Threat database

971 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.5	EPSS 0.4%	CVE-2026-4719Mozilla Firefox · Memory Buffer Overflow High7.5EPSS 0.4%2026-03-24CVE Database V5CVE-2026-4719 Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.4%Vulnerability Mozilla	CVE Database V5	2026-03-24
High	8.1	EPSS 0.5%	CVE-2026-4718Mozilla Firefox · Vulnerability High8.1EPSS 0.5%2026-03-24CVE Database V5CVE-2026-4718 Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.5%Vulnerability Mozilla	CVE Database V5	2026-03-24
Medium	6.5	EPSS 0.2%	CVE-2026-4728Mozilla Firefox · Vulnerability Medium6.5EPSS 0.2%2026-03-24CVE Database V5CVE-2026-4728 Spoofing issue in the Privacy: Anti-Tracking component. This vulnerability was fixed in Firefox 149 and Thunderbird 149. EPSS 0.2%Vulnerability Mozilla	CVE Database V5	2026-03-24
High	7.5	EPSS 0.6%	CVE-2026-4727Mozilla Firefox · Vulnerability High7.5EPSS 0.6%2026-03-24CVE Database V5CVE-2026-4727 Denial-of-service in the Libraries component in NSS. This vulnerability was fixed in Firefox 149 and Thunderbird 149. EPSS 0.6%Vulnerability Mozilla	CVE Database V5	2026-03-24
High	7.5	EPSS 0.6%	CVE-2026-4726Mozilla Firefox · Vulnerability High7.5EPSS 0.6%2026-03-24CVE Database V5CVE-2026-4726 Denial-of-service in the XML component. This vulnerability was fixed in Firefox 149 and Thunderbird 149. EPSS 0.6%Vulnerability Mozilla	CVE Database V5	2026-03-24
Critical	9.8	EPSS 0.4%	CVE-2026-4717Mozilla Firefox · Vulnerability Critical9.8EPSS 0.4%2026-03-24CVE Database V5CVE-2026-4717 Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.4%Vulnerability Mozilla	CVE Database V5	2026-03-24
Critical	9.1	EPSS 0.4%	CVE-2026-4716Mozilla Firefox · Vulnerability Critical9.1EPSS 0.4%2026-03-24CVE Database V5CVE-2026-4716 Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.4%Vulnerability Mozilla	CVE Database V5	2026-03-24
Critical	9.1	EPSS 0.4%	CVE-2026-4715Mozilla Firefox · Vulnerability Critical9.1EPSS 0.4%2026-03-24CVE Database V5CVE-2026-4715 Uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.4%Vulnerability Mozilla	CVE Database V5	2026-03-24
High	7.5	EPSS 0.4%	CVE-2026-4714Mozilla Firefox · Unchecked Error Condition High7.5EPSS 0.4%2026-03-24CVE Database V5CVE-2026-4714 Incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.4%Vulnerability Mozilla	CVE Database V5	2026-03-24
High	7.5	EPSS 0.4%	CVE-2026-4713Mozilla Firefox · Unchecked Error Condition High7.5EPSS 0.4%2026-03-24CVE Database V5CVE-2026-4713 Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.4%Vulnerability Mozilla	CVE Database V5	2026-03-24
High	7.5	EPSS 0.4%	CVE-2026-4712Mozilla Firefox · Information Exposure High7.5EPSS 0.4%2026-03-24CVE Database V5CVE-2026-4712 Information disclosure in the Widget: Cocoa component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.4%Vulnerability Mozilla	CVE Database V5	2026-03-24
Critical	9.3	EPSS 0.3%	CVE-2026-4725Mozilla Firefox · Vulnerability Critical9.3EPSS 0.3%2026-03-24CVE Database V5CVE-2026-4725 Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149 and Thunderbird 149. EPSS 0.3%Vulnerability Mozilla	CVE Database V5	2026-03-24
Critical	9.8	EPSS 0.4%	CVE-2026-4711Mozilla Firefox · Vulnerability Critical9.8EPSS 0.4%2026-03-24CVE Database V5CVE-2026-4711 Use-after-free in the Widget: Cocoa component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.4%Vulnerability Mozilla	CVE Database V5	2026-03-24
Critical	9.8	EPSS 0.4%	CVE-2026-4710Mozilla Firefox · Memory Buffer Overflow Critical9.8EPSS 0.4%2026-03-24CVE Database V5CVE-2026-4710 Incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.4%Vulnerability Mozilla	CVE Database V5	2026-03-24
High	7.5	EPSS 0.5%	CVE-2026-4709Mozilla Firefox · Unchecked Error Condition High7.5EPSS 0.5%2026-03-24CVE Database V5CVE-2026-4709 Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.5%Vulnerability Mozilla	CVE Database V5	2026-03-24
High	7.5	EPSS 0.4%	CVE-2026-4708Mozilla Firefox · Unchecked Error Condition High7.5EPSS 0.4%2026-03-24CVE Database V5CVE-2026-4708 Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.4%Vulnerability Mozilla	CVE Database V5	2026-03-24
High	7.5	EPSS 0.6%	CVE-2026-4707Mozilla Firefox · Unchecked Error Condition High7.5EPSS 0.6%2026-03-24CVE Database V5CVE-2026-4707 Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.6%Vulnerability Mozilla	CVE Database V5	2026-03-24
High	7.5	EPSS 0.5%	CVE-2026-4706Mozilla Firefox · Unchecked Error Condition High7.5EPSS 0.5%2026-03-24CVE Database V5CVE-2026-4706 Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.5%Vulnerability Mozilla	CVE Database V5	2026-03-24
Critical	9.8	EPSS 0.7%	CVE-2026-4705Mozilla Firefox · Vulnerability Critical9.8EPSS 0.7%2026-03-24CVE Database V5CVE-2026-4705 Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.7%Vulnerability Mozilla	CVE Database V5	2026-03-24
High	7.5	EPSS 0.7%	CVE-2026-4704Mozilla Firefox · Vulnerability High7.5EPSS 0.7%2026-03-24CVE Database V5CVE-2026-4704 Denial-of-service in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. EPSS 0.7%Vulnerability Mozilla	CVE Database V5	2026-03-24

Page 30 of 50