Threat database

991 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.5	EPSS 0.4%	CVE-2026-4719Firefox · Vulnerability High7.5EPSS 0.4%2026-03-24CVE Database V5CVE-2026-4719 Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.4%Vulnerability Mozilla	CVE Database V5	2026-03-24
High	8.1	EPSS 0.5%	CVE-2026-4718Firefox · Vulnerability High8.1EPSS 0.5%2026-03-24CVE Database V5CVE-2026-4718 Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.5%Vulnerability Mozilla	CVE Database V5	2026-03-24
Medium	6.5	EPSS 0.3%	CVE-2026-4728Firefox · Vulnerability Medium6.5EPSS 0.3%2026-03-24CVE Database V5CVE-2026-4728 Spoofing issue in the Privacy: Anti-Tracking component. This vulnerability was fixed in Firefox 149 and Thunderbird 149. EPSS 0.3%Vulnerability Mozilla	CVE Database V5	2026-03-24
High	7.5	EPSS 0.5%	CVE-2026-4727Firefox · Vulnerability High7.5EPSS 0.5%2026-03-24CVE Database V5CVE-2026-4727 Denial-of-service in the Libraries component in NSS. This vulnerability was fixed in Firefox 149 and Thunderbird 149. EPSS 0.5%Vulnerability Mozilla	CVE Database V5	2026-03-24
High	7.5	EPSS 0.5%	CVE-2026-4726Firefox · Vulnerability High7.5EPSS 0.5%2026-03-24CVE Database V5CVE-2026-4726 Denial-of-service in the XML component. This vulnerability was fixed in Firefox 149 and Thunderbird 149. EPSS 0.5%Vulnerability Mozilla	CVE Database V5	2026-03-24
Critical	9.8	EPSS 0.4%	CVE-2026-4717Firefox · Vulnerability Critical9.8EPSS 0.4%2026-03-24CVE Database V5CVE-2026-4717 Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.4%Vulnerability Mozilla	CVE Database V5	2026-03-24
Critical	9.1	EPSS 0.4%	CVE-2026-4716Firefox · Vulnerability Critical9.1EPSS 0.4%2026-03-24CVE Database V5CVE-2026-4716 Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.4%Vulnerability Mozilla	CVE Database V5	2026-03-24
Critical	9.1	EPSS 0.4%	CVE-2026-4715Firefox · Vulnerability Critical9.1EPSS 0.4%2026-03-24CVE Database V5CVE-2026-4715 Uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.4%Vulnerability Mozilla	CVE Database V5	2026-03-24
High	7.5	EPSS 0.4%	CVE-2026-4714Firefox · Vulnerability High7.5EPSS 0.4%2026-03-24CVE Database V5CVE-2026-4714 Incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.4%Vulnerability Mozilla	CVE Database V5	2026-03-24
High	7.5	EPSS 0.4%	CVE-2026-4713Firefox · Vulnerability High7.5EPSS 0.4%2026-03-24CVE Database V5CVE-2026-4713 Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.4%Vulnerability Mozilla	CVE Database V5	2026-03-24
High	7.5	EPSS 0.4%	CVE-2026-4712Firefox · Vulnerability High7.5EPSS 0.4%2026-03-24CVE Database V5CVE-2026-4712 Information disclosure in the Widget: Cocoa component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.4%Vulnerability Mozilla	CVE Database V5	2026-03-24
Critical	9.3	EPSS 0.4%	CVE-2026-4725Firefox · Vulnerability Critical9.3EPSS 0.4%2026-03-24CVE Database V5CVE-2026-4725 Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149 and Thunderbird 149. EPSS 0.4%Vulnerability Mozilla	CVE Database V5	2026-03-24
Critical	9.8	EPSS 0.4%	CVE-2026-4711Firefox · Vulnerability Critical9.8EPSS 0.4%2026-03-24CVE Database V5CVE-2026-4711 Use-after-free in the Widget: Cocoa component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.4%Vulnerability Mozilla	CVE Database V5	2026-03-24
Critical	9.8	EPSS 0.4%	CVE-2026-4710Firefox · Vulnerability Critical9.8EPSS 0.4%2026-03-24CVE Database V5CVE-2026-4710 Incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.4%Vulnerability Mozilla	CVE Database V5	2026-03-24
High	7.5	EPSS 0.5%	CVE-2026-4709Firefox · Vulnerability High7.5EPSS 0.5%2026-03-24CVE Database V5CVE-2026-4709 Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.5%Vulnerability Mozilla	CVE Database V5	2026-03-24
High	7.5	EPSS 0.4%	CVE-2026-4708Firefox · Vulnerability High7.5EPSS 0.4%2026-03-24CVE Database V5CVE-2026-4708 Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.4%Vulnerability Mozilla	CVE Database V5	2026-03-24
High	7.5	EPSS 0.6%	CVE-2026-4707Firefox · Vulnerability High7.5EPSS 0.6%2026-03-24CVE Database V5CVE-2026-4707 Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.6%Vulnerability Mozilla	CVE Database V5	2026-03-24
High	7.5	EPSS 0.5%	CVE-2026-4706Firefox · Vulnerability High7.5EPSS 0.5%2026-03-24CVE Database V5CVE-2026-4706 Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.5%Vulnerability Mozilla	CVE Database V5	2026-03-24
Critical	9.8	EPSS 0.7%	CVE-2026-4705Firefox · Vulnerability Critical9.8EPSS 0.7%2026-03-24CVE Database V5CVE-2026-4705 Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.7%Vulnerability Mozilla	CVE Database V5	2026-03-24
High	7.5	EPSS 0.7%	CVE-2026-4704Firefox · Vulnerability High7.5EPSS 0.7%2026-03-24CVE Database V5CVE-2026-4704 Denial-of-service in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.7%Vulnerability Mozilla	CVE Database V5	2026-03-24

Showing 581–600 of 991 results