CVE Database V5	2026-09-01
Medium	5.4	EPSS 0.2%	CVE-2026-84120Firefox · Vulnerability Medium5.4EPSS 0.2%2026-09-01CVE Database V5CVE-2026-84120 Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2. EPSS 0.2%Vulnerability Mozilla	CVE Database V5	2026-09-01
Critical	9.6	EPSS 0.3%	CVE-2026-84119Firefox · Vulnerability Critical9.6EPSS 0.3%2026-09-01CVE Database V5CVE-2026-84119 Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2. EPSS 0.3%Vulnerability Mozilla #ghsa-jm34-3r5q-pm6j	CVE Database V5	2026-09-01
Medium	5.4	EPSS 0.3%	CVE-2026-81267Firefox for iOS · Vulnerability Medium5.4EPSS 0.3%2026-08-31CVE Database V5CVE-2026-81267 CVE-2026-81267 is a vulnerability in Mozilla Firefox for iOS where a malicious webpage can stall a popup's cross-origin navigation after commit. This causes the address bar to display the destination origin while the content rendered is still attacker-controlled. The issue was fixed in Firefox for iOS version 155.0. The vulnerability has a moderate impact and a CVSS score of 5.4. EPSS 0.3%Vulnerability Mozilla	CVE Database V5	2026-08-31
Critical	9.8	EPSS 0.6%	CVE-2026-74989Thunderbird · Vulnerability Critical9.8EPSS 0.6%2026-08-18CVE Database V5CVE-2026-74989 Internally found bugs present in Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154 and Thunderbird 154. EPSS 0.6%Vulnerability Mozilla	CVE Database V5	2026-08-18
Critical	9.8	EPSS 0.6%	CVE-2026-74988Thunderbird · Vulnerability Critical9.8EPSS 0.6%2026-08-18CVE Database V5CVE-2026-74988 Internally found bugs present in Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. EPSS 0.6%Vulnerability Mozilla	CVE Database V5	2026-08-18
Critical	9.1	EPSS 0.6%	CVE-2026-74986Firefox · Vulnerability Critical9.1EPSS 0.6%2026-08-18CVE Database V5CVE-2026-74986 CVE-2026-74986 is a critical site isolation vulnerability in the CSS Parsing and Computation component of Mozilla Firefox. This issue allows information disclosure and affects Firefox versions prior to 154. The vulnerability was fixed in Firefox 154 and Firefox ESR 153.1. EPSS 0.6%Vulnerability Mozilla	CVE Database V5	2026-08-18

Showing 281–300 of 991 results · 1 duplicate CVE record merged