Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium6.3Invalid pointer in the JavaScript: WebAssembly component.EPSS 0.3%Apr 21, 2026
- High7.5Mitigation bypass in Firefox for Android.EPSS 0.4%Apr 21, 2026
- Medium6.5Mitigation bypass in the DOM: postMessage component.EPSS 0.2%Apr 21, 2026
- High7.5Use-after-free in the JavaScript Engine component.EPSS 0.6%Apr 21, 2026
- High7.3Incorrect boundary conditions in the WebRTC component.EPSS 0.5%Apr 21, 2026
- High7.3Incorrect boundary conditions in the WebRTC component.EPSS 0.5%Apr 21, 2026
- High7.3Uninitialized memory in the Audio/Video: Web Codecs component.EPSS 0.5%Apr 21, 2026
- High8.8Privilege escalation in the Graphics: WebRender component.EPSS 0.6%Apr 21, 2026
- High7.5Information disclosure due to uninitialized memory in the Graphics: Canvas2D component.EPSS 0.6%Apr 21, 2026
- Critical9.8Uninitialized memory in the Audio/Video: Web Codecs component.EPSS 0.6%Apr 21, 2026
- High7.5Use-after-free in the WebRTC component.EPSS 0.6%Apr 21, 2026
- High7.5Use-after-free in the DOM: Core & HTML component.EPSS 0.6%Apr 21, 2026
- Critical9.8Memory safety bugs present in Firefox 149.0.1 and Thunderbird 149.0.1.Apr 7, 2026
- Critical9.8Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1.Apr 7, 2026
- High8.8Incorrect boundary conditions in the Graphics: WebGPU component.Apr 7, 2026
- High8.8Incorrect boundary conditions, integer overflow in the Graphics: Text component.Apr 7, 2026
- Critical9.8Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1.Apr 7, 2026
- Critical9.8Memory safety bugs present in Firefox 148 and Thunderbird 148.Mar 24, 2026
- Medium6.5Spoofing issue in the Privacy: Anti-Tracking component.Mar 24, 2026
- High7.5Denial-of-service in the Libraries component in NSS.Mar 24, 2026
- High7.5Denial-of-service in the XML component.Mar 24, 2026
- Critical10.0Sandbox escape due to use-after-free in the Graphics: Canvas2D component.Mar 24, 2026
- Critical9.1Undefined behavior in the Audio/Video component.Mar 24, 2026
- Critical9.8Use-after-free in the JavaScript Engine component.Mar 24, 2026
- High8.8Privilege escalation in the IPC component.Mar 24, 2026