Threat database

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

A Just-In-Time (JIT) miscompilation vulnerability exists in the JavaScript engine component of Mozilla Firefox. This flaw can lead to high impact on confidentiality and integrity without affecting availability. The issue was addressed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Race condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Use-after-free in the XML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

CVE-2026-109716 is a high-severity vulnerability in Mozilla Firefox's JavaScript Engine caused by incorrect boundary conditions. It allows an attacker to cause high confidentiality and integrity impact with user interaction required. The issue has been fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

CVE-2026-109715 is a high severity vulnerability in Mozilla Firefox's JavaScript Engine caused by incorrect boundary conditions. It allows potential unauthorized information disclosure with high confidentiality and integrity impact but no availability impact. The issue is fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

CVE-2026-109712 is a high-severity vulnerability in Mozilla Firefox involving a sandbox escape caused by uninitialized memory in the Graphics component. This flaw allows an attacker to potentially bypass sandbox restrictions, impacting confidentiality, integrity, and availability. The vulnerability affects Firefox versions prior to 158, Firefox ESR versions prior to 115.43 and 153.5, as well as Thunderbird versions prior to 158 and 153.5. Official fixes have been released in these versions.

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Firefox for iOS could autofill saved credentials into a new page if cross-origin navigation occurred while the saved-login UI was open. Autofill was not bound to the originating page or rejected when its origin changed. This vulnerability was fixed in Firefox for iOS 157.1.

A vulnerability in Firefox for iOS allowed attacker-controlled HTML language attributes to execute code in privileged content, bypassing Content Security Policy. This issue was fixed in version 157.1.

Mozilla's Node-convict version 6.2.2 is affected by a prototype pollution vulnerability in the config.set() function. This flaw allows an attacker who can control configuration keys to overwrite core JavaScript methods such as Object.assign by writing arbitrary properties to constructor.<key>. The vulnerability bypasses existing filters and can cause persistent process-wide failures, resulting in denial of service that requires a restart. Exploitation requires an endpoint that forwards attacker-controlled keys into config.set().

CVE-2026-106016 is a critical vulnerability in Mozilla Firefox's File Handling component that allows mitigation bypass. It affects Firefox versions prior to 157.0.1. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability. Mozilla has released an official fix in Firefox 157.0.1 and Thunderbird 158 to address this issue.

CVE-2026-103500 is a heap buffer overflow vulnerability in Mozilla Thunderbird that occurs when a user opens an email of size 2GB or larger. This flaw was addressed and fixed in Thunderbird versions 157, 140.17, and 153.4. The vulnerability has a medium severity rating with a CVSS score of 6.3. Exploitation requires user interaction (opening a large email), and it impacts confidentiality, integrity, and availability to a limited extent.

CVE-2026-100832 is a use-after-free vulnerability in the Graphics: Canvas2D component of Mozilla Firefox and Thunderbird. It allows for potential remote code execution or other impacts due to improper memory handling. The issue has been fixed in Firefox ESR versions 115.42, 140.17, and 153.4, as well as Thunderbird versions 140.17 and 153.4.

CVE-2026-100831 is a use-after-free vulnerability in the DOM UI Events & Focus Handling component of Mozilla Firefox. This flaw allows potential memory corruption leading to high impact on confidentiality, integrity, and availability. The vulnerability has been fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

CVE-2026-100830 is a high-severity vulnerability in Mozilla Firefox involving a mitigation bypass in the DOM Navigation component. It allows an attacker to bypass security mitigations, potentially leading to high confidentiality and integrity impacts without affecting availability. The issue was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

CVE-2026-100829 is a critical mitigation bypass vulnerability in the DOM security component of Mozilla Firefox. It allows an attacker to bypass security controls, potentially leading to complete compromise of confidentiality, integrity, and availability. The issue has been fixed in Firefox ESR 153.4 and Firefox 157, as well as Thunderbird 153.4 and 157.

CVE-2026-100828 is a critical vulnerability in Mozilla Firefox's Bookmarks & History component that allows mitigation bypass. It affects Firefox and Thunderbird products but has been fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability. No known exploits are reported in the wild at this time.

CVE-2026-100826 is a denial-of-service vulnerability in the Storage: StorageManager component of Mozilla Firefox. The issue allows an attacker to cause a denial of service, impacting availability. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.